From 18fcc51c2045d2ae0c3c2d05fd654fccb85c8c96 Mon Sep 17 00:00:00 2001
From: Gabe Pearhill <gabepearhill@google.com>
Date: Mon, 15 Jun 2026 13:35:47 -0700
Subject: [PATCH] fix: bump protobufjs handwritten/* dependencies to address
 vulnerabilities

---
 handwritten/bigquery-storage/package.json | 4 ++--
 handwritten/cloud-profiler/package.json   | 2 +-
 handwritten/datastore/package.json        | 2 +-
 handwritten/firestore/package.json        | 4 ++--
 handwritten/pubsub/package.json           | 2 +-
 handwritten/spanner/package.json          | 2 +-
 6 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/handwritten/bigquery-storage/package.json b/handwritten/bigquery-storage/package.json
index 7ba1612d2aa5..4b9b4b8cdca1 100644
--- a/handwritten/bigquery-storage/package.json
+++ b/handwritten/bigquery-storage/package.json
@@ -37,10 +37,10 @@
     "google-auth-library": "^10.0.0",
     "google-gax": "^5.0.0",
     "long": "^5.2.0",
-    "protobufjs": "^7.5.5"
+    "protobufjs": "^7.6.4"
   },
   "peerDependencies": {
-    "protobufjs": "~7.5.5"
+    "protobufjs": "~7.6.4"
   },
   "devDependencies": {
     "@google-cloud/bigquery": "^8.0.0",
diff --git a/handwritten/cloud-profiler/package.json b/handwritten/cloud-profiler/package.json
index d611db7b43b1..9bf0b555fb6f 100644
--- a/handwritten/cloud-profiler/package.json
+++ b/handwritten/cloud-profiler/package.json
@@ -41,7 +41,7 @@
     "ms": "^2.1.3",
     "pprof": "4.0.0",
     "pretty-ms": "^7.0.0",
-    "protobufjs": "~7.5.5",
+    "protobufjs": "~7.6.4",
     "semver": "^7.0.0",
     "teeny-request": "^9.0.0"
   },
diff --git a/handwritten/datastore/package.json b/handwritten/datastore/package.json
index 6ba66386354c..bb2991a44ba7 100644
--- a/handwritten/datastore/package.json
+++ b/handwritten/datastore/package.json
@@ -50,7 +50,7 @@
     "extend": "^3.0.2",
     "google-gax": "^5.0.2-rc.1",
     "is": "^3.3.0",
-    "protobufjs": "^7.5.5",
+    "protobufjs": "^7.6.4",
     "split-array-stream": "^2.0.0",
     "stream-events": "^1.0.5"
   },
diff --git a/handwritten/firestore/package.json b/handwritten/firestore/package.json
index 42744f778c67..758e51a82ace 100644
--- a/handwritten/firestore/package.json
+++ b/handwritten/firestore/package.json
@@ -71,7 +71,7 @@
     "fast-deep-equal": "^3.1.3",
     "functional-red-black-tree": "^1.0.1",
     "google-gax": "^5.0.1",
-    "protobufjs": "^7.5.3"
+    "protobufjs": "^7.6.4"
   },
   "devDependencies": {
     "@google-cloud/cloud-rad": "^0.4.10",
@@ -111,7 +111,7 @@
     "mocha": "^11.7.1",
     "nise": "^6.1.1",
     "path-to-regexp": "^8.2.0",
-    "protobufjs-cli": "^1.1.3",
+    "protobufjs-cli": "^1.3.3",
     "proxyquire": "^2.1.3",
     "sinon": "21.0.3",
     "through2": "^4.0.2",
diff --git a/handwritten/pubsub/package.json b/handwritten/pubsub/package.json
index 875998dd31a6..52ae8f310d43 100644
--- a/handwritten/pubsub/package.json
+++ b/handwritten/pubsub/package.json
@@ -95,7 +95,7 @@
     "nise": "^6.1.1",
     "null-loader": "^4.0.1",
     "path-to-regexp": "^8.2.0",
-    "protobufjs": "~7.5.0",
+    "protobufjs": "~7.6.4",
     "proxyquire": "^2.1.3",
     "sinon": "21.0.3",
     "tmp": "^0.2.3",
diff --git a/handwritten/spanner/package.json b/handwritten/spanner/package.json
index 7fd006f25c3e..e32d28f16d91 100644
--- a/handwritten/spanner/package.json
+++ b/handwritten/spanner/package.json
@@ -82,7 +82,7 @@
     "lodash.snakecase": "^4.1.1",
     "merge-stream": "^2.0.0",
     "p-queue": "^6.0.2",
-    "protobufjs": "^7.4.0",
+    "protobufjs": "^7.6.4",
     "retry-request": "^8.0.0",
     "split-array-stream": "^2.0.0",
     "stack-trace": "0.0.10",