chore: release protobufjs-v7.x (#2174)

Author: github-actions[bot]

.github/workflows/release.yaml

@@ -3,12 +3,108 @@ on:
     branches:
       - protobufjs-v7.x
 name: release-please
+
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
+  id-token: write
+
 jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
       - uses: googleapis/release-please-action@v3
+        id: release
         with:
           command: manifest
           package-name: release-please-action
           default-branch: ${{ github.ref_name }}
+
+      - uses: actions/checkout@v6
+        if: ${{ steps.release.outputs.releases_created == 'true' }}
+
+      - uses: actions/setup-node@v6
+        if: ${{ steps.release.outputs.releases_created == 'true' }}
+        with:
+          node-version: 24
+          registry-url: https://registry.npmjs.org/
+
+      - name: Use npm with trusted publishing support
+        if: ${{ steps.release.outputs.releases_created == 'true' }}
+        run: npm install -g npm@^11.5.1
+
+      - name: Install dependencies
+        if: ${{ steps.release.outputs.releases_created == 'true' }}
+        run: npm install --ignore-scripts
+
+      - name: Install CLI dependencies
+        if: ${{ steps.release.outputs.releases_created == 'true' }}
+        run: npm --prefix cli install --ignore-scripts
+
+      - name: Build
+        if: ${{ steps.release.outputs.releases_created == 'true' }}
+        run: npm run build
+
+      - name: Test
+        if: ${{ steps.release.outputs.releases_created == 'true' }}
+        run: npm test
+
+      - name: Publish @protobufjs/aspromise
+        if: ${{ steps.release.outputs['lib/aspromise--release_created'] == 'true' }}
+        working-directory: lib/aspromise
+        run: npm publish --ignore-scripts --access public
+
+      - name: Publish @protobufjs/base64
+        if: ${{ steps.release.outputs['lib/base64--release_created'] == 'true' }}
+        working-directory: lib/base64
+        run: npm publish --ignore-scripts --access public
+
+      - name: Publish @protobufjs/codegen
+        if: ${{ steps.release.outputs['lib/codegen--release_created'] == 'true' }}
+        working-directory: lib/codegen
+        run: npm publish --ignore-scripts --access public
+
+      - name: Publish @protobufjs/eventemitter
+        if: ${{ steps.release.outputs['lib/eventemitter--release_created'] == 'true' }}
+        working-directory: lib/eventemitter
+        run: npm publish --ignore-scripts --access public
+
+      - name: Publish @protobufjs/fetch
+        if: ${{ steps.release.outputs['lib/fetch--release_created'] == 'true' }}
+        working-directory: lib/fetch
+        run: npm publish --ignore-scripts --access public
+
+      - name: Publish @protobufjs/float
+        if: ${{ steps.release.outputs['lib/float--release_created'] == 'true' }}
+        working-directory: lib/float
+        run: npm publish --ignore-scripts --access public
+
+      - name: Publish @protobufjs/inquire
+        if: ${{ steps.release.outputs['lib/inquire--release_created'] == 'true' }}
+        working-directory: lib/inquire
+        run: npm publish --ignore-scripts --access public
+
+      - name: Publish @protobufjs/path
+        if: ${{ steps.release.outputs['lib/path--release_created'] == 'true' }}
+        working-directory: lib/path
+        run: npm publish --ignore-scripts --access public
+
+      - name: Publish @protobufjs/pool
+        if: ${{ steps.release.outputs['lib/pool--release_created'] == 'true' }}
+        working-directory: lib/pool
+        run: npm publish --ignore-scripts --access public
+
+      - name: Publish @protobufjs/utf8
+        if: ${{ steps.release.outputs['lib/utf8--release_created'] == 'true' }}
+        working-directory: lib/utf8
+        run: npm publish --ignore-scripts --access public
+
+      - name: Publish protobufjs
+        if: ${{ steps.release.outputs.release_created == 'true' }}
+        run: npm publish --ignore-scripts --tag latest-7
+
+      - name: Publish protobufjs-cli
+        if: ${{ steps.release.outputs['cli--release_created'] == 'true' }}
+        working-directory: cli
+        run: npm publish --ignore-scripts --tag latest-1

.release-please-manifest.json

@@ -1,6 +1,6 @@
 {
-  ".": "7.5.5",
-  "cli": "1.2.0",
+  ".": "7.5.6",
+  "cli": "1.2.1",
   "lib/aspromise": "1.1.2",
   "lib/base64": "1.1.2",
   "lib/codegen": "2.0.5",

CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [7.5.6](https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.5...protobufjs-v7.5.6) (2026-04-27)
+
+
+### Bug Fixes
+
+* Backport input hardening and CLI fixes to 7.x ([#2173](https://github.com/protobufjs/protobuf.js/issues/2173)) ([75392ea](https://github.com/protobufjs/protobuf.js/commit/75392ea1b78bdc4faba027b5db44ad7c50e9c454))
+
 ## [7.5.4](https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.3...protobufjs-v7.5.4) (2025-08-15)
 
 

cli/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.2.1](https://github.com/protobufjs/protobuf.js/compare/protobufjs-cli-v1.2.0...protobufjs-cli-v1.2.1) (2026-04-27)
+
+
+### Bug Fixes
+
+* Backport input hardening and CLI fixes to 7.x ([#2173](https://github.com/protobufjs/protobuf.js/issues/2173)) ([75392ea](https://github.com/protobufjs/protobuf.js/commit/75392ea1b78bdc4faba027b5db44ad7c50e9c454))
+
 ## [1.2.0](https://github.com/protobufjs/protobuf.js/compare/protobufjs-cli-v1.1.4...protobufjs-cli-v1.2.0) (2025-04-15)
 
 

release-please-config.json

@@ -1,5 +1,5 @@
 {
-  "bootstrap-sha": "6fc37d9ea3502cdc08ef988494c041aacd0f7e7f",
+  "bootstrap-sha": "75392ea1b78bdc4faba027b5db44ad7c50e9c454",
   "packages": {
     "cli": {},
     ".": {},