build(deps): Bump github.com/bufbuild/buf from 1.4.0 to 1.70.0

[dependabot]

Bumps github.com/bufbuild/buf from 1.4.0 to 1.70.0.

Release notes

Sourced from github.com/bufbuild/buf's releases.

v1.70.0

• Add LSP completion for buf.gen.yaml, buf.yaml, and buf.policy.yaml files.
• Fix LSP textDocument/documentSymbol marking every symbol as deprecated.
• Add error for when a dependency is added to buf.yaml and is missing from buf.lock.
• Update the PROTOVALIDATE lint rule support checking NaN in const, in, not_in, gt, gte, lt and lte rules for float and double fields.
• Update the PROTOVALIDATE lint rule support to check (buf.validate.message).oneof rules and make sure they are well-formed and valid.

v1.69.0

• Increase check plugin WASM memory limits to 1GiB.
• Fix LSP stale diagnostics persisting after a file is closed or deleted.
• Fix handling of unprefixed newlines in block comments.
• Add LSP code lenses for buf.gen.yaml files: "Run buf generate" and "Check for plugin updates".
• Add LSP warnings for lint.ignore and breaking.ignore paths in buf.yaml that do not match any file in the workspace.

v1.68.4

• Fix duplicated extension tags across imports from compiler.

v1.68.3

• Fix buf format error handling for edition 2024.

v1.68.2

• Fix build failures for modules with a vendored descriptor.proto.
• Fix LSP incorrectly reporting "edition '2024' not yet fully supported" errors.
• Fix CEL compilation error messages in buf lint to use the structured error API instead of parsing cel-go's text output.
• Add --debug-address flag to buf lsp serve to provide debug and profile support.

v1.68.1

• Revert the use of the new compiler report format and properly ungate Editions 2024 features.
• Fix absolute imports (leading-dot) marked unused in diagnostics.

v1.68.0

This release ports buf to our new Protobuf compiler, already used to power the Buf LSP. It uses a query-driven frontend and a new AST and intermediate representation, designed from the ground up to bring several improvements:

• Better diagnostics. The new compiler produces rich, structured diagnostic reports with precise source locations. It also catches issues that protoc misses, such as duplicate repeated modifiers.
• Editions 2024 support. Full support for Protobuf Editions 2024.
• Faster and more memory efficient. Designed for large workspaces, the new compiler uses less memory and compiles faster than the previous implementation.

This is a seamless upgrade for buf users: no changes are required, the output has been automatically updated to a new, richer diagnostics report.

---

• Use new compiler for build process and support Editions 2024 features.
• Add LSP document links for buf.yaml deps, buf.gen.yaml remote plugins and input modules, buf.policy.yaml name and BSR plugins, and buf.lock dep names, making each a clickable link to its BSR page.
• Add LSP code lenses for buf.yaml files to update all dependencies (buf.dep.updateAll) or check for available updates (buf.dep.checkUpdates).
• Improve shell completions for buf flags with fixed value sets and file/directory arguments.
• Add buf curl URL path shell completions (service and method names) via server reflection, --schema, or the local buf module.
• Add support for Edition 2024 syntax to buf format.
• Fix buf generate --clean deleting files from nested plugin output directories.

... (truncated)

Changelog

Sourced from github.com/bufbuild/buf's changelog.

[v1.70.0] - 2026-05-25

• Add LSP completion for buf.gen.yaml, buf.yaml, and buf.policy.yaml files.
• Fix LSP textDocument/documentSymbol marking every symbol as deprecated.
• Add error for when a dependency is added to buf.yaml and is missing from buf.lock.
• Update the PROTOVALIDATE lint rule support checking NaN in const, in, not_in, gt, gte, lt and lte rules for float and double fields.
• Update the PROTOVALIDATE lint rule support to check (buf.validate.message).oneof rules and make sure they are well-formed and valid.

[v1.69.0] - 2026-04-29

• Increase check plugin WASM memory limits to 1GiB.
• Fix LSP stale diagnostics persisting after a file is closed or deleted.
• Fix handling of unprefixed newlines in block comments.
• Add LSP code lenses for buf.gen.yaml files: "Run buf generate" and "Check for plugin updates".
• Add LSP warnings for lint.ignore and breaking.ignore paths in buf.yaml that do not match any file in the workspace.

[v1.68.4] - 2026-04-22

• Fix duplicated extension tags across imports from compiler.

[v1.68.3] - 2026-04-20

• Fix buf format error handling for edition 2024.

[v1.68.2] - 2026-04-17

• Fix build failures for modules with a vendored descriptor.proto.
• Fix LSP incorrectly reporting "edition '2024' not yet fully supported" errors.
• Fix CEL compilation error messages in buf lint to use the structured error API instead of parsing cel-go's text output.
• Add --debug-address flag to buf lsp serve to provide debug and profile support.

[v1.68.1] - 2026-04-14

• Revert the use of the new compiler report format and properly ungate Editions 2024 features.
• Fix absolute imports (leading-dot) marked unused in diagnostics.

[v1.68.0] - 2026-04-14

• Use new compiler for build process and support Editions 2024 features.
• Add LSP document links for buf.yaml deps, buf.gen.yaml remote plugins and input modules, buf.policy.yaml name and BSR plugins, and buf.lock dep names, making each a clickable link to its BSR page.
• Add LSP code lenses for buf.yaml files to update all dependencies (buf.dep.updateAll) or check for available updates (buf.dep.checkUpdates).
• Improve shell completions for buf flags with fixed value sets and file/directory arguments.
• Add buf curl URL path shell completions (service and method names) via server reflection, --schema, or the local buf module.
• Add support for Edition 2024 syntax to buf format.
• Fix buf generate --clean deleting files from nested plugin output directories.

[v1.67.0] - 2026-04-01

... (truncated)

Commits

• 4f657db Release v1.70.0 (#4556)
• f278fa0 Bump buf.build/gen/go/bufbuild/registry/connectrpc/go from 1.19.2-20260507063...
• 977b89b Make upgrade (#4555)
• 88dfb34 Lint MessageRules.oneof in PROTOVALIDATE check (#4540)
• e96239e Filter out GIT_WORK_TREE from cloner environment variables (#4549)
• d0e7d39 Add env override test cases to git package (#4550)
• 3747817 Bump actions/create-github-app-token from 3.1.1 to 3.2.0 (#4544)
• 9eddb9c Make upgrade (#4548)
• d460060 Update README.md (#4547)
• 2dae477 Fix LSP documentSymbol marking every symbol as deprecated (#4531)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: S:automerge, T:dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.