build(deps): Bump github.com/bufbuild/buf from 1.4.0 to 1.28.1

[dependabot]

Bumps github.com/bufbuild/buf from 1.4.0 to 1.28.1.

Release notes

Sourced from github.com/bufbuild/buf's releases.

v1.28.1

• The buf curl command has been updated to support the use of multiple schemas. This allows users to specify multiple --schema flags and/or to use both --schema and --reflect flags at the same time. The result is that additional sources can be consulted to resolve an element. This can be useful when the result of an RPC contains extensions or values in google.protobuf.Any messages that are not defined in the same schema that defines the RPC service.
• Fix issue where buf lint incorrectly reports error when (buf.validate.field).required is set for an optional field in proto3.

v1.28.0

• Add lint rules for protovalidate. buf lint will now verify that your protovalidate rules are valid. A single rule PROTOVALIDATE has been added to the DEFAULT group - given that protovalidate is net new, this does not represent a breaking change.
• Update buf beta price with the latest pricing information.
• Display a warning when reading a buf.lock with dependencies with b1 or b3 digests. b1 and b3 digests will be deprecated in a future version. Run buf mod update to update dependency digests.

v1.27.2

• Fix issue where buf build and other commands may fail when handling certain archives created on macOS that contain files with extended attributes.

v1.27.1

• Fix issue in v1.27.0 where --path did not work with workspaces under certain scenarios.

v1.27.0

• Fix issue where buf generate --exclude-path was not properly excluding paths for remote modules.
• Fix issue where buf curl had a user agent that did not properly place the extension as a suffix.
• Update buf beta price with the latest pricing information.

v1.26.1

• Fix issue where buf build -o did not properly output files with the .txtpb extension in Protobuf text format.

v1.26.0

• Add support for the --http2-prior-knowledge flag when running buf curl against secure "https" URLs. This can be used with gRPC servers, that only support HTTP/2, when used with a network (layer 4) load balancer, that does not support protocol negotiation in TLS handshake.

v1.25.1

• Fix issue where all files were being iterated over when using the --path flag.
• Fix issue where the directory . was incorrectly accepted as a value for the directories key in buf.work.yaml.

v1.25.0

• Add txtpb format to handle the Protobuf text format. and automatically recognize .txtpb files as Protobuf text files. The txtpb format can now be used with all buf commands that take images as input or output, such as build, convert, and curl.

v1.24.0

• Update buf mod update to block updates that will result in conflicting .proto files across dependencies.
• Replace bin format with binpb format, and support the .binpb file extension. .binpb is now the canonical file extension for binary-encoded Protobuf data. The bin format and the .bin file extension continue to be accepted.
• Remove support for go subdomain in .netrc. This was used as part of the remote generation alpha, which has been fully deprecated in favor of remote plugins and remote packages. See buf.build/blog/remote-packages-remote-plugins-approaching-v1 for more details.
• Update buf beta price with the latest pricing information.

v1.23.1

• Fix issue where buf beta graph would not print modules within a workspace that had no dependencies or dependents.
• Fix issue where buf beta graph would print warnings for missing dependencies that were actually present.

... (truncated)

Changelog

Sourced from github.com/bufbuild/buf's changelog.

[v1.28.1] - 2023-11-15

• The buf curl command has been updated to support the use of multiple schemas. This allows users to specify multiple --schema flags and/or to use both --schema and --reflect flags at the same time. The result is that additional sources can be consulted to resolve an element. This can be useful when the result of an RPC contains extensions or values in google.protobuf.Any messages that are not defined in the same schema that defines the RPC service.
• Fix issue where buf lint incorrectly reports error when (buf.validate.field).required is set for an optional field in proto3.

[v1.28.0] - 2023-11-10

• Add lint rules for protovalidate. buf lint will now verify that your protovalidate rules are valid. A single rule PROTOVALIDATE has been added to the DEFAULT group - given that protovalidate is net new, this does not represent a breaking change.
• Update buf beta price with the latest pricing information.
• Display a warning when reading a buf.lock with dependencies with b1 or b3 digests. b1 and b3 digests will be deprecated in a future version. Run buf mod update to update dependency digests.

[v1.27.2] - 2023-10-27

• Fix issue where buf build and other commands may fail when handling certain archives created on macOS that contain files with extended attributes.

[v1.27.1] - 2023-10-16

• Fix issue in v1.27.0 where --path did not work with workspaces under certain scenarios.

[v1.27.0] - 2023-10-04

• Fix issue where buf generate --exclude-path was not properly excluding paths for remote modules.
• Fix issue where buf curl had a user agent that did not properly place the extension as a suffix.
• Update buf beta price with the latest pricing information.

[v1.26.1] - 2023-08-09

• Fix issue where buf build -o did not properly output files with the .txtpb extension in Protobuf text format.

[v1.26.0] - 2023-08-09

• Add support for the --http2-prior-knowledge flag when running buf curl against secure "https" URLs. This can be used with gRPC servers, that only support HTTP/2, when used with a network (layer 4) load balancer, that does not support protocol negotiation in TLS handshake.

... (truncated)

Commits

• 68e18ce Release v1.28.1 (#2591)
• 61bc015 Fix buf lint mistaking proto3 optional fields for oneof fields (#2590)
• 819a804 Allow buf curl to use multiple schemas when resolving elements (#2587)
• aaf2d2c Detect checked out branch by reading git HEAD file (#2570)
• 9aaf28d Print count of unrecognized bytes in "buf curl" (#2586)
• 7b3ad25 Upgrade go dependencies (#2583)
• 82103ef Less slice construction/copying thanks to generics (#2584)
• d99a5fb Change mockSyncHandler to testSyncHandler (#2581)
• e5a7a1c Update slack message for release drafts (#2582)
• ec9eeeb Bump bufbuild/buf-setup-action from 1.27.2 to 1.28.0 (#2573)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

The following labels could not be found: T:dependencies, S:automerge.

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.