📦 Update webhook-pubsub-publisher packages (major) #3098

renovate · 2025-08-28T19:02:33Z

This PR contains the following updates:

Package	Change	Age	Confidence
@google-cloud/pubsub	`4.9.0` -> `5.2.0`
probot (source)	`13.4.0` -> `14.0.2`
smee-client	`2.0.4` -> `4.3.1`
vitest (source)	`2.1.9` -> `3.2.4`

See all other Renovate PRs on the Dependency Dashboard

Release Notes

googleapis/nodejs-pubsub (@google-cloud/pubsub)

`v5.2.0`

Compare Source

Features

Ad-hoc, targeted debug logging (#2062) (dce83c7)
Add timeout option and graceful shutdown to Subscription.close() (#2068) (8dee024)

`v5.1.0`

Compare Source

Features

Add SchemaViolationReason to IngestionFailureEvent (#2045) (3348e3e)
Use specific W3CTraceContextPropagator for OTel (#2036) (c9a9656)

Bug Fixes

deps: Update dependency @opentelemetry/semantic-conventions to ~1.33.0 (#2038) (4eb46c5)
deps: Update dependency @opentelemetry/semantic-conventions to ~1.34.0 (#2048) (1072c2d)
deps: Update dependency protobufjs to ~7.5.0 (#2041) (b65eaeb)
Set messaging.operation in createAttributes (#2030) (b8d513a)

`v5.0.0`

Compare Source

⚠ BREAKING CHANGES

migrate to Node 18 (#2024)
remove (broken) legacy OTel support
remove legacy ack deadline options
move maxExtension into subscriber options

Miscellaneous Chores

Migrate to Node 18 (#2024) (9ad808a)

`v4.11.0`

Compare Source

Features

Add required messaging.operation span attrs for OTel sem convs 1.24 (#2019) (70ed2d7)

Bug Fixes

deps: Update dependency @opentelemetry/semantic-conventions to ~1.29.0 (#2012) (bfe8243)
deps: Update dependency @opentelemetry/semantic-conventions to ~1.30.0 (#2014) (7f8366a)
Type widening to match gapic, and two typing fixes (#2020) (9cd73b3)

`v4.10.0`

Compare Source

Features

Add Kafka-based sources to IngestionDataSourceSettings proto and IngestionFailureEvent proto (#2007) (08d00a1)

Bug Fixes

deps: Update dependency @opentelemetry/semantic-conventions to ~1.28.0 (#2001) (c8e5811)

probot/probot (probot)

Bug Fixes

add explicit undefined to optional types, and update webhooks types (#1979) (05179ff)

`v14.0.0`

Compare Source

feat!: v14 (#2152) (97c4057)

BREAKING CHANGES

Probot is now an ESM only library
drop Node > 20.17 and Node 21 support
Switch to GitHub's OpenAPI specification for Webhooks (from @octokit/webhooks v13)
Remove legacy REST enpoint method access. Users will now have to use the octokit.rest.* methods
Remove express server from within Probot.
All properties marked as private in Typescript, including Probot#state, are now private class fields.
createNodeMiddleware() is now an async function
@sentry/node needs to be installed separately if needed
ioredis needs to be installed separately if needed
The built-in server now listens on localhost by default instead of 0.0.0.0.

Probot v14 Migration Guide

ESM Only Package

Probot is now exclusively an ESM package. Either migrate to ESM (recommended), or use `require(esm).

Migrating to ESM:

Update package.json:

{
  "type": "module"
}

Replace all CommonJS require() statements with ESM import syntax
Update your TypeScript configuration:

{
  "compilerOptions": {
    "module": "node16",
    "moduleResolution": "node16"
  }
}

For require(esm):

For TypeScript 5.7-5.8: Use "module": "nodenext" and "moduleResolution": "nodenext"
For TypeScript 5.9+: Use "module": "node20" and "moduleResolution": "node20"

Node.js Version Requirements

Minimum supported version: Node.js 20.18+ and 22+
Node.js 21 support has been dropped

Webhook Type Definitions

Replace webhook type imports:

// Before
import { WebhookEvent } from "@&#8203;octokit/webhooks-types";

// After
import { WebhookEvent } from "@&#8203;octokit/openapi-webhooks-types-migration";

REST API Access Pattern

Legacy endpoint methods have been removed:

app.on("issues.opened", async (context) => {
  // Before
  // const issue = await context.octokit.issues.get(context.issue());

  // After
  const issue = await context.octokit.rest.issues.get(context.issue());
});

Express Server Removal

The built-in Express server has been removed. To use Express:

Install Express:

npm install express

Update your Probot setup:

import Express from "express";
import { createNodeMiddleware, createProbot } from "probot";

const express = Express();

const app = (probot) => {
  probot.on("push", async () => {
    probot.log.info("Push event received");
  });
};

const middleware = await createNodeMiddleware(app, {
  webhooksPath: "/api/github/webhooks",
  probot: createProbot({
    env: {
      APP_ID,
      PRIVATE_KEY,
      WEBHOOK_SECRET,
    },
  }),
});

express.use(middleware);
express.use(Express.json());
express.get("/custom-route", (req, res) => {
  res.json({ status: "ok" });
});

express.listen(3000, () => {
  console.log(`Server is running at http://localhost:3000`);
});

HTTP Server no longer listens on `0.0.0.0` by default

The built-in HTTP server will now listen on localhost by default, instead of listening on all available interfaces.
If you wish to change this behaviour, you can use the HOST environment variable, or the --host variable for the probot run command.

env HOST=0.0.0.0 <start script>
probot run --host=0.0.0.0 app.js

Asynchronous Middleware Initialization

createNodeMiddleware() is now asynchronous:

import { createNodeMiddleware } from "probot";
import app from "../app.js";

// Before
// const middleware = createNodeMiddleware(app);

// After
const middleware = await createNodeMiddleware(app);