Update protoc, connectrpc/python, and pgv plugins

plugins/bufbuild/validate-cpp/v1.3.0/.dockerignore

@@ -0,0 +1,2 @@
+*
+!Dockerfile

plugins/bufbuild/validate-cpp/v1.3.0/Dockerfile

@@ -0,0 +1,9 @@
+# syntax=docker/dockerfile:1.19
+FROM golang:1.25.5-bookworm AS build
+RUN CGO_ENABLED=0 go install -ldflags "-s -w" -trimpath github.com/envoyproxy/protoc-gen-validate/cmd/protoc-gen-validate-cpp@v1.3.0
+
+FROM scratch
+COPY --from=build --link /etc/passwd /etc/passwd
+COPY --from=build --link --chown=root:root /go/bin/protoc-gen-validate-cpp .
+USER nobody
+ENTRYPOINT [ "/protoc-gen-validate-cpp" ]

plugins/bufbuild/validate-cpp/v1.3.0/buf.plugin.yaml

@@ -0,0 +1,12 @@
+version: v1
+name: buf.build/bufbuild/validate-cpp
+plugin_version: v1.3.0
+source_url: https://github.com/bufbuild/protoc-gen-validate
+description: Deprecated in favor of https://github.com/bufbuild/protovalidate-cc which does not require code generation.
+deps:
+  - plugin: buf.build/protocolbuffers/cpp:v33.2
+output_languages:
+  - cpp
+spdx_license_id: Apache-2.0
+license_url: https://github.com/bufbuild/protoc-gen-validate/blob/v1.3.0/LICENSE
+deprecated: true

plugins/bufbuild/validate-go/v1.3.0/.dockerignore

@@ -0,0 +1,2 @@
+*
+!Dockerfile

plugins/bufbuild/validate-go/v1.3.0/Dockerfile

@@ -0,0 +1,9 @@
+# syntax=docker/dockerfile:1.19
+FROM golang:1.25.5-bookworm AS build
+RUN CGO_ENABLED=0 go install -ldflags "-s -w" -trimpath github.com/envoyproxy/protoc-gen-validate/cmd/protoc-gen-validate-go@v1.3.0
+
+FROM scratch
+COPY --from=build --link /etc/passwd /etc/passwd
+COPY --from=build --link --chown=root:root /go/bin/protoc-gen-validate-go .
+USER nobody
+ENTRYPOINT [ "/protoc-gen-validate-go" ]

plugins/bufbuild/validate-go/v1.3.0/buf.plugin.yaml

@@ -0,0 +1,13 @@
+version: v1
+name: buf.build/bufbuild/validate-go
+plugin_version: v1.3.0
+source_url: https://github.com/bufbuild/protoc-gen-validate
+integration_guide_url: https://github.com/bufbuild/protoc-gen-validate/blob/main/docs.md#go
+description: Deprecated in favor of https://github.com/bufbuild/protovalidate-go which does not require code generation.
+deps:
+  - plugin: buf.build/protocolbuffers/go:v1.36.10
+output_languages:
+  - go
+spdx_license_id: Apache-2.0
+license_url: https://github.com/bufbuild/protoc-gen-validate/blob/v1.3.0/LICENSE
+deprecated: true

plugins/connectrpc/python/v0.6.0/.dockerignore

@@ -0,0 +1,2 @@
+*
+!Dockerfile

plugins/connectrpc/python/v0.6.0/Dockerfile

@@ -0,0 +1,16 @@
+# syntax=docker/dockerfile:1.19
+FROM python:3.11.14-bookworm AS build
+WORKDIR /app
+RUN python -mvenv /app
+RUN . ./bin/activate \
+ && pip install --no-cache-dir protoc-gen-connect-python==0.6.0 \
+ && pip uninstall --yes pip setuptools \
+ && rm -f bin/activate.fish bin/activate.csh bin/Activate.ps1
+
+FROM gcr.io/distroless/python3-debian12:latest@sha256:8ce6bba3f793ba7d834467dfe18983c42f9b223604970273e9e3a22b1891fc27 AS base
+
+FROM scratch
+COPY --link --from=base / /
+COPY --link --from=build --chmod=0755 /app /app
+USER nobody
+ENTRYPOINT [ "/app/bin/protoc-gen-connect-python" ]

plugins/connectrpc/python/v0.6.0/buf.plugin.yaml

@@ -0,0 +1,19 @@
+version: v1
+name: buf.build/connectrpc/python
+plugin_version: v0.6.0
+source_url: https://github.com/connectrpc/connect-python
+description: Generates client and server stubs for Connect Python. Compatible with the Connect RPC protocol.
+spdx_license_id: Apache-2.0
+license_url: https://github.com/connectrpc/connect-python/blob/v0.6.0/LICENSE
+deps:
+  - plugin: buf.build/protocolbuffers/python:v33.2
+output_languages:
+  - python
+registry:
+  python:
+    package_type: "runtime"
+    # https://github.com/connectrpc/connect-python/blob/v0.6.0/protoc-gen-connect-python/pyproject.toml#L11
+    requires_python: ">=3.10"
+    deps:
+      # https://pypi.org/project/connect-python/
+      - "connect-python >= 0.6.0"

plugins/protocolbuffers/cpp/v33.2/.dockerignore

@@ -0,0 +1,4 @@
+*
+!BUILD
+!cpp.cc
+!Dockerfile

plugins/protocolbuffers/cpp/v33.2/BUILD

@@ -0,0 +1,7 @@
+cc_binary(
+    name = "protoc-gen-cpp",
+    srcs = ["cpp.cc"],
+    deps = [
+        "//:protoc_lib",
+    ],
+)

plugins/protocolbuffers/cpp/v33.2/Dockerfile

@@ -0,0 +1,30 @@
+# syntax=docker/dockerfile:1.19
+FROM debian:bookworm-20251117 AS build
+
+ARG TARGETARCH
+ARG BAZEL_OPTS="--host_jvm_args=-Djava.net.preferIPv4Stack=true"
+
+RUN apt-get update \
+ && apt-get install -y curl git cmake build-essential autoconf clang libc++-dev libtool pkg-config unzip zip
+RUN curl -fsSL -o /usr/local/bin/bazelisk https://github.com/bazelbuild/bazelisk/releases/download/v1.25.0/bazelisk-linux-${TARGETARCH} \
+ && chmod +x /usr/local/bin/bazelisk \
+ && mkdir /build \
+ && chown nobody:nogroup /build \
+ && usermod --home /build nobody
+
+USER nobody
+WORKDIR /build
+RUN curl -fsSL -o protoc.tar.gz https://github.com/protocolbuffers/protobuf/releases/download/v33.2/protobuf-33.2.tar.gz \
+ && tar --strip-components=1 -zxf protoc.tar.gz \
+ && rm protoc.tar.gz
+RUN bazelisk ${BAZEL_OPTS} build '//:protoc_lib'
+COPY --link BUILD cpp.cc plugins/
+RUN bazelisk ${BAZEL_OPTS} build '//plugins:protoc-gen-cpp.stripped'
+
+FROM gcr.io/distroless/cc-debian12:latest@sha256:0c8eac8ea42a167255d03c3ba6dfad2989c15427ed93d16c53ef9706ea4691df AS base
+
+FROM scratch
+COPY --from=base --link / /
+COPY --from=build --link --chmod=0755 /build/bazel-bin/plugins/protoc-gen-cpp .
+USER nobody
+ENTRYPOINT ["/protoc-gen-cpp"]

plugins/protocolbuffers/cpp/v33.2/buf.plugin.yaml

@@ -0,0 +1,11 @@
+version: v1
+name: buf.build/protocolbuffers/cpp
+plugin_version: v33.2
+source_url: https://github.com/protocolbuffers/protobuf
+description: Base types for C++. Generates message and enum types.
+output_languages:
+  - cpp
+spdx_license_id: BSD-3-Clause
+license_url: https://github.com/protocolbuffers/protobuf/blob/v33.2/LICENSE
+registry:
+  cmake: {}

plugins/protocolbuffers/cpp/v33.2/cpp.cc

@@ -0,0 +1,7 @@
+#include <google/protobuf/compiler/cpp/generator.h>
+#include <google/protobuf/compiler/plugin.h>
+
+int main(int argc, char *argv[]) {
+  google::protobuf::compiler::cpp::CppGenerator generator;
+  return google::protobuf::compiler::PluginMain(argc, argv, &generator);
+}

plugins/protocolbuffers/csharp/v33.2/.dockerignore

@@ -0,0 +1,5 @@
+*
+!BUILD
+!csharp.cc
+!Dockerfile
+!build.csproj

plugins/protocolbuffers/csharp/v33.2/BUILD

@@ -0,0 +1,7 @@
+cc_binary(
+    name = "protoc-gen-csharp",
+    srcs = ["csharp.cc"],
+    deps = [
+        "//:protoc_lib",
+    ],
+)

plugins/protocolbuffers/csharp/v33.2/Dockerfile

@@ -0,0 +1,36 @@
+# syntax=docker/dockerfile:1.19
+FROM debian:bookworm-20251117 AS build
+
+ARG TARGETARCH
+ARG BAZEL_OPTS="--host_jvm_args=-Djava.net.preferIPv4Stack=true"
+
+RUN apt-get update \
+ && apt-get install -y curl git cmake build-essential autoconf clang libc++-dev libtool pkg-config unzip zip
+RUN curl -fsSL -o /usr/local/bin/bazelisk https://github.com/bazelbuild/bazelisk/releases/download/v1.25.0/bazelisk-linux-${TARGETARCH} \
+ && chmod +x /usr/local/bin/bazelisk \
+ && mkdir /build \
+ && chown nobody:nogroup /build \
+ && usermod --home /build nobody
+
+USER nobody
+WORKDIR /build
+RUN curl -fsSL -o protoc.tar.gz https://github.com/protocolbuffers/protobuf/releases/download/v33.2/protobuf-33.2.tar.gz \
+ && tar --strip-components=1 -zxf protoc.tar.gz \
+ && rm protoc.tar.gz
+RUN bazelisk ${BAZEL_OPTS} build '//:protoc_lib'
+COPY --link BUILD csharp.cc plugins/
+RUN bazelisk ${BAZEL_OPTS} build '//plugins:protoc-gen-csharp.stripped'
+
+FROM mcr.microsoft.com/dotnet/sdk:8.0.416-bookworm-slim@sha256:874c4613d5ebf8b328ad920a90640c8dea9758bdbe61dc191dbcbed03721fc79 AS dotnetrestore
+WORKDIR /build
+COPY --link ./build.csproj /build/build.csproj
+RUN mkdir /nuget && dotnet restore --packages /nuget
+
+FROM gcr.io/distroless/cc-debian12:latest@sha256:0c8eac8ea42a167255d03c3ba6dfad2989c15427ed93d16c53ef9706ea4691df AS base
+
+FROM scratch
+COPY --from=base --link / /
+COPY --link --from=dotnetrestore /nuget /nuget
+COPY --from=build --link --chmod=0755 /build/bazel-bin/plugins/protoc-gen-csharp .
+USER nobody
+ENTRYPOINT ["/protoc-gen-csharp"]

plugins/protocolbuffers/csharp/v33.2/buf.plugin.yaml

@@ -0,0 +1,18 @@
+version: v1
+name: buf.build/protocolbuffers/csharp
+plugin_version: v33.2
+source_url: https://github.com/protocolbuffers/protobuf
+description: Base types for C#. Generates message and enum types.
+output_languages:
+  - csharp
+spdx_license_id: BSD-3-Clause
+license_url: https://github.com/protocolbuffers/protobuf/blob/v33.2/LICENSE
+registry:
+  opts:
+    - base_namespace=
+  nuget:
+    target_frameworks:
+      - netstandard2.0
+    deps:
+      - name: Google.Protobuf
+        version: 3.33.2

plugins/protocolbuffers/csharp/v33.2/build.csproj

@@ -0,0 +1,8 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <PropertyGroup>
+    <TargetFramework>netstandard2.0</TargetFramework>
+  </PropertyGroup>
+  <ItemGroup>
+    <PackageReference Include="Google.Protobuf" Version="3.33.2" />
+  </ItemGroup>
+</Project>

plugins/protocolbuffers/csharp/v33.2/csharp.cc

@@ -0,0 +1,7 @@
+#include <google/protobuf/compiler/csharp/csharp_generator.h>
+#include <google/protobuf/compiler/plugin.h>
+
+int main(int argc, char *argv[]) {
+  google::protobuf::compiler::csharp::Generator generator;
+  return google::protobuf::compiler::PluginMain(argc, argv, &generator);
+}

plugins/protocolbuffers/java/v33.2/.dockerignore

@@ -0,0 +1,4 @@
+*
+!BUILD
+!Dockerfile
+!java.cc

plugins/protocolbuffers/java/v33.2/BUILD

@@ -0,0 +1,7 @@
+cc_binary(
+    name = "protoc-gen-java",
+    srcs = ["java.cc"],
+    deps = [
+        "//:protoc_lib",
+    ],
+)

plugins/protocolbuffers/java/v33.2/Dockerfile

@@ -0,0 +1,30 @@
+# syntax=docker/dockerfile:1.19
+FROM debian:bookworm-20251117 AS build
+
+ARG TARGETARCH
+ARG BAZEL_OPTS="--host_jvm_args=-Djava.net.preferIPv4Stack=true"
+
+RUN apt-get update \
+ && apt-get install -y curl git cmake build-essential autoconf clang libc++-dev libtool pkg-config unzip zip
+RUN curl -fsSL -o /usr/local/bin/bazelisk https://github.com/bazelbuild/bazelisk/releases/download/v1.25.0/bazelisk-linux-${TARGETARCH} \
+ && chmod +x /usr/local/bin/bazelisk \
+ && mkdir /build \
+ && chown nobody:nogroup /build \
+ && usermod --home /build nobody
+
+USER nobody
+WORKDIR /build
+RUN curl -fsSL -o protoc.tar.gz https://github.com/protocolbuffers/protobuf/releases/download/v33.2/protobuf-33.2.tar.gz \
+ && tar --strip-components=1 -zxf protoc.tar.gz \
+ && rm protoc.tar.gz
+RUN bazelisk ${BAZEL_OPTS} build '//:protoc_lib'
+COPY --link BUILD java.cc plugins/
+RUN bazelisk ${BAZEL_OPTS} build '//plugins:protoc-gen-java.stripped'
+
+FROM gcr.io/distroless/cc-debian12:latest@sha256:0c8eac8ea42a167255d03c3ba6dfad2989c15427ed93d16c53ef9706ea4691df AS base
+
+FROM scratch
+COPY --from=base --link / /
+COPY --from=build --link --chmod=0755 /build/bazel-bin/plugins/protoc-gen-java .
+USER nobody
+ENTRYPOINT ["/protoc-gen-java"]

plugins/protocolbuffers/java/v33.2/buf.plugin.yaml

@@ -0,0 +1,19 @@
+version: v1
+name: buf.build/protocolbuffers/java
+plugin_version: v33.2
+source_url: https://github.com/protocolbuffers/protobuf
+description: Base types for Java. Generates message and enum types.
+output_languages:
+  - java
+spdx_license_id: BSD-3-Clause
+license_url: https://github.com/protocolbuffers/protobuf/blob/v33.2/LICENSE
+registry:
+  maven:
+    deps:
+      - com.google.protobuf:protobuf-java:4.33.2
+    additional_runtimes:
+      - name: lite
+        deps:
+          - com.google.protobuf:protobuf-javalite:4.33.2
+          - build.buf:protobuf-javalite:4.33.2
+        opts: [lite]

plugins/protocolbuffers/java/v33.2/java.cc

@@ -0,0 +1,7 @@
+#include <google/protobuf/compiler/java/generator.h>
+#include <google/protobuf/compiler/plugin.h>
+
+int main(int argc, char *argv[]) {
+  google::protobuf::compiler::java::JavaGenerator generator;
+  return google::protobuf::compiler::PluginMain(argc, argv, &generator);
+}

plugins/protocolbuffers/kotlin/v33.2/.dockerignore

@@ -0,0 +1,4 @@
+*
+!BUILD
+!Dockerfile
+!kotlin.cc

plugins/protocolbuffers/kotlin/v33.2/BUILD

@@ -0,0 +1,7 @@
+cc_binary(
+    name = "protoc-gen-kotlin",
+    srcs = ["kotlin.cc"],
+    deps = [
+        "//:protoc_lib",
+    ],
+)

plugins/protocolbuffers/kotlin/v33.2/Dockerfile

@@ -0,0 +1,30 @@
+# syntax=docker/dockerfile:1.19
+FROM debian:bookworm-20251117 AS build
+
+ARG TARGETARCH
+ARG BAZEL_OPTS="--host_jvm_args=-Djava.net.preferIPv4Stack=true"
+
+RUN apt-get update \
+ && apt-get install -y curl git cmake build-essential autoconf clang libc++-dev libtool pkg-config unzip zip
+RUN curl -fsSL -o /usr/local/bin/bazelisk https://github.com/bazelbuild/bazelisk/releases/download/v1.25.0/bazelisk-linux-${TARGETARCH} \
+ && chmod +x /usr/local/bin/bazelisk \
+ && mkdir /build \
+ && chown nobody:nogroup /build \
+ && usermod --home /build nobody
+
+USER nobody
+WORKDIR /build
+RUN curl -fsSL -o protoc.tar.gz https://github.com/protocolbuffers/protobuf/releases/download/v33.2/protobuf-33.2.tar.gz \
+ && tar --strip-components=1 -zxf protoc.tar.gz \
+ && rm protoc.tar.gz
+RUN bazelisk ${BAZEL_OPTS} build '//:protoc_lib'
+COPY --link BUILD kotlin.cc plugins/
+RUN bazelisk ${BAZEL_OPTS} build '//plugins:protoc-gen-kotlin.stripped'
+
+FROM gcr.io/distroless/cc-debian12:latest@sha256:0c8eac8ea42a167255d03c3ba6dfad2989c15427ed93d16c53ef9706ea4691df AS base
+
+FROM scratch
+COPY --from=base --link / /
+COPY --from=build --link --chmod=0755 /build/bazel-bin/plugins/protoc-gen-kotlin .
+USER nobody
+ENTRYPOINT ["/protoc-gen-kotlin"]

plugins/protocolbuffers/kotlin/v33.2/buf.plugin.yaml

@@ -0,0 +1,27 @@
+version: v1
+name: buf.build/protocolbuffers/kotlin
+plugin_version: v33.2
+source_url: https://github.com/protocolbuffers/protobuf
+integration_guide_url: https://protobuf.dev/getting-started/kotlintutorial
+description: Base types for Kotlin. Generates message and enum types.
+deps:
+  - plugin: buf.build/protocolbuffers/java:v33.2
+output_languages:
+  - kotlin
+spdx_license_id: BSD-3-Clause
+license_url: https://github.com/protocolbuffers/protobuf/blob/v33.2/LICENSE
+registry:
+  maven:
+    compiler:
+      kotlin:
+        version: 1.8.22
+    deps:
+      - com.google.protobuf:protobuf-kotlin:4.33.2
+      - org.jetbrains.kotlin:kotlin-stdlib:1.8.22
+      - org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.8.22
+    additional_runtimes:
+      - name: lite
+        deps:
+          - com.google.protobuf:protobuf-kotlin-lite:4.33.2
+          - org.jetbrains.kotlin:kotlin-stdlib:1.8.22
+        opts: [lite]

plugins/protocolbuffers/kotlin/v33.2/kotlin.cc

@@ -0,0 +1,7 @@
+#include <google/protobuf/compiler/kotlin/generator.h>
+#include <google/protobuf/compiler/plugin.h>
+
+int main(int argc, char *argv[]) {
+  google::protobuf::compiler::kotlin::KotlinGenerator generator;
+  return google::protobuf::compiler::PluginMain(argc, argv, &generator);
+}