Bump protobufjs from 6.8.8 to 7.0.0

[dependabot]

Bumps protobufjs from 6.8.8 to 6.11.3.

Release notes

Sourced from protobufjs's releases.

v6.11.3

6.11.3 (2022-05-20)

Bug Fixes

• deps: use eslint 8.x (#1728) (a8681ce)
• do not let setProperty change the prototype (#1731) (b5f1391)

v6.11.2

6.11.2 (2021-04-30)

• regenerated index.d.ts to fix the unintended breaking change in types.

v6.11.1

6.11.1 (2021-04-29)

Bug Fixes

• parse.js "parent.add(oneof)“ error (@​leon776) (#1602)

v6.11.0

6.11.0 (2021-04-28)

Features

• support for proto3 optional fields (@​alexander-fenster) (#1584)
• add --no-service option for pbjs (@​mdouglass) (#1577)

Bug Fixes

• do not assign oneof members to default values, use null instead (@​alexander-fenster) (#1597)

Dependencies

• set @types/node to >= 13.7.0 in dependencies (@​indutny) (#1575)

protobuf.js v6.10.2

Bug Fixes

• es6 export enum (#1446) (9f33784)
• make parsedOptions appear in method JSON representation (#1506) (3d29969)
• utf8 -> utf16 decoding bug on surrogate pairs (#1486) (75172cd)

protobuf.js v6.10.1

... (truncated)

Changelog

Sourced from protobufjs's changelog.

6.11.3 (2022-05-20)

Bug Fixes

• deps: use eslint 8.x (#1728) (a8681ce)
• do not let setProperty change the prototype (#1731) (b5f1391)

6.11.2 (2021-04-30)

• regenerated index.d.ts to fix the unintended breaking change in types.

6.11.1 (2021-04-29)

Bug Fixes

• parse.js "parent.add(oneof)“ error (@​leon776) (#1602)

6.11.0 (2021-04-28)

Features

• support for proto3 optional fields (@​alexander-fenster) (#1584)
• add --no-service option for pbjs (@​mdouglass) (#1577)

Bug Fixes

• do not assign oneof members to default values, use null instead (@​alexander-fenster) (#1597)

Dependencies

• set @types/node to >= 13.7.0 in dependencies (@​indutny) (#1575)

6.10.2 (2020-11-13)

Bug Fixes

• es6 export enum (#1446) (9f33784)
• make parsedOptions appear in method JSON representation (#1506) (3d29969)
• utf8 -> utf16 decoding bug on surrogate pairs (#1486) (75172cd)

6.10.1 (2020-07-16)

Bug Fixes

... (truncated)

Commits

• b130dfd chore(6.x): release 6.11.3 (#1737)
• c2c17ae build: publish to main
• b2c6a5c build: run tests if ci label added (#1734)
• a8681ce fix(deps): use eslint 8.x (#1728)
• b5f1391 fix: do not let setProperty change the prototype (#1731)
• 7afd0a3 build: configure 6.x as default branch
• 37285d0 build: configure backports
• d127871 fix: rebuild type, release v6.11.2
• da9fdd2 fix(types): bring back Field.rule to .d.ts
• a2ccda1 chore: release v6.11.1
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by google-wombot, a new releaser for protobufjs since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

[jordanrburger]

We are getting alerts that this is a high severity vulnerability. Please fix ASAP.

[lewish]

This new version of protobuf generates invalid JS in certain situations such as:

1482-                case 4:                                                                                                                                                               
1483-                    if (message.labels === $util.emptyObject)                                                                                                                         
1484-                        message.labels = {};                                                                                                                                          
1485:                    let end2 = reader.uint32() + reader.pos;                                                                                                                          
1486-                    key = "";                                                                                                                                                         
1487-                    value = "";                                                                                                                                                       
1488:                    while (reader.pos < end2) {                                                                                                                                       
--                                                                                                                                                                                         
1493-                            break;                                                                                                                                                    
1494-                        case 2:                                                                                                                                                       
1495-                            value = reader.string();                                                                                                                                  
1496-                            break;                                                                                                                                                    
1497-                        default:                                                                                                                                                      
1498-                            reader.skipType(tag2 & 7);                                                                                                                                
1499-                            break;                                                                                                                                                    
1500-                        }                                                                                                                                                             
1501-                    }                                                                                                                                                                 
1502-                    message.labels[key] = value;                                                                                                                                      
1503-                    break;                                                                                                                                                            
1504-                case 5:                                                                                                                                                               
1505-                    message.partitionExpirationDays = reader.int32();                                                                                                                 
1506-                    break;                                                                                                                                                            
1507-                case 6:                                                                                                                                                               
1508-                    message.requirePartitionFilter = reader.bool();                                                                                                                   
1509-                    break;                                                                                                                                                            
1510-                case 7:                                                                                                                                                               
1511-                    if (message.additionalOptions === $util.emptyObject)                                                                                                              
1512-                        message.additionalOptions = {};                                                                                                                               
1513:                    let end2 = reader.uint32() + reader.pos;                                                                                                                          
1514-                    key = "";                                                                                                                                                         
1515-                    value = "";                                                                                                                                                       
1516:                    while (reader.pos < end2) {

the let end2 statement happens twice in the same scope, which is not OK.

Protobufjs probably needs to fixed upstream.

[lewish]

Currently trying to get this through: protobufjs/protobuf.js#1718

And then we'll need a new 6.x release of protobuf.js that we can roll this up to.

[dependabot]

A newer version of protobufjs exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.