From eae4f817fc763c6c9be2aba8b345e9fc5b4c2fe4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 16 Jun 2026 05:02:55 +0000
Subject: [PATCH 1/2] Bump protobufjs from 8.0.2 to 8.6.3

Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) from 8.0.2 to 8.6.3.
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/protobufjs/protobuf.js/compare/protobufjs-v8.0.2...protobufjs-v8.6.3)

---
updated-dependencies:
- dependency-name: protobufjs
  dependency-version: 8.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 12 +++++-------
 package.json      |  2 +-
 2 files changed, 6 insertions(+), 8 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 8a44172adf..cebe8ad3fd 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -37,7 +37,7 @@
         "mkdirp": "3.0.1",
         "multer": "2.1.1",
         "node-fetch": "3.3.1",
-        "protobufjs": "8.0.2",
+        "protobufjs": "8.6.3",
         "sequelize": "6.37.8",
         "umzug": "3.8.2"
       },
@@ -7271,15 +7271,13 @@
       "dev": true
     },
     "node_modules/protobufjs": {
-      "version": "8.0.2",
-      "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-8.0.2.tgz",
-      "integrity": "sha512-TNF0rhMsp+g21us9R2aj3iA7JY9pG7G/3zyRiULl6NS+AurvgQ7iWA203QcykDGSosHxMsV+K6GTR15RBWw1bA==",
-      "hasInstallScript": true,
+      "version": "8.6.3",
+      "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-8.6.3.tgz",
+      "integrity": "sha512-alQyzT0j401LGBtwsqu6uprjR6pfNH1UJf9N6GBFMjIcd+HzTe0/HrjAbFCqun+zvnfLarrxAtMM2xvZ+kFZ5A==",
       "inBundle": true,
       "license": "BSD-3-Clause",
       "dependencies": {
-        "@types/node": ">=13.7.0",
-        "long": "^5.0.0"
+        "long": "^5.3.2"
       },
       "engines": {
         "node": ">=12.0.0"
diff --git a/package.json b/package.json
index eb02760d7a..dfc01a25b3 100644
--- a/package.json
+++ b/package.json
@@ -39,7 +39,7 @@
     "mkdirp": "3.0.1",
     "multer": "2.1.1",
     "node-fetch": "3.3.1",
-    "protobufjs": "8.0.2",
+    "protobufjs": "8.6.3",
     "sequelize": "6.37.8",
     "umzug": "3.8.2"
   },

From 91c17a027c980c1ddb6bb9ee6edff85c95b17cf4 Mon Sep 17 00:00:00 2001
From: George Raduta <george.raduta@cern.ch>
Date: Tue, 16 Jun 2026 14:57:02 +0200
Subject: [PATCH 2/2] Remove protobufjs as direct dependency

---
 package-lock.json | 15 ---------------
 package.json      |  2 --
 2 files changed, 17 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index cebe8ad3fd..86d64a1620 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -19,7 +19,6 @@
         "mariadb",
         "multer",
         "node-fetch",
-        "protobufjs",
         "sequelize",
         "umzug"
       ],
@@ -37,7 +36,6 @@
         "mkdirp": "3.0.1",
         "multer": "2.1.1",
         "node-fetch": "3.3.1",
-        "protobufjs": "8.6.3",
         "sequelize": "6.37.8",
         "umzug": "3.8.2"
       },
@@ -7270,19 +7268,6 @@
       "integrity": "sha512-vtK/94akxsTMhe0/cbfpR+syPuszcuwhqVjJq26CuNDgFGj682oRBXOP5MJpv2r7JtE8MsiepGIqvvOTBwn2vA==",
       "dev": true
     },
-    "node_modules/protobufjs": {
-      "version": "8.6.3",
-      "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-8.6.3.tgz",
-      "integrity": "sha512-alQyzT0j401LGBtwsqu6uprjR6pfNH1UJf9N6GBFMjIcd+HzTe0/HrjAbFCqun+zvnfLarrxAtMM2xvZ+kFZ5A==",
-      "inBundle": true,
-      "license": "BSD-3-Clause",
-      "dependencies": {
-        "long": "^5.3.2"
-      },
-      "engines": {
-        "node": ">=12.0.0"
-      }
-    },
     "node_modules/proxy-addr": {
       "version": "2.0.7",
       "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
diff --git a/package.json b/package.json
index dfc01a25b3..e1e71fabe1 100644
--- a/package.json
+++ b/package.json
@@ -39,7 +39,6 @@
     "mkdirp": "3.0.1",
     "multer": "2.1.1",
     "node-fetch": "3.3.1",
-    "protobufjs": "8.6.3",
     "sequelize": "6.37.8",
     "umzug": "3.8.2"
   },
@@ -79,7 +78,6 @@
     "mariadb",
     "multer",
     "node-fetch",
-    "protobufjs",
     "sequelize",
     "umzug"
   ]