fix(security): upgrade protobufjs to 7.5.5

[sahitya-chandra]

Summary

• Pins protobufjs to 7.5.5 via root resolutions to patch GHSA-xq3m-2v4x-88gg (critical — arbitrary code execution, affects <7.5.5).
• The vulnerable 7.4.0 was pulled in transitively through @opentelemetry/otlp-transformer@0.203.0, causing Security Audit / audit (yarn npm audit --all --recursive --severity critical) to fail on every open PR and block merges.

Test plan

• yarn install --mode=update-lockfile succeeds and updates the protobufjs entry in yarn.lock to 7.5.5.
• yarn npm audit --all --recursive --severity critical reports No audit suggestions.
• CI Security Audit / audit job passes on this PR.

[coderabbitai]

📝 Walkthrough

Walkthrough

The package.json file has been updated to add a new entry in the resolutions map, pinning the protobufjs dependency to version 7.5.5. This is a single line addition with no changes to other dependencies, scripts, or configuration logic in the file.

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description check	✅ Passed	The description is comprehensive and directly related to the changeset, explaining the security vulnerability being patched and the test plan verification.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Title check	✅ Passed	The title 'fix(security): upgrade protobufjs to 7.5.5' directly and specifically describes the main change - pinning protobufjs to a patched version to address a critical security vulnerability.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/security-protobufjs-cve

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}