protobufjs Prototype Pollution vulnerability

[pvlugter]

# npm audit report

protobufjs  6.10.0 - 7.2.3
Severity: high
protobufjs Prototype Pollution vulnerability - https://github.com/advisories/GHSA-h755-8qp9-cq85
fix available via `npm audit fix --force`
Will install [email protected], which is a breaking change
node_modules/protobufjs
  @grpc/proto-loader  0.6.0-pre1 - 0.6.13
  Depends on vulnerable versions of protobufjs
  node_modules/@grpc/proto-loader
    @grpc/grpc-js  1.4.0 - 1.6.7
    Depends on vulnerable versions of @grpc/proto-loader
    node_modules/@grpc/grpc-js

3 high severity vulnerabilities

To address all issues (including breaking changes), run:
  npm audit fix --force

[pvlugter]

Bumping to protobufjs 7 will be a breaking change. Also a separate package for the CLI:

• protobufjs 7.0.0 removes pbjs #398

Upgrading to protobufjs 7 would also allow addressing other issues:

• Support serialization of generated protobuf #326
• Use of protobuf.Message<IMyMessage> incompatible with generated typescript classes #422