From 374de76158d281f22ff40f17160cd1a9e692f536 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 21 Jul 2026 22:41:19 +0000
Subject: [PATCH 1/2] Initial plan


From ed829e0185717a3cd2bf6be8bf2bbed64d05aeb5 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 21 Jul 2026 22:43:26 +0000
Subject: [PATCH 2/2] fix: update protobufjs to 8.6.6 to resolve CVE-2026-59877

---
 package-lock.json | 6 +++---
 package.json      | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 2417df8..203ad7a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7079,9 +7079,9 @@
       }
     },
     "node_modules/protobufjs": {
-      "version": "8.6.3",
-      "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-8.6.3.tgz",
-      "integrity": "sha512-alQyzT0j401LGBtwsqu6uprjR6pfNH1UJf9N6GBFMjIcd+HzTe0/HrjAbFCqun+zvnfLarrxAtMM2xvZ+kFZ5A==",
+      "version": "8.6.6",
+      "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-8.6.6.tgz",
+      "integrity": "sha512-RkLIhE+Tdc2Kpq1F4Uw6OnpAXPca7B+GSDov/GqGCqNBpVyDskQ9yReZfgM+C7xw9AAix873iQZXbBWXj6NzYQ==",
       "license": "BSD-3-Clause",
       "dependencies": {
         "long": "^5.3.2"
diff --git a/package.json b/package.json
index e26b2e1..91e7dda 100644
--- a/package.json
+++ b/package.json
@@ -36,7 +36,7 @@
     "@babel/core": "7.29.6",
     "@opentelemetry/core": "2.8.0",
     "js-yaml": "3.15.0",
-    "protobufjs": "8.6.3",
+    "protobufjs": "8.6.6",
     "uuid": "11.1.1"
   },
   "engines": {