chore(deps): update dependency protobufjs to v8

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
protobufjs	^7.6.3 → ^8.0.0

---

Release Notes

protobufjs/protobuf.js (protobufjs)

v8.8.1

Compare Source

Bug Fixes

• parse character, octal, and hex string escapes (#​2426) (0ad9a28)
• Reject overflowing length prefixes (#​2439) (507c5d0)
• Support custom enum JSON names (#​2440) (2f7e339)

v8.8.0

Compare Source

Features

• Support Edition 2026 (#​2414) (8845d2a)

Bug Fixes

• deps: update protoc-gen-es benchmark target to v2.14.0 (#​2411) (2fd85aa)
• Harden ProtoJSON and Text Format parsing (#​2418) (9f0bc74)
• Limit Any.fromObject recursion (#​2419) (3dd064e)
• Preserve symbol visibility (#​2415) (ef47921)
• Respect declared lengths while decoding (#​2420) (1650d74)

v8.7.2

Compare Source

Bug Fixes

• Also use TextDecoder for loose UTF-8 decoding (#​2408) (5851a3b)
• Parse numeric defaults according to field type (#​2402) (bb2d836)
• Parse numeric descriptor defaults by field type (#​2406) (09f24ec)
• preserve first enum alias from JSON descriptors (#​2389) (8304739)
• Preserve negative zero in codegen formatters (#​2403) (92ddc9b)
• Preserve non-finite defaults in toObject (#​2393) (a38b925)

Performance Improvements

• Optimize writer allocs and packed varint reads (#​2405) (64cc8f1)

v8.7.1

Compare Source

Bug Fixes

• accept repeated NullValue elements in ProtoJSON (#​2373) (ad0b9bb)
• Apply enum options regardless of declaration order (#​2384) (b5009b0)
• Base64-encode bytes field defaults in toObject (#​2375) (e552511)
• cli: Handle extensions during sparse generation (#​2386) (1965d37)
• cli: Match declaration imports to generated modules (#​2385) (3cf7420)
• cli: Preserve array element union precedence in pbts (#​2378) (2a697a5)
• cli: Resolve imports from cwd by default (#​2381) (65f659a)
• Merge repeated message-valued fields within map entries (#​2364) (13b417b)
• Parse aggregate objects in option arrays (#​2379) (71c2532)
• Parse Any type URLs in aggregate options (#​2383) (666fa6b)
• Parse bracketed special field names in options (#​2377) (dd1870b)
• Parse map fields inside groups (#​2382) (8a2c427)
• Preserve proto names in bundled definitions (#​2390) (7ba0557)
• Remove circular LongBits dependency (#​2387) (829f5cd)

v8.7.0

Compare Source

Features

• Rework encoder architecture and add additional fast paths (#​2359) (e912baf)

Bug Fixes

• Preserve parsed json_name in field options (#​2363) (1cdd91e)
• Reject truncated declarations without TypeError (#​2358) (5995f2a)
• Resolve feature defaults before lazy codegen (d59d100)

v8.6.6

Compare Source

Bug Fixes

• Filter Any type_url lookups to message types (#​2346) (88f0aa1)
• handle EOF during options parsing (#​2352) (fa5c73a)

v8.6.5

Compare Source

Bug Fixes

• Implement open/closed enum semantics (#​2337) (2abd056)
• Omit implicit scalar defaults during encode (#​2336) (b8d0b84)
• Support hardened prototype properties (#​2313) (1aca107)
• Use own-property semantics for internal maps (#​2335) (9f97fe4)

v8.6.4

Compare Source

Bug Fixes

• Avoid materializing ProtoJSON WKT defaults (#​2326) (6aaee14)
• Support runtimes without ICU (#​2331) (cd6e2e2)

v8.6.3

Compare Source

Bug Fixes

• Consistently reject truncated 64-bit varints (#​2322) (ec868f3)
• Include interfaces in API docs and fix FieldMask doc comment (#​2319) (c98a4e5)
• Preserve explicit URLs in path resolution (#​2320) (c97cdbe)
• Remove renamed reflection objects by identity (#​2324) (9c9f8ee)
• Support Node ESM named imports from CommonJS entrypoints (#​2315) (3359e64)
• Support utf8_validation during decode (#​2325) (4dff8e4)

v8.6.2

Compare Source

Bug Fixes

• Discard unknown fields by default (#​2310) (bf12d56)

v8.6.1

Compare Source

Bug Fixes

• cli: Consistently wait for pbts output before JSDoc exit (#​2306) (87ff02f)
• cli: Preserve indentation in multiline declarations (#​2307) (b38748d)
• Preserve descriptor metadata needed by protoc-gen-pbjs (#​2308) (a3b8dc7)
• Remove inquire submodule (#​2305) (cc42616)

v8.6.0

Compare Source

Features

• Add spec-compliant protojson extension (#​2297) (ffd3d51)

Bug Fixes

• Avoid name collisions in generated code (#​2302) (ce013ab)
• cli: Vendor patched Catharsis for pbts (#​2304) (29f7c96)
• Remove postinstall script (#​2299) (b8ed7be)
• Support null-prototype plain objects in converters (#​2300) (bf20d84)

v8.5.0

Compare Source

Features

• Add option to discard unknown fields (#​2289) (f8c489b)
• Expose RPC metadata on service methods (#​2286) (711a279)

Bug Fixes

• cli: Consistently handle derived names (#​2293) (9e80030)
• Consistently reject null message argument in fromObject (#​2287) (0f6178d)
• Prefer nested type resolution over global fallback (#​2288) (4b4c703)

v8.4.2

Compare Source

Bug Fixes

• Align reserved range semantics (#​2277) (48aa10f)
• Coerce int32 values before writer sizing (#​2281) (53c2e54)

v8.4.1

Compare Source

Bug Fixes

• Correct util helper typing (#​2279) (664a3d1)
• Decode omitted long map values as Long (#​2264) (a71254b)
• Expose Field rule declaration (#​2261) (1664cbf)
• Improve message return typings (#​2274) (0f54489)
• Misc utility hardening (#​2272) (3de631b)
• Omit proto3 synthetic oneofs in toObject (#​2273) (9a78a4a)
• Preserve writer state in static encodeDelimited (#​2275) (d28ec57)
• Register empty common in light build (#​2262) (6cc4bc2)
• Treat fixed64 as unsigned in converters (#​2265) (d8a6983)

v8.4.0

Compare Source

Features

• Support BigInt conversions (#​2257) (36873e6)

v8.3.0

Compare Source

Features

• Improve generated typings (#​2244) (faa424e)

v8.2.1

Compare Source

Bug Fixes

• Consolidate depth limit checks (#​2246) (9050289)
• Preserve explicit enum zero if not the default (#​2249) (9621b35)

Performance Improvements

• Slightly optimize generated code (#​2242) (c41160c)

v8.2.0

Compare Source

Features

• Add finishInto() for zero-copy serialization into existing buffers (#​2196) (657d6f1)
• Add textformat extension (#​2233) (4639e29)
• cli: Add optional protoc-gen-pbjs plugin (#​2231) (c9b6a2d)
• cli: Align json-module with static-module output (#​2227) (a015091)
• Roundtrip unknown fields (#​2209) (76fa03c)

Bug Fixes

• Accept URL-safe base64 input (#​2207) (57a3821)
• Also resolve common definitions by file name (#​2218) (e533950)
• Apply oneof last-value wins during decode (#​2193) (cf35cdc)
• Consistently handle scalar map keys (#​2186) (29b1183)
• Consistently reject truncated strings (#​2205) (689e911)
• Correct parsedOptions TypeScript types (#​2217) (dbe8d77)
• Decode bool values from full varints (#​2192) (7b8d5c1)
• Decode fields by full wire tag (#​2197) (f6264b1)
• Decode missing map message values as empty messages (#​2206) (51c1a4f)
• Generate TypeScript class properties for extensions (#​2187) (ec04bee)
• Harden parser input handling (#​2240) (53a27fc)
• Improve Deno and Bun compatibility (#​2228) (6034af8)
• Improve descriptor extension interoperability (#​2232) (effbbc4)
• Make optional Node module lookups bundler-safe (#​2237) (366030b)
• Merge singular message fields while decoding (#​2195) (14d9df7)
• Omit proto3 implicit scalar defaults (#​2208) (ea1b003)
• Read non-minimal 32-bit varints correctly (#​2198) (5650a07)
• Reject malformed field tag varints (#​2224) (1904533)
• Restore first-match namespace lookup (#​2235) (4fb8900)
• Support proto2 extension groups (#​2181) (1039194)
• Tighten key2Re regex with non-capturing group (#​2225) (c87b149)
• Validate field and group tags while decoding (#​2200) (c09d4f7)

Performance Improvements

• Avoid constructor setup during resolve (#​2211) (1bf3c07)
• Preallocate arrays in converters (#​2219) (62d2155)
• Reduce generated code overhead (#​2212) (45ec503)
• Tweak reader varint32 and string cases (#​2220) (4076ea8)

v8.0.3

Compare Source

Bug Fixes

• Accept imports after declarations (#​2178) (24651c9)

v8.0.2

Compare Source

Bug Fixes

• Accept empty statements in proto definitions (#​2176) (a26dd61)
• Correct alternate comment mode line numbers (#​2159) (e550cd2)
• Correct ES6 wrapper imports in static-module output (#​2151) (88f5a76)
• Don't include [@exports](https://redirect.github.com/exports) for enums (#​1824) (eb256f0)
• Forward group end tag in lazy decode (#​2162) (3a48675)
• Harden input handling (#​2163) (6eb3a3b)
• limit depth of recursion in Reader.prototype.skipType (#​2143) (0f643d5)
• Parse empty repeated options (#​2161) (8c5060f)
• refactor the code to remove subpackages (#​2146) (2fe8b09)
• Remove jsdoc includePattern (#​2089) (0fead2e)
• Run pbts jsdoc without a shell (#​2160) (648b760)
• Support .cjs and .mjs extensions in pbts (#​2152) (aef016a)

v8.0.1

Compare Source

Bug Fixes

• bump protobufjs dependency version for cli package (#​2128) (549b05e)
• correct json syntax in tsconfig.json (#​2120) (8065625)
• descriptor: guard oneof index for non-Type parents (#​2122) (1cac5cf)
• do not allow setting proto in Message constructor (#​2126) (f05e3c3)
• filter invalid characters from the type name (#​2127) (535df44)

v8.0.0

Compare Source

⚠ BREAKING CHANGES

• add Edition 2024 Support (#​2060)

Features

• add Edition 2024 Support (#​2060) (53e8492)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: feac8f17-fe65-467c-add3-5c70de02c875

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}