chore: update protobufjs dependency to version 8.7.1 across monorepo …

[kedar49]

Pull Request Checklist

Please ensure that your PR meets the following requirements:

• I have read the CONTRIBUTING guide.
• I have updated the documentation (if applicable).
• My code follows the style guidelines of this project.
• I have performed a self-review of my own code.
• I have added tests that prove my fix is effective or that my feature works.
• New and existing unit tests pass locally with my changes.

Description

Upgraded transitive dependency protobufjs to 8.7.1 across the workspace to address security vulnerabilities and update packages.

Changes

• Root package.json: Added protobufjs: ^8.7.1 to overrides.
• apps/next-js/package.json & package-lock.json: Overrode to protobufjs: ^8.7.1, removing transitive dependencies of @protobufjs/*.
• examples/javascript-web/package.json & package-lock.json: Overrode to protobufjs: ^8.7.1, removing transitive dependencies of @protobufjs/*.
• packages/vitepress-plugin-moss/package.json & pnpm-lock.yaml: Added protobufjs: ^8.7.1 override.
• moss-live-labs/examples/image-search/setup-js/package.json: Updated override version for onnxruntime-web to ^8.7.1.

Testing

Ran the following verification suites successfully:

• Root: npm run type-check && npm run lint
• Next.js App: npm run build && npm run test
• VitePress Plugin: pnpm run test && pnpm run build
• Setup-JS: npm run type-check
• Javascript-Web: npm run type-check && npm run build

Closes #375

Type of Change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• This change requires a documentation update

[CLAassistant]

All committers have signed the CLA.

[kedar49]

@HarshaNalluru you can review and merge this PR

[Sravan1011]

@HarshaNalluru you can review and merge this PR
@HarshaNalluru you can go ahead with the merge

[Copilot]

Pull request overview

Updates the JavaScript workspace dependency graph to ensure protobufjs resolves to 8.7.1 (primarily via package manager overrides), addressing security/maintenance concerns raised in #375.

Changes:

• Adds protobufjs: ^8.7.1 overrides in root and affected subprojects (npm + pnpm).
• Regenerates lockfiles so protobufjs resolves to 8.7.1 and removes now-unneeded @protobufjs/* transitive packages.
• Adjusts an onnxruntime-web-scoped override in the image-search setup project to force protobufjs ^8.7.1.

Reviewed changes

Copilot reviewed 5 out of 8 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
package.json	Adds a root-level npm override to prefer protobufjs ^8.7.1.
apps/next-js/package.json	Adds an app-level override for protobufjs ^8.7.1.
apps/next-js/package-lock.json	Updates locked protobufjs to 8.7.1 and removes @protobufjs/* entries.
examples/javascript-web/package.json	Adds an example-level override for protobufjs ^8.7.1.
examples/javascript-web/package-lock.json	Updates locked protobufjs to 8.7.1 and removes @protobufjs/* entries.
packages/vitepress-plugin-moss/package.json	Adds a pnpm override for protobufjs ^8.7.1.
packages/vitepress-plugin-moss/pnpm-lock.yaml	Updates pnpm resolution so protobufjs resolves to 8.7.1 and drops @protobufjs/*.
moss-live-labs/examples/image-search/setup-js/package.json	Updates the onnxruntime-web-scoped override to force protobufjs ^8.7.1.

Files not reviewed (3)

• apps/next-js/package-lock.json: Generated file
• examples/javascript-web/package-lock.json: Generated file
• packages/vitepress-plugin-moss/pnpm-lock.yaml: Generated file

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Sravan1011]

@kedar49 can you fix and update with these changes

[kedar49]

@kedar49 can you fix and update with these changes

Which changes ? Above is just review of my changes by co-pilot

[Sravan1011]

@kedar49 can you fix and update with these changes

Which changes ? Above is just review of my changes by co-pilot

Copilot flagged a few duplicate/leftover keys in the overrides blocks that need cleanup before this can merge:
apps/next-js/package.json: "postcss" is listed twice in overrides — duplicate key.
moss-live-labs/examples/image-search/setup-js/package.json: the onnxruntime-web override still has both "protobufjs": "^7.5.5" and "protobufjs": "^8.7.1" — looks like the old line wasn't removed when the new one was added.
packages/vitepress-plugin-moss/package.json: worth double-checking the override block (postcss, protobufjs, minimatch, vite) for the same duplicate-key issue.

[kedar49]

@kedar49 can you fix and update with these changes

Which changes ? Above is just review of my changes by co-pilot

Copilot flagged a few duplicate/leftover keys in the overrides blocks that need cleanup before this can merge: apps/next-js/package.json: "postcss" is listed twice in overrides — duplicate key. moss-live-labs/examples/image-search/setup-js/package.json: the onnxruntime-web override still has both "protobufjs": "^7.5.5" and "protobufjs": "^8.7.1" — looks like the old line wasn't removed when the new one was added. packages/vitepress-plugin-moss/package.json: worth double-checking the override block (postcss, protobufjs, minimatch, vite) for the same duplicate-key issue.

Check the changes in file again, those are not duplicate entries,one line removed nd one lined added.