fix(security): Patch protobufjs for CVE-2026-41242.

[jbocce]

Context

See GHSA-xq3m-2v4x-88gg

Changes & Results

Updated protobufjs version.

Testing

Run the automated tests.

Checklist

PR

• My Pull Request title is descriptive, accurate and follows the
  semantic-release format and guidelines.

Code

• My code has been well-documented (function documentation, inline comments,
  etc.)

Public Documentation Updates

• The documentation page has been updated as necessary for any public API
  additions or removals.

Greptile Summary

This PR patches the critical arbitrary code execution vulnerability CVE-2026-41242 (GHSA-xq3m-2v4x-88gg) in protobufjs by adding a resolution override pinning it to 7.5.5, the confirmed fixed release for the 7.x branch. All three lock files (yarn.lock, bun.lock) are updated consistently.

Confidence Score: 5/5

Safe to merge — minimal-scope security patch with no logic changes.

The change is a single dependency version bump to a confirmed patched release. Both lock files are updated consistently with package.json, and 7.5.5 is the official fixed version per NVD and the GitHub advisory. No application code is modified.

No files require special attention.

Important Files Changed

Filename	Overview
package.json	Adds protobufjs@7.5.5 to the resolutions block to force the patched version across all transitive dependents, addressing CVE-2026-41242.
yarn.lock	Bumps all resolved protobufjs entries from 7.5.3 to 7.5.5, consistent with the resolution override in package.json.
bun.lock	Bumps protobufjs from 7.5.3 to 7.5.5 and adds it to the overrides section, consistent with the yarn.lock and package.json changes.

_{Reviews (1): Last reviewed commit: "fix(security): Patch protobufjs for CVE-..." | Re-trigger Greptile}

[netlify]

✅ Deploy Preview for ohif-dev ready!

Name	Link
🔨 Latest commit	cf681e4
🔍 Latest deploy log	https://app.netlify.com/projects/ohif-dev/deploys/69ea5358d9a9b4000856357b
😎 Deploy Preview	https://deploy-preview-5974--ohif-dev.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.