Is it possible to upgrade protobufjs to >= 7.2.5

[simongarciam]

• This only affects the JavaScript OpenTelemetry library
• This may affect other libraries, but I would like to get opinions here first

We use this library and our security scans are picking up the protobufjs vulnerability

See https://nvd.nist.gov/vuln/detail/CVE-2023-36665

there are multiple instances of this library being used in the code base, this is one example
https://github.com/open-telemetry/opentelemetry-js/blob/main/experimental/packages/otlp-transformer/package.json#L93

[simongarciam]

Thanks for the update!