build(deps): bump protobufjs from 7.5.8 to 8.2.0

[dependabot]

Bumps protobufjs from 7.5.8 to 8.2.0.

Release notes

Sourced from protobufjs's releases.

protobufjs: v8.2.0

8.2.0 (2026-05-09)

Features

• Add finishInto() for zero-copy serialization into existing buffers (#2196) (657d6f1)
• Add textformat extension (#2233) (4639e29)
• cli: Add optional protoc-gen-pbjs plugin (#2231) (c9b6a2d)
• cli: Align json-module with static-module output (#2227) (a015091)
• Roundtrip unknown fields (#2209) (76fa03c)

Bug Fixes

• Accept URL-safe base64 input (#2207) (57a3821)
• Also resolve common definitions by file name (#2218) (e533950)
• Apply oneof last-value wins during decode (#2193) (cf35cdc)
• Consistently handle scalar map keys (#2186) (29b1183)
• Consistently reject truncated strings (#2205) (689e911)
• Correct parsedOptions TypeScript types (#2217) (dbe8d77)
• Decode bool values from full varints (#2192) (7b8d5c1)
• Decode fields by full wire tag (#2197) (f6264b1)
• Decode missing map message values as empty messages (#2206) (51c1a4f)
• Generate TypeScript class properties for extensions (#2187) (ec04bee)
• Harden parser input handling (#2240) (53a27fc)
• Improve Deno and Bun compatibility (#2228) (6034af8)
• Improve descriptor extension interoperability (#2232) (effbbc4)
• Make optional Node module lookups bundler-safe (#2237) (366030b)
• Merge singular message fields while decoding (#2195) (14d9df7)
• Omit proto3 implicit scalar defaults (#2208) (ea1b003)
• Read non-minimal 32-bit varints correctly (#2198) (5650a07)
• Reject malformed field tag varints (#2224) (1904533)
• Restore first-match namespace lookup (#2235) (4fb8900)
• Support proto2 extension groups (#2181) (1039194)
• Tighten key2Re regex with non-capturing group (#2225) (c87b149)
• Validate field and group tags while decoding (#2200) (c09d4f7)

Performance Improvements

• Avoid constructor setup during resolve (#2211) (1bf3c07)
• Preallocate arrays in converters (#2219) (62d2155)
• Reduce generated code overhead (#2212) (45ec503)
• Tweak reader varint32 and string cases (#2220) (4076ea8)

protobufjs: v8.0.3

8.0.3 (2026-04-27)

... (truncated)

Changelog

Sourced from protobufjs's changelog.

8.2.0 (2026-05-09)

Features

• Add finishInto() for zero-copy serialization into existing buffers (#2196) (657d6f1)
• Add textformat extension (#2233) (4639e29)
• cli: Add optional protoc-gen-pbjs plugin (#2231) (c9b6a2d)
• cli: Align json-module with static-module output (#2227) (a015091)
• Roundtrip unknown fields (#2209) (76fa03c)

Bug Fixes

• Accept URL-safe base64 input (#2207) (57a3821)
• Also resolve common definitions by file name (#2218) (e533950)
• Apply oneof last-value wins during decode (#2193) (cf35cdc)
• Consistently handle scalar map keys (#2186) (29b1183)
• Consistently reject truncated strings (#2205) (689e911)
• Correct parsedOptions TypeScript types (#2217) (dbe8d77)
• Decode bool values from full varints (#2192) (7b8d5c1)
• Decode fields by full wire tag (#2197) (f6264b1)
• Decode missing map message values as empty messages (#2206) (51c1a4f)
• Generate TypeScript class properties for extensions (#2187) (ec04bee)
• Harden parser input handling (#2240) (53a27fc)
• Improve Deno and Bun compatibility (#2228) (6034af8)
• Improve descriptor extension interoperability (#2232) (effbbc4)
• Make optional Node module lookups bundler-safe (#2237) (366030b)
• Merge singular message fields while decoding (#2195) (14d9df7)
• Omit proto3 implicit scalar defaults (#2208) (ea1b003)
• Read non-minimal 32-bit varints correctly (#2198) (5650a07)
• Reject malformed field tag varints (#2224) (1904533)
• Restore first-match namespace lookup (#2235) (4fb8900)
• Support proto2 extension groups (#2181) (1039194)
• Tighten key2Re regex with non-capturing group (#2225) (c87b149)
• Validate field and group tags while decoding (#2200) (c09d4f7)

Performance Improvements

• Avoid constructor setup during resolve (#2211) (1bf3c07)
• Preallocate arrays in converters (#2219) (62d2155)
• Reduce generated code overhead (#2212) (45ec503)
• Tweak reader varint32 and string cases (#2220) (4076ea8)

8.1.0 (skipped)

This version was skipped. Note that the 8.1.x-experimental line has diverged and should not be used.

8.0.3 (2026-04-27)

... (truncated)

Commits

• f8d5f3f chore: release master (#2194)
• 53a27fc fix: Harden parser input handling (#2240)
• c9b6a2d feat(cli): Add optional protoc-gen-pbjs plugin (#2231)
• 4639e29 feat: Add textformat extension (#2233)
• effbbc4 fix: Improve descriptor extension interoperability (#2232)
• 366030b fix: Make optional Node module lookups bundler-safe (#2237)
• 4fb8900 fix: Restore first-match namespace lookup (#2235)
• 657d6f1 feat: Add finishInto() for zero-copy serialization into existing buffers (#2196)
• 50a5c1d docs: Deprecate legacy decorators (#2238)
• cdb296c docs: Clarify json/static module and TypeScript docs (#2230)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot can't resolve your JavaScript dependency files. Because of this, Dependabot cannot update this pull request.

[dependabot]

Dependabot can't resolve your JavaScript dependency files. Because of this, Dependabot cannot update this pull request.