vitess-23: update protobufjs to 7.5.5 to remediate CVE-2026-41242 (#72463)

Signed-off-by: Brian Carey <brian.carey@chainguard.dev>

Export:  e52374e8976c0fdbfd2129c081b5225d1e34d8de

Author: brianmcarey

vitess-23.yaml

@@ -1,7 +1,7 @@
 package:
   name: vitess-23
   version: "23.0.3"
-  epoch: 14 # GHSA-xmrv-pmrh-hhx2
+  epoch: 15 # GHSA-xq3m-2v4x-88gg
   description: Autoscaling components for Kubernetes
   copyright:
     - license: Apache-2.0
@@ -108,6 +108,7 @@ pipeline:
       npm pkg set dependencies.svgo="^3.3.3" # GHSA-xpqw-6gx7-v673
       npm pkg set overrides.immutable="5.1.5" # GHSA-wf6x-7x77-mvgw
       npm pkg set overrides.flatted="3.4.2" # GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
+      npm pkg set overrides.protobufjs="7.5.5" # GHSA-xq3m-2v4x-88gg CVE-2026-41242
       # GHSA-3v7f-55p6-f55p GHSA-c2c7-rcm5-vvqj GHSA-27v5-c462-wpq7 GHSA-j3q9-mxjg-w52f GHSA-48c2-rrv3-qjmp
       jq '.overrides["picomatch@2"] = "2.3.2" | .overrides["picomatch@4"] = "4.0.4" | .dependencies["path-to-regexp"] = "8.4.0" | .overrides["yaml@1"] = "1.10.3" | .overrides["yaml@2"] = "2.8.3"' package.json > package.json.tmp && mv package.json.tmp package.json