chore: main: update protobufjs to fix CVE-2026-41242

[kim-tsao]

Description

Please explain the changes you made here.

Which issue(s) does this PR fix

• Fixes #?
• Fix CVE-2026-41242 by adding bumping protobufjs to v7.5.6 and pinning its transitive dependency @protobufjs/inquire to v1.1.0 to avoid the following error:

app:  Error: Failed to compile '../../node_modules/protobufjs/node_modules/@protobufjs/inquire/index.js':
app:    Critical dependency: the request of a dependency is an expression

• 1.10 fix for https://redhat.atlassian.net/browse/RHIDP-13303

PR acceptance criteria

Please make sure that the following steps are complete:

• GitHub Actions are completed and successful
• Unit Tests are updated and passing
• E2E Tests are updated and passing
• Documentation is updated if necessary (requirement for new features)
• Add a screenshot if the change is UX/UI related

How to test changes / Special notes to the reviewer

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.04%. Comparing base (5a6cf35) to head (aa328e6).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files

@@             Coverage Diff             @@
##             main    #4745       +/-   ##
===========================================
+ Coverage   40.98%   69.04%   +28.06%     
===========================================
  Files         119      118        -1     
  Lines        2223     4898     +2675     
  Branches      561      532       -29     
===========================================
+ Hits          911     3382     +2471     
- Misses       1306     1511      +205     
+ Partials        6        5        -1     

Flag	Coverage Δ
install-dynamic-plugins	92.44% <ø> (?)
rhdh	40.30% <ø> (-0.68%)	⬇️

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 5a6cf35...aa328e6. Read the comment docs.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: cancelled.

[github-actions]

The container image build workflow finished with status: failure.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Image was built and published successfully. It is available at:

• quay.io/rhdh-community/rhdh:pr-4745
• quay.io/rhdh-community/rhdh:pr-4745-aa328e69

[kim-tsao]

/test e2e-ocp-helm

[alizard0]

/test e2e-ocp-helm

[kim-tsao]

/retest

[alizard0]

/lgtm

[kim-tsao]

/retest