[Snyk] Security upgrade ts-proto from 1.118.0 to 1.153.1

[shigeya-dd]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • src/frontend/package.json
  • src/frontend/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	823/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.6	Prototype Pollution SNYK-JS-PROTOBUFJS-5756498	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: ts-proto

The new version differs by 205 commits.

• bb5b2fc chore(release): 1.153.1 [skip ci]
• ad57819 fix: Bump ts-proto-descriptors. (Changes to Dockerfile(s) not considered during deployment open-telemetry/opentelemetry-demo#876)
• 67be0ef chore: Bump ts-proto-descriptors.
• ce064d0 chore(release): 1.153.0 [skip ci]
• 7f979a7 feat: Update protobufjs (and peer dependencies) to ^7 ([grafana] fix demo dashboard to be compatible with spanmetrics connector open-telemetry/opentelemetry-demo#874)
• 80fa42b chore(deps): bump semver in /integration/simple-esmodule-interop (Bump google-protobuf from 3.21.1 to 3.22.3 in /src/emailservice open-telemetry/opentelemetry-demo#875)
• 4d74a9b chore(release): 1.152.1 [skip ci]
• f4e26bd fix: Fix invocation error.
• 7ad4c79 chore: Move fail-if-changes comment.
• 526692d chore(release): 1.152.0 [skip ci]
• fc831e9 chore: Fix yarn.lock.
• 54cbc61 chore(deps): bump @ angular/core in /integration/angular ([protobuf] - encode zipcode as a string open-telemetry/opentelemetry-demo#587)
• 5bcb1ce chore(deps): bump decode-uri-component in /integration/angular (Updated demo link for Sumo Logic open-telemetry/opentelemetry-demo#718)
• e399d8d chore(deps): bump loader-utils in /integration/angular (update service metric requirement table open-telemetry/opentelemetry-demo#707)
• 47281a9 chore(deps): bump decode-uri-component (Update contributing guidelines open-telemetry/opentelemetry-demo#719)
• 76c24e6 chore(deps): bump express from 4.17.1 to 4.18.2 in /integration/angular (Bump docker/build-push-action from 3.3.0 to 4.0.0 open-telemetry/opentelemetry-demo#723)
• 5b232ee chore(deps): bump json5 from 2.2.1 to 2.2.3 (Frontend span attribute app.session.id gone open-telemetry/opentelemetry-demo#758)
• fe0961a chore(deps): bump socket.io-parser in /integration/angular (Bump tokio from 1.22.0 to 1.24.2 in /src/shippingservice open-telemetry/opentelemetry-demo#860)
• d9d5761 chore(deps): bump tough-cookie in /integration/simple-esmodule-interop ([quoteservice] Bump PHP dependencies open-telemetry/opentelemetry-demo#870)
• 1405d4b feat: Ensure strict(er) TS compliance for the generated code (Bump flask from 2.2.2 to 2.3.2 in /src/loadgenerator open-telemetry/opentelemetry-demo#868)
• 5ec618c chore: Re-codegen.
• 7eac882 chore: Update bin files.
• 25aeac2 chore(release): 1.151.1 [skip ci]
• 477e5f5 fix: generate different MessageType when using static-only ([emailservice] Update Ruby version and bump dependencies open-telemetry/opentelemetry-demo#863)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

[github-actions]

This PR was marked stale due to lack of activity. It will be closed in 7 days.

[github-actions]

Closed as inactive. Feel free to reopen if this PR is still being worked on.