Bump pbf from 4.0.1 to 5.0.0

[dependabot]

Bumps pbf from 4.0.1 to 5.0.0.

Release notes

Sourced from pbf's releases.

v5.0.0

Breaking changes

• The Pbf class is split into separate PbfReader and PbfWriter classes, so bundlers can tree-shake the half you don't use.
• Removed the legacy readVarint64 method — use readVarint(true) for signed 64-bit reads.

Performance

On the Mapbox vector-tile benchmark (439 tiles, 37.5 MB), v5 is ~25% faster to decode and ~27% faster to encode than v4. Highlights:

• Generated reader code was rewritten from a callback-based style into inlined while loops with direct field-number dispatch, letting V8 fully inline each reader (biggest decode win).
• writeVarint / readVarint got single-byte fast paths for the common case (tags, small ints).
• Buffer growth in makeRoomForExtraLength now uses Uint8Array.copyWithin instead of a manual byte-shift loop (biggest encode win).
• writeBytes uses typedArray.set instead of a manual copy loop.

Other improvements

• The schema compiler (compile.js) was significantly simplified — generated code is cleaner and easier to read.
• Fixed a bug in compiled packed sfixed64 fields.

v4.0.2

• Add sanitization of field names in pbf/compile to protect against injection via malicious proto schema.
• Modernize dev dependencies.

Commits

• b920044 5.0.0
• eab5420 fix namespace collision in map compile
• b4853f4 update benchmark numbers
• 056ad86 simplify compile.js, fix packed sfixed64 compilation
• eac564b more efficient compiled code for reads (40% faster)
• ac7490d update benchmarks & bench results
• d56c87d optimize writeVarint (fast path)
• b8c8a9f optimize writes via copyWithin (~23% faster)
• 82ccb60 optimize writeBytes
• 23a47f2 remove legacy readVarint64
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by mbx-npm-08-production, a new releaser for pbf since your current version.

[tyrasd]

blocked by mapbox/vector-tile-js#93

[tyrasd]

@dependabot recreate

[dependabot]

Superseded by #12391.