fix(deps): update protobuf version updates to v4.28.3

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
com.google.protobuf:protoc (source)	4.27.1 -> 4.28.3
com.google.protobuf:protobuf-java (source)	4.27.1 -> 4.28.3

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Apollo Federation Subgraph Compatibility Results

Federation 1 Support	Federation 2 Support
_service 🟢 @key (single) 🟢 @key (multi) 🟢 @key (composite) 🟢 repeatable @key 🟢 @requires 🟢 @provides 🟢 federated tracing 🟢	@link 🟢 @shareable 🟢 @tag 🟢 @override 🟢 @inaccessible 🟢 @composeDirective 🟢 @interfaceObject 🟢

Learn more:

• Apollo Federation Subgraph Specification
• Compatibility Tests

[scottkennedy]

protobuf-java 4.27.1 has a CVE (GHSA-735f-pc8j-v9w8)

Can this be merged?

[pvonr]

Are there any blockers to merge this PR?

The CVE is open for quite a while so it would be great to get this patched. You can even consider moving to 4.27.5 that also has the fix if you're not comfortable bumping the minor version.