Keep dependency versions in sync for `WORKSPACE` and `MODULE.bazel`

[luangong]

As mentioned in the Bazel blog article, the old WORKSPACE system is planned to be disabled by default in Bazel 8, and to be removed altogether in Bazel 9. The WORKSPACE file will eventually be removed, but for now, it’s best to keep the dependency versions in both systems in sync, so that we can build the project with Bzlmod either disabled or enabled.

Note that there is a compatibility issue that prevents this project from depending on protobuf v22 and higher. Until that issue is fixed, v21.7 is the highest version that works with both systems.

References:

• Bazel Blog › Bazel 7.0 TLS › Bzlmod
• protobuf in BCR
• https://github.com/protocolbuffers/protobuf/blob/v21.7/protobuf_deps.bzl#L96-L104
• https://github.com/protocolbuffers/protobuf-javascript/pull/186

[dibenede]

Could you please also change these to 21.7 for consistency?

• https://github.com/protocolbuffers/protobuf-javascript/blob/f2c55832aa435a6861b38b306d9c60362d9b9337/.github/workflows/build.yml#L9
• https://github.com/protocolbuffers/protobuf-javascript/blob/f2c55832aa435a6861b38b306d9c60362d9b9337/.github/workflows/codeql.yml#L18