This is to address CVE-2024-24786. I also removed last reference to the deprecated github.com/golang/protobuf so that it's an indirect import now. I bumped its version too, as required by google.golang.org/protobuf bump.