* Fix path traversal in `-proto-out-dir`
A malicious file descriptor name (e.g. from an untrusted protoset or
server reflection) could escape the output directory through ../
sequences, writing attacker-controlled content to arbitrary paths.
Confine all writes to an `os.Root` opened on the output directory.
* assert
* refactor
---------
Co-authored-by: Scott Blum <dragonsinth@gmail.com>
* update to latest jhump/protoreflect
* be lenient when possible if server cannot furnish all dependencies
* move linting back to go 1.21 instead of latest go 1.22
* make staticcheck happy
Bram