Update protobuf version to version newer than 3.21.7 to fix CVE

https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-h4h5-3hr4-j3g2


Protobuf has made an upstream change to Poison Java gencode from vulnerable releases

https://protobuf.dev/news/2025-01-23/

