lint: allow security replace directives

.golangci.yml

@@ -99,6 +99,13 @@ linters-settings:
       - 'strconv.ParseInt'
       - 'errors.Wrap'
   
+  gomoddirectives:
+    replace-allow-list:
+      # See go.mod for the explanation why these are needed.
+      - github.com/ulikunitz/xz
+      - github.com/gogo/protobuf
+      - google.golang.org/protobuf
+
 
 linters:
   enable-all: true