Update grpc/otelgrpc dependency to fix CVE-2023-47108

[FraPazGal]

apiserver is using grpc/otelgrpc v0.42.0, which is flagged as affected by CVE-2023-47108. A fix for this vulnerability was introduced in 0.46.0.

Could you confirm whether apiserver is affected by this vulnerability and if so, are there plans to update the related dependency?

Thanks!

[dims]

This DOES NOT impact kubernetes, as we use OpenTelemetry only for tracing, and not for metrics. go.opentelemetry.io/otel/sdk/metric is not a dependency of this project.

from: kubernetes/kubernetes#121842

/close

[k8s-ci-robot]

@dims: Closing this issue.

In response to this:

This DOES NOT impact kubernetes, as we use OpenTelemetry only for tracing, and not for metrics. go.opentelemetry.io/otel/sdk/metric is not a dependency of this project.

from: kubernetes/kubernetes#121842

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.