gomod: update otel and circl for CVEs (#737)
This updates two of our dependencies to resolve GHSA-9763-4f94-gfch and
CVE-2023-47108.
Initially I ran
go get \
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@0.46.0 \
github.com/cloudflare/circl@1.3.7
But then "go mod tidy" failed since otel likes to refactor and rename
things for not much benefit to end users. I tried a few different things
to get it to work, but finally just updated all otel deps to the latest
version:
go get -u go.opentelemetry.io/otel/...
Test Plan: unit tests, "go mod tidy" is clean and "trivy fs go.mod"
reports no vulns.