fix: CVE-2023-45142 for release 3.13

[sozercan]

Co-authored-by: sozercan [email protected]
Co-authored-by: Sertac Ozercan [email protected]

What this PR does / why we need it:

This is fixed in 3.14, but still an issue in 3.13. This PR bumps otel version without frameworks

Technically GK is not affected. Unfortunately, it is going to take time to explain everytime, seems easier to bump the dep 😭🤷‍♂️

$ govulncheck -test ./...
Scanning your code and 1356 packages across 141 dependent modules for known vulnerabilities...

=== Informational ===

Found 1 vulnerability in packages that you import, but there are no call
stacks leading to the use of this vulnerability. You may not need to
take any action. See https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck
for details.

Vulnerability #1: GO-2023-2113
    Memory exhaustion in github.com/open-telemetry/opentelemetry-go-contrib
  More info: https://pkg.go.dev/vuln/GO-2023-2113
  Module: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
    Found in: go.opentelemetry.io/contrib/instrumentation/net/http/[email protected]
    Fixed in: go.opentelemetry.io/contrib/instrumentation/net/http/[email protected]

No vulnerabilities found.

Share feedback at https://go.dev/s/govulncheck-feedback.

[maxsmythe]

LGTM