Upgrade go.opentelemetry.io/proto/otlp v0.12.0 -> v0.12.1 (#2728)

* Upgrade go.opentelemetry.io/proto/otlp v0.12.0 -> v0.12.1

Fix #2724

* Update changelog

Author: MrAlias

CHANGELOG.md

@@ -8,6 +8,11 @@ This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 
 ## [Unreleased]
 
+### Security
+
+- Upgrade `go.opentelemetry.io/proto/otlp` from `v0.12.0` to `v0.12.1`.
+  This includes an indirect upgrade of `github.com/grpc-ecosystem/grpc-gateway` which resolves [a vulnerability](https://nvd.nist.gov/vuln/detail/CVE-2019-11254) from `gopkg.in/yaml.v2` in version `v2.2.3`. (#2724, #TBD)
+
 ## [1.6.0/0.28.0] - 2022-03-23
 
 ### ⚠️ Notice ⚠️

example/otel-collector/go.sum

@@ -10,7 +10,7 @@ require (
 	go.opentelemetry.io/otel/metric v0.28.0
 	go.opentelemetry.io/otel/sdk v1.6.0
 	go.opentelemetry.io/otel/sdk/metric v0.28.0
-	go.opentelemetry.io/proto/otlp v0.12.0
+	go.opentelemetry.io/proto/otlp v0.12.1
 	google.golang.org/grpc v1.45.0
 	google.golang.org/protobuf v1.27.1
 )

exporters/otlp/otlpmetric/go.mod

@@ -10,8 +10,8 @@ require (
 	go.opentelemetry.io/otel/metric v0.28.0
 	go.opentelemetry.io/otel/sdk v1.6.0
 	go.opentelemetry.io/otel/sdk/metric v0.28.0
-	go.opentelemetry.io/proto/otlp v0.12.0
-	google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013
+	go.opentelemetry.io/proto/otlp v0.12.1
+	google.golang.org/genproto v0.0.0-20211118181313-81c1377c94b1
 	google.golang.org/grpc v1.45.0
 	google.golang.org/protobuf v1.27.1
 )

exporters/otlp/otlpmetric/go.sum

@@ -7,7 +7,7 @@ require (
 	go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.6.0
 	go.opentelemetry.io/otel/exporters/otlp/otlpmetric v0.28.0
 	go.opentelemetry.io/otel/sdk v1.6.0
-	go.opentelemetry.io/proto/otlp v0.12.0
+	go.opentelemetry.io/proto/otlp v0.12.1
 	google.golang.org/protobuf v1.27.1
 )
 

exporters/otlp/otlpmetric/otlpmetricgrpc/go.mod

@@ -9,7 +9,7 @@ require (
 	go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.6.0
 	go.opentelemetry.io/otel/sdk v1.6.0
 	go.opentelemetry.io/otel/trace v1.6.0
-	go.opentelemetry.io/proto/otlp v0.12.0
+	go.opentelemetry.io/proto/otlp v0.12.1
 	google.golang.org/grpc v1.45.0
 	google.golang.org/protobuf v1.27.1
 )