Merge pull request #1318 from kmala/automated-cherry-pick-of-#1153-#1… · kubernetes/cloud-provider-aws@c70e4ac

Dependency review detected vulnerable packages.

gomod/github.com/mxk/go-flowrate has an OpenSSF Scorecard of 2.3, which is less than this repository's threshold of 3.

gomod/github.com/grpc-ecosystem/go-grpc-prometheus has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.