[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-java	action	minor	v6.0.1 → v6.1.0
github/codeql-action	action	minor	v4.38.3 → v4.39.0
open-telemetry/shared-workflows	workflow	minor	v0.20.0 → v0.23.0

---

Release Notes

actions/setup-java

v6.1.0

Compare Source

What's Changed

• Preserve compound Liberica build versions from .sdkmanrc by @​brunoborges with @​Copilot in #​1268
• Support Temurin on Linux RISC-V by @​yawkat in #​1269
• Stop GPG agent before removing signature-verification home by @​brunoborges with @​Copilot in #​1273
• Prefer Zulu 4-segment hotfix builds when resolving version ranges by @​brunoborges in #​1278
• Support Temurin JEP 322 patch versions like 26.0.2.1+1 by @​brunoborges in #​1279
• chore(deps): bump undici from 6.28.0 to 6.29.0 by @​dependabot[bot] in #​1274
• chore(deps): bump the monthly-npm-updates group with 13 updates by @​dependabot[bot] in #​1276
• feat: support Maven server credential origins by @​YunaBraska in #​1282
• Support Maven plugin repositories in generated settings.xml by @​brunoborges in #​1286

New Contributors

• @​yawkat made their first contribution in #​1269
• @​YunaBraska made their first contribution in #​1282

Full Changelog: actions/setup-java@v6.0.1...v6.1.0

github/codeql-action

v4.39.0

Compare Source

• Breaking change: Bump the minimum required CodeQL bundle version to 2.20.7. #​4205
• The codeql-action/analyze step now validates that a correct argument for the checkout_path input has been provided. The checkout_path input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by codeql-action/init, then the CodeQL Action now produces a warning. #​4148
• Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. #​4206
• The codeql-action/start-proxy step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as codeql-action/init. This primarily benefits customers who are using GitHub instances other than github.com where the codeql-action/start-proxy step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #​4198

open-telemetry/shared-workflows

v0.23.0

Compare Source

What's Changed

• update runner for fossa workflow by @​codeboten in #​480
• Allow approved dashboard handoffs to advance to maintainers by @​trask in #​476
• Retry Copilot errors once before releasing the review gate by @​trask in #​477
• Hide inactive Copilot reviewers from the PR dashboard by @​trask in #​479

Full Changelog: open-telemetry/shared-workflows@v0.22.0...v0.23.0

v0.22.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.21.0 by @​otelbot-shared-workflows[bot] in #​469
• Add Alex Boten and Piotr Kiełkowicz as approvers by @​trask in #​470
• Unblock GitHub Actions queue retries by @​trask in #​464
• Remove retired data snapshot rollout flag by @​trask in #​471
• Fix GitHub Actions queue collector completion gaps by @​trask in #​472
• add fossa workflow by @​codeboten in #​474
• document the release process by @​codeboten in #​475

Full Changelog: open-telemetry/shared-workflows@v0.21.0...v0.22.0

v0.21.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.20.0 by @​otelbot-shared-workflows[bot] in #​463
• Remove completed queue-record migration by @​trask in #​465
• Make generated-data storage permanently snapshot-only by @​trask in #​466
• Retire legacy pull request dashboard execution by @​trask in #​467

Full Changelog: open-telemetry/shared-workflows@v0.20.0...v0.21.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 8am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.