chore(ci): update ci

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	patch	v3.37.7 → v3.37.9
open-telemetry/shared-workflows	workflow	minor	v0.10.0 → v0.12.0
otel/opentelemetry-collector-contrib		minor	0.158.0 → 0.159.0
python (source)	container	digest	ce40764 → cae66f2
re-actors/alls-green (changelog)	action	digest	05ac938 → b5b5b37

---

Release Notes

github/codeql-action (github/codeql-action)

v3.37.9

Compare Source

• Update default CodeQL bundle version to 2.26.4. #​4106

v3.37.8

Compare Source

No user facing changes.

open-telemetry/shared-workflows (open-telemetry/shared-workflows)

v0.12.0

Compare Source

What's Changed

• Use typed dashboard result and state contracts by @​trask in #​303
• Normalize pull request data before dashboard evaluation by @​trask in #​304
• Add opentelemetry-ebpf-profiler to PR dashboard by @​florianl in #​318
• Allow callers to skip Scorecard publication by @​trask in #​317
• Extract pure classification policy by @​trask in #​313
• Isolate classification execution and cache orchestration by @​trask in #​314
• End reviewer handoff on actionable feedback by @​trask in #​310
• Create dashboard status comments for draft pull requests by @​trask in #​321

New Contributors

• @​florianl made their first contribution in #​318

Full Changelog: open-telemetry/shared-workflows@v0.11.0...v0.12.0

v0.11.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.10.0 by @​otelbot-shared-workflows[bot] in #​284
• Default releases to minor version bumps by @​trask in #​283
• Add a manual sweep that repairs stale author reminders by @​trask in #​281
• Load dashboard code from the reusable workflow commit by @​trask in #​285
• Restore dashboard workflow Git context by @​trask in #​287
• Extract PR dashboard discussion lifecycle by @​trask in #​293
• Extract PR dashboard routing snapshot by @​trask in #​294
• Extract dashboard routing into a single decision by @​trask in #​296
• Extract PR dashboard reviewer state by @​trask in #​297
• Extract pull request activity timeline by @​trask in #​298
• Separate PR evaluation from dashboard operations by @​trask in #​299
• Extract dashboard state update transaction by @​trask in #​300
• Defer dashboard comment updates for locked pull requests by @​trask in #​291
• Remove CNCF-hosted runner option from Scorecard and Zizmor docs by @​trask in #​309
• Add Scorecard file mode and Harden Runner options by @​trask in #​306

Full Changelog: open-telemetry/shared-workflows@v0.10.0...v0.11.0

open-telemetry/opentelemetry-collector-releases (otel/opentelemetry-collector-contrib)

v0.159.0

Compare Source

🛑 Breaking changes 🛑

• contrib: Remove deprecated kafkatopicsobserver extension from the contrib distribution (#​1597)

🚀 New components 🚀

• extension/aws_iam_db_auth: Add aws_iam_db_auth to the contrib distribution (#​1591)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 8am every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[opentelemetry-pr-dashboard]

Pull request dashboard status

Waiting on maintainers · refreshed 2026-08-29 02:24 UTC

Merge when ready.

Status above doesn't look right?

• Just replied or pushed? Anything around or after the refresh time above may not be picked up yet — give it a few minutes.
• Anything look wrong? Report it with what you expected; it helps us improve the dashboard.

[carlosalberto]

Symbolic approval, nothing polemical IHMO