chore(deps): update github-actions dependencies (#3360)

renovate[bot] · web-flow · commit fc79416c5c40 · 2025-08-18T18:01:34.000Z
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [bitnami/minio](https://redirect.github.com/bitnami/containers) ([source](https://redirect.github.com/bitnami/containers/tree/HEAD/bitnami/minio)) | service | digest | `a70e90b` -> `4707bf7` | | [bufbuild/buf-action](https://redirect.github.com/bufbuild/buf-action) | action | digest | `c231a1a` -> `8f4a145` | | elasticsearch | service | patch | `9.1.1` -> `9.1.2` | | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | digest | `76621b6` -> `96f518a` | | [go](https://redirect.github.com/actions/go-versions) | uses-with | minor | `1.24.6` -> `1.25.0` | | [otel/opentelemetry-collector-contrib](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases) | service | minor | `0.131.1` -> `0.132.4` | --- ### Release Notes <details> <summary>actions/go-versions (go)</summary> ### [`v1.25.0`](https://redirect.github.com/actions/go-versions/releases/tag/1.25.0-16925932082): 1.25.0 [Compare Source](https://redirect.github.com/actions/go-versions/compare/1.24.6-16792114823...1.25.0-16925932082) Go 1.25.0 </details> <details> <summary>open-telemetry/opentelemetry-collector-releases (otel/opentelemetry-collector-contrib)</summary> ### [`v0.132.4`](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.132.4) [Compare Source](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/compare/v0.132.3...v0.132.4) Check the [v0.132.4 contrib changelog](https://redirect.github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.132.4) and the [v0.132.4 core changelog](https://redirect.github.com/open-telemetry/opentelemetry-collector/releases/tag/v0.132.4) for changelogs on specific components. ##### Changelog - [`acd6a3c`](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/commit/acd6a3cd6617759eebfaa028c777f7cb33537c55) \[chore] fix tag name issue in binary release pipeline ([#&#8203;1126](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/issues/1126)) ([#&#8203;1127](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/issues/1127)) ### [`v0.132.3`](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.132.3) [Compare Source](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/compare/v0.132.2...v0.132.3) v0.132.3 is a patch release attempting to fix a bug in the release pipelines. Please see [v0.132.0](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.132.0) for release notes. ### [`v0.132.2`](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.132.2) [Compare Source](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/compare/v0.132.1...v0.132.2) ##### Images and binaries for collector distributions here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.132.2 #### v0.132.2 v0.132.2 is a patch release attempting to fix a misfire in the build. Please see [v0.132.0](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.132.0) for release notes. ### [`v0.132.1`](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.132.1) [Compare Source](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/compare/v0.132.0...v0.132.1) #### v0.132.1 v0.132.1 is a patch release fixing the script used to build and push Windows docker image. Please see [v0.132.0](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.132.0) for release notes. ### [`v0.132.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/blob/HEAD/CHANGELOG.md#v01320) [Compare Source](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/compare/v0.131.1...v0.132.0) ##### 🛑 Breaking changes 🛑 - `releases`: Fix artifact checksum files being incomplete and split between Linux/Darwin and Windows. ([#&#8203;1002](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/issues/1002), [#&#8203;1086](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/issues/1086)) This fixes a bug that occurred because releases for Windows and other Platforms are split. The Windows release always overwrote the checksum files already created for Linux and Darwin and so, only the Windows checksums were accessible in the end. This change is breaking because checksum files for Linux/Darwin and Windows are now split. - `otelcol`: Remove deprecated opencensus exporter and receiver ([#&#8203;1056](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/issues/1056)) - `otelcol-contrib`: Remove deprecated opencensus exporter and receiver ([#&#8203;1056](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/issues/1056)) - `otelcol-k8s`: Remove deprecated opencensus exporter and receiver ([#&#8203;1056](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/issues/1056)) ##### 💡 Enhancements 💡 - `contrib`: Add skywalkingencodingextension in otelcol-contrib distribution ([#&#8203;1078](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/issues/1078)) - `releases`: Introduce nightly releases ([#&#8203;1016](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/issues/1016)) - `platforms`: Add Tier 3 support for riscv64 ([#&#8203;968](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/issues/968), [#&#8203;969](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/issues/969)) New Tier 3 platform: riscv64 architecture is now included, allowing the collector to be built and distributed for this platform. ##### 🧰 Bug fixes 🧰 - `service/telemetry`: Pins go.opentelemetry.io/otel/exporters/prometheus to v0.58.0 ([#&#8203;1067](https://redirect.github.com/open-telemetry/opentelemetry-collector-releases/issues/1067)) go.opentelemetry.io/otel/exporters/prometheus v0.59.x has a bug leading to unexpected suffix in metric names, we want to stay with v0.58.0 in the artifacts. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 5pm on monday" in timezone Etc/UTC, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/PeerDB-io/peerdb).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
diff --git a/.github/actions/genprotos/action.yml b/.github/actions/genprotos/action.yml
@@ -15,7 +15,7 @@ runs:
         key: ${{ runner.os }}-build-genprotos-${{ hashFiles('buf.gen.yaml', './protos/peers.proto', './protos/flow.proto', './protos/route.proto') }}
 
     - if: steps.cache.outputs.cache-hit != 'true'
-      uses: bufbuild/buf-action@c231a1aa9281e5db706c970f468f0744a37561fd # v1
+      uses: bufbuild/buf-action@8f4a1456a0ab6a1eb80ba68e53832e6fcfacc16c # v1
       with:
         setup_only: true
         github_token: ${{ github.token }}
diff --git a/.github/workflows/cleanup.yml b/.github/workflows/cleanup.yml
@@ -14,7 +14,7 @@ jobs:
 
       - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
         with:
-          go-version: '1.24.6'
+          go-version: '1.25.0'
           cache-dependency-path: e2e_cleanup/go.sum
 
       - name: download go modules
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -47,12 +47,12 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3
+      uses: github/codeql-action/init@96f518a34f7a870018057716cc4d7a5c014bd61c # v3
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3
+      uses: github/codeql-action/analyze@96f518a34f7a870018057716cc4d7a5c014bd61c # v3
       with:
         category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/flow.yml b/.github/workflows/flow.yml
@@ -46,15 +46,15 @@ jobs:
           - 9092:9092
           - 9644:9644
       elasticsearch:
-        image: elasticsearch:9.1.1@sha256:272cbfbe31d87291a06bcd7cb3c7243dc8df50c04df987bc62a7c31ca9b4681a
+        image: elasticsearch:9.1.2@sha256:b1c50fb8d09ea8486c6422e3c5a0d48c97b931bf2dbc42c5321081845f1ff449
         ports:
           - 9200:9200
         env:
           discovery.type: single-node
           xpack.security.enabled: false
           xpack.security.enrollment.enabled: false
       minio:
-        image: bitnami/minio:2025.7.23@sha256:a70e90bb70f4732221901de53502334cef58665c6c4275a014d47adad10e1883
+        image: bitnami/minio:2025.7.23@sha256:4707bf769bba6653d5c5653b18b619d7397b35efc6f402aebfd0a93a5309a0c0
         ports:
           - 9999:9999
         env:
@@ -64,7 +64,7 @@ jobs:
           AWS_EC2_METADATA_DISABLED: true
           MINIO_DEFAULT_BUCKETS: peerdb
       otelcol:
-        image: otel/opentelemetry-collector-contrib:0.131.1@sha256:c06aa6d7833e9a2b81c6c394d67e40ae9864edec8dca8a8e8552df1316c96d9b
+        image: otel/opentelemetry-collector-contrib:0.132.4@sha256:bcb6d6d0e56645a75cbce0b7aeb3cf7c304299788bc573080b0351eddc786c9b
         ports:
           - 4317:4317
 
@@ -76,7 +76,7 @@ jobs:
 
       - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
         with:
-          go-version: '1.24.6'
+          go-version: '1.25.0'
           cache-dependency-path: flow/go.sum
 
       - name: install lib-geos
diff --git a/.github/workflows/golang-lint.yml b/.github/workflows/golang-lint.yml
@@ -24,7 +24,7 @@ jobs:
           sudo apt-get install libgeos-dev
       - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
         with:
-          go-version: '1.24.6'
+          go-version: '1.25.0'
           cache: false
       - name: golangci-lint flow
         uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8
