Merge branch 'open-telemetry:main' into main

Author: vincentfree

.github/scripts/lychee-config.toml renamed to .github/config/lychee.toml

@@ -85,7 +85,7 @@
       ],
       enabled: false,
       matchPackageNames: [
-        'org.mockito:{/,}**',
+        'org.mockito:**',
       ],
     },
     {
@@ -123,25 +123,33 @@
       matchCurrentVersion: '3.5.0',
       enabled: false,
       matchPackageNames: [
-        'org.apache.maven:{/,}**',
+        'org.apache.maven:**',
       ],
     },
     {
       groupName: 'spotless packages',
       matchPackageNames: [
-        'com.diffplug.spotless{/,}**',
+        'com.diffplug.spotless',
+        'com.diffplug.spotless:**',
       ],
     },
     {
       groupName: 'hipparchus packages',
       matchPackageNames: [
-        'org.hipparchus{/,}**',
+        'org.hipparchus:**',
       ],
     },
     {
       groupName: 'errorprone packages',
       matchPackageNames: [
-        'com.google.errorprone{/,}**',
+        'com.google.errorprone:**',
+      ],
+    },
+    {
+      groupName: 'jackson packages',
+      matchPackageNames: [
+        'com.fasterxml.jackson:**',
+        'com.fasterxml.jackson.core:**',
       ],
     },
     {
@@ -151,7 +159,7 @@
       ],
       enabled: false,
       matchPackageNames: [
-        'org.openjdk.jmc{/,}**',
+        'org.openjdk.jmc:**',
       ],
     },
     {
@@ -162,7 +170,7 @@
       matchCurrentVersion: '5.0.0',
       enabled: false,
       matchPackageNames: [
-        'jakarta.servlet:{/,}**',
+        'jakarta.servlet:**',
       ],
     },
     {
@@ -175,7 +183,7 @@
       ],
       enabled: false,
       matchPackageNames: [
-        'org.springframework.boot{/,}**',
+        'org.springframework.boot:**',
       ],
     },
   ],
@@ -190,6 +198,16 @@
         'npx (?<depName>[^@]+)@(?<currentValue>[^\\s]+)',
       ],
     },
+    {
+      customType: 'regex',
+      datasourceTemplate: 'npm',
+      managerFilePatterns: [
+        '.github/workflows/**',
+      ],
+      matchStrings: [
+        'npm install (?<depName>[^@\\s]+)@(?<currentValue>[^\\s]+)',
+      ],
+    },
     {
       customType: 'regex',
       datasourceTemplate: 'java-version',

.github/renovate.json5

@@ -19,15 +19,15 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
-      - name: Install js-yaml
-        run: npm install js-yaml
+      - name: Install yaml
+        run: npm install yaml@2.8.1
 
       - name: Parse component label and assign owners
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: |
             const fs = require('fs');
-            const yaml = require('js-yaml');
+            const { parse } = require('yaml');
 
             // Extract component name from label
             const labelName = context.payload.label.name;
@@ -42,7 +42,7 @@ jobs:
 
             // Read and parse component_owners.yml
             const yamlContent = fs.readFileSync('.github/component_owners.yml', 'utf8');
-            const data = yaml.load(yamlContent);
+            const data = parse(yamlContent);
 
             if (!data || !data.components) {
               core.setFailed('Invalid component_owners.yml structure');

.github/scripts/dependencies.Dockerfile

@@ -18,6 +18,7 @@ jobs:
       pull-requests: write  # for assigning reviewers
     runs-on: ubuntu-latest
     steps:
-      - uses: open-telemetry/assign-reviewers-action@2f4f06ccc561740d5094d9ca5e66dc2392d13e8f # main
+      - uses: dyladan/component-owners@58bd86e9814d23f1525d0a970682cead459fa783 # v0.1.0
         with:
           config-file: .github/component_owners.yml
+          assign-owners: false

.github/scripts/link-check.sh

@@ -25,7 +25,7 @@ jobs:
           java-version: 17
 
       - name: Set up gradle
-        uses: gradle/actions/setup-gradle@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
+        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.4.3
         with:
           cache-read-only: true
 

.github/workflows/assign-issue-owners.yml

@@ -24,13 +24,13 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Set up JDK for running Gradle
-        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
+        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
         with:
           distribution: temurin
           java-version: 17
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
+        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.4.3
         with:
           cache-read-only: ${{ inputs.cache-read-only }}
 
@@ -49,7 +49,7 @@ jobs:
           java-version: 17
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
+        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.4.3
         with:
           cache-read-only: ${{ inputs.cache-read-only }}
 
@@ -89,7 +89,7 @@ jobs:
           java-version: 17
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
+        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.4.3
         with:
           cache-read-only: ${{ inputs.cache-read-only }}
 
@@ -118,7 +118,7 @@ jobs:
           java-version: 17
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
+        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.4.3
         with:
           cache-read-only: ${{ inputs.cache-read-only }}
 

.github/workflows/assign-reviewers.yml

@@ -33,7 +33,7 @@ jobs:
           java-version: 17
 
       - name: Set up gradle
-        uses: gradle/actions/setup-gradle@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
+        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.4.3
 
       - name: Build and publish snapshots
         run: ./gradlew assemble publishToSonatype

.github/workflows/auto-spotless-check.yml

@@ -47,10 +47,10 @@ jobs:
 
       - name: Set up gradle
         if: matrix.language == 'java'
-        uses: gradle/actions/setup-gradle@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
+        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.4.3
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.11
+        uses: github/codeql-action/init@d3678e237b9c32a6c9bffb3315c335f976f3549f # v3.30.2
         with:
           languages: ${{ matrix.language }}
           # using "linked" helps to keep up with the latest Kotlin support
@@ -65,6 +65,6 @@ jobs:
         run: ./gradlew assemble --no-build-cache --no-daemon
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.11
+        uses: github/codeql-action/analyze@d3678e237b9c32a6c9bffb3315c335f976f3549f # v3.30.2
         with:
           category: "/language:${{matrix.language}}"