chore(deps): update github-actions deps (major) (#4650)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | major | `v4.3.0` -> `v5.0.0` |
|
[actions/setup-python](https://redirect.github.com/actions/setup-python)
| action | major | `v5.6.0` -> `v6.0.0` |
| [actions/stale](https://redirect.github.com/actions/stale) | action |
major | `v9.1.0` -> `v10.0.0` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

###
[`v5.0.0`](https://redirect.github.com/actions/checkout/releases/tag/v5.0.0)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.3.0...v5.0.0)

##### What's Changed

- Update actions checkout to use node 24 by
[@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) in
[https://github.com/actions/checkout/pull/2226](https://redirect.github.com/actions/checkout/pull/2226)
- Prepare v5.0.0 release by
[@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) in
[https://github.com/actions/checkout/pull/2238](https://redirect.github.com/actions/checkout/pull/2238)

##### ⚠️ Minimum Compatible Runner Version

**v2.327.1**\
[Release
Notes](https://redirect.github.com/actions/runner/releases/tag/v2.327.1)

Make sure your runner is updated to this version or newer to use this
release.

**Full Changelog**:
actions/checkout@v4...v5.0.0

</details>

<details>
<summary>actions/setup-python (actions/setup-python)</summary>

###
[`v6.0.0`](https://redirect.github.com/actions/setup-python/releases/tag/v6.0.0)

[Compare
Source](https://redirect.github.com/actions/setup-python/compare/v5.6.0...v6.0.0)

#### What's Changed

##### Breaking Changes

- Upgrade to node 24 by
[@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) in
[#&#8203;1164](https://redirect.github.com/actions/setup-python/pull/1164)

Make sure your runner is on version v2.327.1 or later to ensure
compatibility with this release. [See Release
Notes](https://redirect.github.com/actions/runner/releases/tag/v2.327.1)

##### Enhancements:

- Add support for `pip-version` by
[@&#8203;priyagupta108](https://redirect.github.com/priyagupta108) in
[#&#8203;1129](https://redirect.github.com/actions/setup-python/pull/1129)
- Enhance reading from .python-version by
[@&#8203;krystof-k](https://redirect.github.com/krystof-k) in
[#&#8203;787](https://redirect.github.com/actions/setup-python/pull/787)
- Add version parsing from Pipfile by
[@&#8203;aradkdj](https://redirect.github.com/aradkdj) in
[#&#8203;1067](https://redirect.github.com/actions/setup-python/pull/1067)

##### Bug fixes:

- Clarify pythonLocation behaviour for PyPy and GraalPy in environment
variables by
[@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in
[#&#8203;1183](https://redirect.github.com/actions/setup-python/pull/1183)
- Change missing cache directory error to warning by
[@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in
[#&#8203;1182](https://redirect.github.com/actions/setup-python/pull/1182)
- Add Architecture-Specific PATH Management for Python with --user Flag
on Windows by
[@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in
[#&#8203;1122](https://redirect.github.com/actions/setup-python/pull/1122)
- Include python version in PyPy python-version output by
[@&#8203;cdce8p](https://redirect.github.com/cdce8p) in
[#&#8203;1110](https://redirect.github.com/actions/setup-python/pull/1110)
- Update docs: clarification on pip authentication with setup-python by
[@&#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) in
[#&#8203;1156](https://redirect.github.com/actions/setup-python/pull/1156)

##### Dependency updates:

- Upgrade idna from 2.9 to 3.7 in /**tests**/data by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;843](https://redirect.github.com/actions/setup-python/pull/843)
- Upgrade form-data to fix critical vulnerabilities
[#&#8203;182](https://redirect.github.com/actions/setup-python/issues/182)
&
[#&#8203;183](https://redirect.github.com/actions/setup-python/issues/183)
by [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y)
in
[#&#8203;1163](https://redirect.github.com/actions/setup-python/pull/1163)
- Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in
PackageIndex.download by
[@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in
[#&#8203;1165](https://redirect.github.com/actions/setup-python/pull/1165)
- Upgrade actions/checkout from 4 to 5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;1181](https://redirect.github.com/actions/setup-python/pull/1181)
- Upgrade
[@&#8203;actions/tool-cache](https://redirect.github.com/actions/tool-cache)
from 2.0.1 to 2.0.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;1095](https://redirect.github.com/actions/setup-python/pull/1095)

#### New Contributors

- [@&#8203;krystof-k](https://redirect.github.com/krystof-k) made their
first contribution in
[#&#8203;787](https://redirect.github.com/actions/setup-python/pull/787)
- [@&#8203;cdce8p](https://redirect.github.com/cdce8p) made their first
contribution in
[#&#8203;1110](https://redirect.github.com/actions/setup-python/pull/1110)
- [@&#8203;aradkdj](https://redirect.github.com/aradkdj) made their
first contribution in
[#&#8203;1067](https://redirect.github.com/actions/setup-python/pull/1067)

**Full Changelog**:
<actions/setup-python@v5...v6.0.0>

</details>

<details>
<summary>actions/stale (actions/stale)</summary>

###
[`v10.0.0`](https://redirect.github.com/actions/stale/releases/tag/v10.0.0)

[Compare
Source](https://redirect.github.com/actions/stale/compare/v9.1.0...v10.0.0)

#### What's Changed

##### Breaking Changes

- Upgrade to node 24 by
[@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) in
[#&#8203;1279](https://redirect.github.com/actions/stale/pull/1279)
Make sure your runner is on version v2.327.1 or later to ensure
compatibility with this release. [Release
Notes](https://redirect.github.com/actions/runner/releases/tag/v2.327.1)

##### Enhancement

- Introducing sort-by option by
[@&#8203;suyashgaonkar](https://redirect.github.com/suyashgaonkar) in
[#&#8203;1254](https://redirect.github.com/actions/stale/pull/1254)

##### Dependency Upgrades

- Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;1186](https://redirect.github.com/actions/stale/pull/1186)
- Upgrade undici from 5.28.4 to 5.28.5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;1201](https://redirect.github.com/actions/stale/pull/1201)
- Upgrade
[@&#8203;action/cache](https://redirect.github.com/action/cache) from
4.0.0 to 4.0.2 by
[@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in
[#&#8203;1226](https://redirect.github.com/actions/stale/pull/1226)
- Upgrade
[@&#8203;action/cache](https://redirect.github.com/action/cache) from
4.0.2 to 4.0.3 by
[@&#8203;suyashgaonkar](https://redirect.github.com/suyashgaonkar) in
[#&#8203;1233](https://redirect.github.com/actions/stale/pull/1233)
- Upgrade undici from 5.28.5 to 5.29.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;1251](https://redirect.github.com/actions/stale/pull/1251)
- Upgrade form-data to bring in fix for critical vulnerability by
[@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in
[#&#8203;1277](https://redirect.github.com/actions/stale/pull/1277)

##### Documentation changes

- Changelog update for recent releases by
[@&#8203;suyashgaonkar](https://redirect.github.com/suyashgaonkar) in
[#&#8203;1224](https://redirect.github.com/actions/stale/pull/1224)
- Permissions update in Readme by
[@&#8203;ghadimir](https://redirect.github.com/ghadimir) in
[#&#8203;1248](https://redirect.github.com/actions/stale/pull/1248)

#### New Contributors

- [@&#8203;suyashgaonkar](https://redirect.github.com/suyashgaonkar)
made their first contribution in
[#&#8203;1224](https://redirect.github.com/actions/stale/pull/1224)
- [@&#8203;GhadimiR](https://redirect.github.com/GhadimiR) made their
first contribution in
[#&#8203;1248](https://redirect.github.com/actions/stale/pull/1248)
- [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) made
their first contribution in
[#&#8203;1277](https://redirect.github.com/actions/stale/pull/1277)
- [@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) made their
first contribution in
[#&#8203;1279](https://redirect.github.com/actions/stale/pull/1279)

**Full Changelog**:
<actions/stale@v9...v10.0.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 8am on Monday" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-specification).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS45MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuOTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/checks.yaml

@@ -29,7 +29,7 @@ jobs:
     - name: check out code
       uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
-    - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+    - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
 
     - name: install yamllint
       run: make install-yamllint
@@ -71,7 +71,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: check out code
-      uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
     - name: run compliance-matrix
       run: make compliance-matrix

.github/workflows/stale-pr.yaml

@@ -12,7 +12,7 @@ jobs:
       pull-requests: write # required for marking and closing stale PRs
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0
+      - uses: actions/stale@3a9db7e6a41a89f618792c92c0e97cc736e1b13f # v10.0.0
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           stale-pr-message: 'This PR was marked stale due to lack of activity. It will be closed in 7 days.'

.github/workflows/triage-followup.yml

@@ -18,7 +18,7 @@ jobs:
         working-directory: ./.github/scripts/triage-helper
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
-      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+      - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
           python-version: 3.13
       - name: Install pipenv