[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/create-github-app-token	action	minor	v3.2.0 → v3.3.0
github/codeql-action	action	minor	v3.38.3 → v3.39.0
mysql (source)	final	digest	6ea9082 → 0f51e63
open-telemetry/shared-workflows	workflow	minor	v0.19.0 → v0.23.0
otel/opentelemetry-collector		minor	0.162.0 → 0.163.1
otel/opentelemetry-collector-contrib		minor	0.162.0 → 0.163.1
python (source)	container	minor	3.14-slim → 3.15-slim

---

Release Notes

actions/create-github-app-token

v3.3.0

Compare Source

Features

• update permission inputs (#​399) (a47236f)

Bug Fixes

• deps: bump nested undici from 6.24.0 to 6.29.0 (#​403) (12461a3)
• deps: bump the production-dependencies group across 1 directory with 3 updates (#​395) (a69c19d)

github/codeql-action

v3.39.0

Compare Source

• Breaking change: Bump the minimum required CodeQL bundle version to 2.20.7. #​4205
• The codeql-action/analyze step now validates that a correct argument for the checkout_path input has been provided. The checkout_path input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by codeql-action/init, then the CodeQL Action now produces a warning. #​4148
• Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. #​4206
• The codeql-action/start-proxy step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as codeql-action/init. This primarily benefits customers who are using GitHub instances other than github.com where the codeql-action/start-proxy step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #​4198

open-telemetry/shared-workflows

v0.23.0

Compare Source

What's Changed

• update runner for fossa workflow by @​codeboten in #​480
• Allow approved dashboard handoffs to advance to maintainers by @​trask in #​476
• Retry Copilot errors once before releasing the review gate by @​trask in #​477
• Hide inactive Copilot reviewers from the PR dashboard by @​trask in #​479

Full Changelog: open-telemetry/shared-workflows@v0.22.0...v0.23.0

v0.22.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.21.0 by @​otelbot-shared-workflows[bot] in #​469
• Add Alex Boten and Piotr Kiełkowicz as approvers by @​trask in #​470
• Unblock GitHub Actions queue retries by @​trask in #​464
• Remove retired data snapshot rollout flag by @​trask in #​471
• Fix GitHub Actions queue collector completion gaps by @​trask in #​472
• add fossa workflow by @​codeboten in #​474
• document the release process by @​codeboten in #​475

Full Changelog: open-telemetry/shared-workflows@v0.21.0...v0.22.0

v0.21.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.20.0 by @​otelbot-shared-workflows[bot] in #​463
• Remove completed queue-record migration by @​trask in #​465
• Make generated-data storage permanently snapshot-only by @​trask in #​466
• Retire legacy pull request dashboard execution by @​trask in #​467

Full Changelog: open-telemetry/shared-workflows@v0.20.0...v0.21.0

v0.20.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.19.0 by @​otelbot-shared-workflows[bot] in #​449
• Separate live dashboard refreshes from maintenance work by @​trask in #​453
• Bump scorecard-action to 2.5.0 + revert local workaround by @​Kielek in #​457
• Remove dashboard code_ref compatibility after promotion by @​trask in #​438
• Isolate Git checkouts for queue-owned dashboard processors by @​trask in #​454
• Handle Copilot review quota exhaustion by @​trask in #​452
• Add snapshot-only storage for generated data branches by @​trask in #​436
• Add Go repositories to the pull request dashboard by @​MrAlias in #​458

New Contributors

• @​Kielek made their first contribution in #​457

Full Changelog: open-telemetry/shared-workflows@v0.19.0...v0.20.0

open-telemetry/opentelemetry-collector-releases (otel/opentelemetry-collector)

v0.163.1

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 8am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[opentelemetry-pr-dashboard]

Pull request dashboard status

Waiting on reviewers · refreshed 2026-10-21 08:09 UTC

Review the latest changes.

Status above doesn't look right?

• Just replied or pushed? Anything around or after the refresh time above may not be picked up yet — give it a few minutes.
• Anything look wrong? Report it with what you expected; it helps us improve the dashboard.