chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/cache	action	minor	v4 -> v4.2.0
actions/checkout	action	minor	v4 -> v4.2.2
actions/download-artifact	action	minor	v4 -> v4.1.8
actions/setup-go	action	minor	v5 -> v5.3.0
actions/upload-artifact	action	minor	v4 -> v4.6.0
azure/setup-helm	action	pinDigest	-> fe7b79c
azure/setup-kubectl	action	pinDigest	-> 3e0aec4
docker/build-push-action	action	minor	v6 -> v6.13.0
docker/metadata-action	action	minor	v5 -> v5.6.1
docker/setup-buildx-action	action	minor	v3 -> v3.8.0
docker/setup-qemu-action	action	minor	v3 -> v3.3.0
gcr.io/distroless/static	final	digest	6cd937e -> 6ec5aa9
github.com/onsi/ginkgo/v2	require	patch	v2.22.0 -> v2.22.2
github.com/onsi/gomega	require	patch	v1.36.1 -> v1.36.2
github.com/open-telemetry/opentelemetry-operator	require	minor	v0.115.0 -> v0.117.0
github/codeql-action	action	minor	v3.27.9 -> v3.28.5
go.opentelemetry.io/collector/component	require	minor	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/config/configauth	require	minor	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/config/configcompression	require	minor	v1.21.0 -> v1.24.0
go.opentelemetry.io/collector/config/configopaque	require	minor	v1.21.0 -> v1.24.0
go.opentelemetry.io/collector/config/configtelemetry	require	minor	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/otelcol	require	minor	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/pipeline	require	minor	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/service	require	minor	v0.115.0 -> v0.118.0
golang	stage	patch	1.23.3-alpine3.20 -> 1.23.5-alpine3.20
golang.org/x/exp	require	digest	4a55095 -> 7588d65
golangci/golangci-lint		minor	1.62.2 -> 1.63.4
haya14busa/action-cond	action	pinDigest	-> 94f77f7
k8s.io/api	require	patch	v0.32.0 -> v0.32.1
k8s.io/apimachinery	require	patch	v0.32.0 -> v0.32.1
k8s.io/client-go	require	patch	v0.32.0 -> v0.32.1
kubernetes-sigs/controller-tools		minor	0.16.5 -> 0.17.1
opentelemetry-operator (source)		minor	0.75.1 -> 0.79.0
sigs.k8s.io/controller-runtime	require	minor	v0.19.3 -> v0.20.1
sigstore/cosign-installer	action	minor	v3 -> v3.7.0

---

Release Notes

actions/cache (actions/cache)

v4.2.0

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

• @​actions/core: 1.11.1
• @​actions/io: 1.1.3
• @​vercel/ncc: 0.38.3

Full Changelog: actions/cache@v4...v4.2.0

v4.1.2

Compare Source

What's Changed

• Add Bun example by @​idleberg in https://github.com/actions/cache/pull/1456
• Revise isGhes logic by @​jww3 in https://github.com/actions/cache/pull/1474
• Bump braces from 3.0.2 to 3.0.3 by @​dependabot in https://github.com/actions/cache/pull/1475
• Add dependabot.yml to enable automatic dependency upgrades by @​Link- in https://github.com/actions/cache/pull/1476
• Bump actions/checkout from 3 to 4 by @​dependabot in https://github.com/actions/cache/pull/1478
• Bump actions/stale from 3 to 9 by @​dependabot in https://github.com/actions/cache/pull/1479
• Bump github/codeql-action from 2 to 3 by @​dependabot in https://github.com/actions/cache/pull/1483
• Bump actions/setup-node from 3 to 4 by @​dependabot in https://github.com/actions/cache/pull/1481
• Prepare 4.1.2 release by @​Link- in https://github.com/actions/cache/pull/1477

New Contributors

• @​idleberg made their first contribution in https://github.com/actions/cache/pull/1456
• @​jww3 made their first contribution in https://github.com/actions/cache/pull/1474
• @​Link- made their first contribution in https://github.com/actions/cache/pull/1476

Full Changelog: actions/cache@v4...v4.1.2

v4.1.1

Compare Source

What's Changed

• Restore original behavior of cache-hit output by @​joshmgross in https://github.com/actions/cache/pull/1467

Full Changelog: actions/cache@v4.1.0...v4.1.1

v4.1.0

Compare Source

What's Changed

• Fix cache-hit output when cache missed by @​fchimpan in https://github.com/actions/cache/pull/1404
• Deprecate save-always input by @​joshmgross in https://github.com/actions/cache/pull/1452

New Contributors

• @​ottlinger made their first contribution in https://github.com/actions/cache/pull/1437
• @​Olegt0rr made their first contribution in https://github.com/actions/cache/pull/1377
• @​fchimpan made their first contribution in https://github.com/actions/cache/pull/1404
• @​x612skm made their first contribution in https://github.com/actions/cache/pull/1434
• @​todgru made their first contribution in https://github.com/actions/cache/pull/1311
• @​Jcambass made their first contribution in https://github.com/actions/cache/pull/1463
• @​mackey0225 made their first contribution in https://github.com/actions/cache/pull/1462
• @​quatquatt made their first contribution in https://github.com/actions/cache/pull/1445

Full Changelog: actions/cache@v4.0.2...v4.1.0

v4.0.2

Compare Source

v4.0.1

Compare Source

What's Changed

• Update README.md by @​yacaovsnc in https://github.com/actions/cache/pull/1304
• Update examples by @​yacaovsnc in https://github.com/actions/cache/pull/1305
• Update actions/cache publish flow by @​bethanyj28 in https://github.com/actions/cache/pull/1340
• Update @​actions/cache by @​bethanyj28 in https://github.com/actions/cache/pull/1341

New Contributors

• @​yacaovsnc made their first contribution in https://github.com/actions/cache/pull/1304

Full Changelog: actions/cache@v4...v4.0.1

actions/checkout (actions/checkout)

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in https://github.com/actions/checkout/pull/1941
• Expand unit test coverage for isGhes by @​jww3 in https://github.com/actions/checkout/pull/1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in https://github.com/actions/checkout/pull/1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in https://github.com/actions/checkout/pull/1180
• Dependency updates by @​dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

v4.1.7

Compare Source

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in https://github.com/actions/checkout/pull/1739
• Bump actions/checkout from 3 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1697
• Check out other refs/* by commit by @​orhantoy in https://github.com/actions/checkout/pull/1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in https://github.com/actions/checkout/pull/1776

v4.1.6

Compare Source

• Check platform to set archive extension appropriately by @​cory-miller in https://github.com/actions/checkout/pull/1732

v4.1.5

Compare Source

What's Changed

• Update NPM dependencies by @​cory-miller in https://github.com/actions/checkout/pull/1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in https://github.com/actions/checkout/pull/1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1695
• README: Suggest user.email to be 41898282+github-actions[bot]@​users.noreply.github.com by @​cory-miller in https://github.com/actions/checkout/pull/1707

Full Changelog: actions/checkout@v4.1.4...v4.1.5

v4.1.4

Compare Source

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in https://github.com/actions/checkout/pull/1692
• Add dependabot config by @​cory-miller in https://github.com/actions/checkout/pull/1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in https://github.com/actions/checkout/pull/1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in https://github.com/actions/checkout/pull/1643

v4.1.3

Compare Source

What's Changed

• Update actions/checkout version in update-main-version.yml by @​jww3 in https://github.com/actions/checkout/pull/1650
• Check git version before attempting to disable sparse-checkout by @​jww3 in https://github.com/actions/checkout/pull/1656
• Add SSH user parameter by @​cory-miller in https://github.com/actions/checkout/pull/1685

Full Changelog: actions/checkout@v4.1.2...v4.1.3

v4.1.2

Compare Source

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in https://github.com/actions/checkout/pull/1598

v4.1.1

Compare Source

What's Changed

• Update CODEOWNERS to Launch team by @​joshmgross in https://github.com/actions/checkout/pull/1510
• Correct link to GitHub Docs by @​peterbe in https://github.com/actions/checkout/pull/1511
• Link to release page from what's new section by @​cory-miller in https://github.com/actions/checkout/pull/1514

New Contributors

• @​joshmgross made their first contribution in https://github.com/actions/checkout/pull/1510
• @​peterbe made their first contribution in https://github.com/actions/checkout/pull/1511

Full Changelog: actions/checkout@v4.1.0...v4.1.1

v4.1.0

Compare Source

• Add support for partial checkout filters

actions/download-artifact (actions/download-artifact)

v4.1.8

Compare Source

What's Changed

• Update @​actions/artifact version, bump dependencies by @​robherley in https://github.com/actions/download-artifact/pull/341

Full Changelog: actions/download-artifact@v4...v4.1.8

v4.1.7

Compare Source

What's Changed

• Update @​actions/artifact dependency by @​bethanyj28 in https://github.com/actions/download-artifact/pull/325

Full Changelog: actions/download-artifact@v4.1.6...v4.1.7

v4.1.6

Compare Source

What's Changed

• updating @actions/artifact dependency to v2.1.6 by @​eggyhead in https://github.com/actions/download-artifact/pull/324

Full Changelog: actions/download-artifact@v4.1.5...v4.1.6

v4.1.5

Compare Source

What's Changed

• Update readme with v3/v2/v1 deprecation notice by @​robherley in https://github.com/actions/download-artifact/pull/322
• Update dependencies @actions/core to v1.10.1 and @actions/artifact to v2.1.5

Full Changelog: actions/download-artifact@v4.1.4...v4.1.5

v4.1.4

Compare Source

What's Changed

• Update @​actions/artifact by @​bethanyj28 in https://github.com/actions/download-artifact/pull/307

Full Changelog: actions/download-artifact@v4...v4.1.4

v4.1.3

Compare Source

What's Changed

• Update release-new-action-version.yml by @​konradpabjan in https://github.com/actions/download-artifact/pull/292
• Update toolkit dependency with updated unzip logic by @​bethanyj28 in https://github.com/actions/download-artifact/pull/299
• Update @​actions/artifact by @​bethanyj28 in https://github.com/actions/download-artifact/pull/303

New Contributors

• @​bethanyj28 made their first contribution in https://github.com/actions/download-artifact/pull/299

Full Changelog: actions/download-artifact@v4...v4.1.3

v4.1.2

Compare Source

• Bump @​actions/artifacts to latest version to include updated GHES host check

v4.1.1

Compare Source

• Fix transient request timeouts https://github.com/actions/download-artifact/issues/249
• Bump @actions/artifacts to latest version

v4.1.0

Compare Source

What's Changed

• Some cleanup by @​robherley in https://github.com/actions/download-artifact/pull/247
• Fix default for run-id by @​stchr in https://github.com/actions/download-artifact/pull/252
• Support pattern matching to filter artifacts & merge to same directory by @​robherley in https://github.com/actions/download-artifact/pull/259

New Contributors

• @​stchr made their first contribution in https://github.com/actions/download-artifact/pull/252

Full Changelog: actions/download-artifact@v4...v4.1.0

actions/setup-go (actions/setup-go)

v5.3.0

Compare Source

What's Changed

• Use the new cache service: upgrade @actions/cache to ^4.0.0 by @​Link- in https://github.com/actions/setup-go/pull/531
• Configure Dependabot settings by @​HarithaVattikuti in https://github.com/actions/setup-go/pull/530
• Document update - permission section by @​HarithaVattikuti in https://github.com/actions/setup-go/pull/533
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in https://github.com/actions/setup-go/pull/534

New Contributors

• @​Link- made their first contribution in https://github.com/actions/setup-go/pull/531

Full Changelog: actions/setup-go@v5...v5.3.0

v5.2.0

Compare Source

What's Changed

• Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @​Shegox in https://github.com/actions/setup-go/pull/496

New Contributors

• @​Shegox made their first contribution in https://github.com/actions/setup-go/pull/496

Full Changelog: actions/setup-go@v5...v5.2.0

v5.1.0

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/setup-go/pull/500
• Upgrade IA Publish by @​Jcambass in https://github.com/actions/setup-go/pull/502
• Add architecture to cache key by @​Zxilly in https://github.com/actions/setup-go/pull/493
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.
• Enhance workflows and Upgrade micromatch Dependency by @​priyagupta108 in https://github.com/actions/setup-go/pull/510

Bug Fixes

• Revise isGhes logic by @​jww3 in https://github.com/actions/setup-go/pull/511

New Contributors

• @​Zxilly made their first contribution in https://github.com/actions/setup-go/pull/493
• @​Jcambass made their first contribution in https://github.com/actions/setup-go/pull/500
• @​jww3 made their first contribution in https://github.com/actions/setup-go/pull/511
• @​priyagupta108 made their first contribution in https://github.com/actions/setup-go/pull/510

Full Changelog: actions/setup-go@v5...v5.1.0

v5.0.2

Compare Source

What's Changed

Bug fixes:

• Fix versions check failure by @​HarithaVattikuti in https://github.com/actions/setup-go/pull/479

Dependency updates:

• Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by @​dependabot in https://github.com/actions/setup-go/pull/487

New Contributors

• @​HarithaVattikuti made their first contribution in https://github.com/actions/setup-go/pull/479

Full Changelog: actions/setup-go@v5...v5.0.2

v5.0.1

Compare Source

What's Changed

• Bump undici from 5.28.2 to 5.28.3 and dependencies upgrade by @​dependabot , @​HarithaVattikuti in https://github.com/actions/setup-go/pull/465
• Update documentation with latest V5 release notes by @​ab in https://github.com/actions/setup-go/pull/459
• Update version documentation by @​178inaba in https://github.com/actions/setup-go/pull/458
• Documentation update of actions/setup-go to v5 by @​chenrui333 in https://github.com/actions/setup-go/pull/449

New Contributors

• @​ab made their first contribution in https://github.com/actions/setup-go/pull/459

Full Changelog: actions/setup-go@v5.0.0...v5.0.1

actions/upload-artifact (actions/upload-artifact)

v4.6.0

Compare Source

What's Changed

• Expose env vars to control concurrency and timeout by @​yacaovsnc in https://github.com/actions/upload-artifact/pull/662

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

Compare Source

v4.4.3

Compare Source

What's Changed

• Undo indirect dependency updates from #​627 by @​joshmgross in https://github.com/actions/upload-artifact/pull/632

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

v4.4.2

Compare Source

What's Changed

• Bump @actions/artifact to 2.1.11 by @​robherley in https://github.com/actions/upload-artifact/pull/627
  • Includes fix for relative symlinks not resolving properly

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

v4.4.1

Compare Source

What's Changed

• Add a section

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * *" in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 49 additional dependencies were updated

Details:

Package	Change
github.com/google/cel-go	v0.20.1 -> v0.22.0
github.com/google/pprof	v0.0.0-20241029153458-d1b30febd7db -> v0.0.0-20241210010833-40e02aabc2ad
github.com/grpc-ecosystem/grpc-gateway/v2	v2.23.0 -> v2.25.1
github.com/shirou/gopsutil/v4	v4.24.11 -> v4.24.12
github.com/stoewer/go-strcase	v1.2.0 -> v1.3.0
go.opentelemetry.io/collector/component/componentstatus	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/component/componenttest	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/confmap	v1.21.0 -> v1.24.0
go.opentelemetry.io/collector/connector	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/connector/connectortest	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/consumer	v1.21.0 -> v1.24.0
go.opentelemetry.io/collector/consumer/consumererror	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/consumer/consumertest	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/exporter	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/exporter/exportertest	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/extension	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/extension/auth	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/extension/extensioncapabilities	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/extension/extensiontest	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/featuregate	v1.21.0 -> v1.24.0
go.opentelemetry.io/collector/internal/fanoutconsumer	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/pdata	v1.21.0 -> v1.24.0
go.opentelemetry.io/collector/pdata/pprofile	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/pdata/testdata	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/processor	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/processor/processortest	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/receiver	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/receiver/receivertest	v0.115.0 -> v0.118.0
go.opentelemetry.io/collector/semconv	v0.115.0 -> v0.118.0
go.opentelemetry.io/otel	v1.32.0 -> v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp	v1.32.0 -> v1.34.0
go.opentelemetry.io/otel/exporters/prometheus	v0.54.0 -> v0.56.0
go.opentelemetry.io/otel/metric	v1.32.0 -> v1.34.0
go.opentelemetry.io/otel/sdk	v1.32.0 -> v1.34.0
go.opentelemetry.io/otel/sdk/metric	v1.32.0 -> v1.34.0
go.opentelemetry.io/otel/trace	v1.32.0 -> v1.34.0
go.opentelemetry.io/proto/otlp	v1.3.1 -> v1.5.0
golang.org/x/net	v0.33.0 -> v0.34.0
golang.org/x/sys	v0.28.0 -> v0.29.0
golang.org/x/term	v0.27.0 -> v0.28.0
golang.org/x/tools	v0.28.0 -> v0.29.0
google.golang.org/genproto/googleapis/api	v0.0.0-20241104194629-dd2ea8efbc28 -> v0.0.0-20250115164207-1a7da9e5054f
google.golang.org/genproto/googleapis/rpc	v0.0.0-20241104194629-dd2ea8efbc28 -> v0.0.0-20250115164207-1a7da9e5054f
google.golang.org/grpc	v1.67.1 -> v1.69.4
google.golang.org/protobuf	v1.35.2 -> v1.36.3
k8s.io/apiextensions-apiserver	v0.31.3 -> v0.32.0
k8s.io/apiserver	v0.31.3 -> v0.32.0
k8s.io/component-base	v0.31.3 -> v0.32.0
sigs.k8s.io/apiserver-network-proxy/konnectivity-client	v0.30.3 -> v0.31.0