[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
open-telemetry/shared-workflows	workflow	minor	v0.13.0 → v0.23.0	v0.24.0

---

Release Notes

open-telemetry/shared-workflows

v0.23.0

Compare Source

What's Changed

• update runner for fossa workflow by @​codeboten in #​480
• Allow approved dashboard handoffs to advance to maintainers by @​trask in #​476
• Retry Copilot errors once before releasing the review gate by @​trask in #​477
• Hide inactive Copilot reviewers from the PR dashboard by @​trask in #​479

Full Changelog: open-telemetry/shared-workflows@v0.22.0...v0.23.0

v0.22.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.21.0 by @​otelbot-shared-workflows[bot] in #​469
• Add Alex Boten and Piotr Kiełkowicz as approvers by @​trask in #​470
• Unblock GitHub Actions queue retries by @​trask in #​464
• Remove retired data snapshot rollout flag by @​trask in #​471
• Fix GitHub Actions queue collector completion gaps by @​trask in #​472
• add fossa workflow by @​codeboten in #​474
• document the release process by @​codeboten in #​475

Full Changelog: open-telemetry/shared-workflows@v0.21.0...v0.22.0

v0.21.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.20.0 by @​otelbot-shared-workflows[bot] in #​463
• Remove completed queue-record migration by @​trask in #​465
• Make generated-data storage permanently snapshot-only by @​trask in #​466
• Retire legacy pull request dashboard execution by @​trask in #​467

Full Changelog: open-telemetry/shared-workflows@v0.20.0...v0.21.0

v0.20.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.19.0 by @​otelbot-shared-workflows[bot] in #​449
• Separate live dashboard refreshes from maintenance work by @​trask in #​453
• Bump scorecard-action to 2.5.0 + revert local workaround by @​Kielek in #​457
• Remove dashboard code_ref compatibility after promotion by @​trask in #​438
• Isolate Git checkouts for queue-owned dashboard processors by @​trask in #​454
• Handle Copilot review quota exhaustion by @​trask in #​452
• Add snapshot-only storage for generated data branches by @​trask in #​436
• Add Go repositories to the pull request dashboard by @​MrAlias in #​458

New Contributors

• @​Kielek made their first contribution in #​457

Full Changelog: open-telemetry/shared-workflows@v0.19.0...v0.20.0

v0.19.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.18.0 by @​otelbot-shared-workflows[bot] in #​437
• Require clean Copilot reviews for OBI by @​MrAlias in #​431
• Request initial Copilot reviews through the dashboard app by @​trask in #​444
• Recover stalled dashboard publisher runs by @​trask in #​440
• Own dashboard execution with durable queue leases by @​trask in #​441

New Contributors

• @​MrAlias made their first contribution in #​431

Full Changelog: open-telemetry/shared-workflows@v0.18.0...v0.19.0

v0.18.0

Compare Source

What's Changed

• Hide effective PR authors from dashboard reviewers by @​trask in #​421
• Recover stalled dashboard runs with guarded force-cancel by @​trask in #​420
• [zizmor]: stop cancelling runs on main by @​TylerHelmuth in #​430
• Preserve full dashboard delivery across publisher coalescing by @​trask in #​419
• Revert "chloggen: remove duplicative name (#​410)" by @​codeboten in #​435
• Stop cancelling non-PR CodeQL and test runs by @​trask in #​432
• Retry dashboard GitHub API connection errors by @​trask in #​429

Full Changelog: open-telemetry/shared-workflows@v0.17.0...v0.18.0

v0.17.0

Compare Source

What's Changed

• Avoid full-history checkout in release workflow by @​trask in #​401
• chloggen: skip workflow if not in a pull request by @​codeboten in #​409
• cloggen: remove duplicative name by @​codeboten in #​410
• Add queue time dashboard and filter unmeasurable jobs by @​trask in #​394
• Improve pull request dashboard failure recovery by @​trask in #​408
• Unblock queue dashboard migration and Pages deployment by @​trask in #​412
• Preserve dashboard dispatcher Netlify keys on repeat deploys by @​trask in #​415
• Recover dashboard backfills blocked by stale environment waits by @​trask in #​413
• Refresh dashboard CI for fork pull requests by @​trask in #​414
• Use Copilot SDK for dashboard classification and harden workflow cleanup by @​trask in #​416

Full Changelog: open-telemetry/shared-workflows@v0.16.0...v0.17.0

v0.16.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.15.0 by @​otelbot-shared-workflows[bot] in #​402
• add changelog workflow by @​codeboten in #​404

Full Changelog: open-telemetry/shared-workflows@v0.15.0...v0.16.0

v0.15.0

Compare Source

What's Changed

• Clarify unresolved reviewer feedback badge by @​trask in #​375
• Add PR dashboard to ecosystem-explorer by @​jaydeluca in #​379
• Separate pull request dashboard delivery state by @​trask in #​383
• Collect organization-wide GitHub Actions queue data by @​trask in #​377
• Route stable dashboard queue work through promoted workflows by @​trask in #​384
• Backfill GitHub Actions queue data to January 2026 by @​trask in #​385
• Improve pull request dashboard failure recovery by @​trask in #​388
• Retry truncated GitHub API responses by @​trask in #​392

New Contributors

• @​jaydeluca made their first contribution in #​379

Full Changelog: open-telemetry/shared-workflows@v0.14.0...v0.15.0

v0.14.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.13.0 by @​otelbot-shared-workflows[bot] in #​340
• chore: add opentelemetry-go-compile-instrumentation to the pull request dashboard by @​kakkoyun in #​339
• chore: add opentelemetry-ebpf-instrumentation to the pull request dashboard by @​mmat11 in #​348
• Prevent duplicate workflow failure issues by @​trask in #​351
• Separate automation author routing from approval policy by @​trask in #​342
• Route workflow approval checks to reviewers and maintainers by @​trask in #​343
• Treat still-broken fixes as author action by @​trask in #​344
• Fix dashboard feedback handoffs by @​trask in #​345
• Switch PR dashboard to GPT-5.6 Luna by @​trask in #​354
• Fix dashboard author deferral classification by @​trask in #​362
• Cancel stalled dashboard workflow runs by @​trask in #​364
• Drain multiple dashboard queue waves per runner by @​trask in #​365
• Filter Scorecard false positives for same-repository actions by @​trask in #​367
• chore: add opentelemetry-rust to PR dashboard by @​scottgerring in #​372
• Show review thread badge only when authors need to act by @​trask in #​368
• Recover dashboard runs stalled before runner assignment by @​trask in #​373

New Contributors

• @​kakkoyun made their first contribution in #​339
• @​mmat11 made their first contribution in #​348
• @​scottgerring made their first contribution in #​372

Full Changelog: open-telemetry/shared-workflows@v0.13.0...v0.14.0

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • Only on Sunday (* * * * 0)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for goldydocs ready!

Name	Link
🔨 Latest commit	5844bce
🔍 Latest deploy log	https://app.netlify.com/projects/goldydocs/deploys/6add6515e0d1eb6090e8bfb6
😎 Deploy Preview	https://deploy-preview-531--goldydocs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[chalin]

Vet (action-pin procedure, API-only, two cold reviewers plus the maintainer):

• v0.23.0 peels to f09a36e1, the SHA in the diff; on upstream main (19 behind, none ahead); old pin was v0.13.0, so a version bump, not a digest-only move. Release 2026-10-17, not a prerelease, the newest the 7-day cooldown admits.
• Inner delta of the reusable workflow between the two SHAs is two lines: the concurrency fallback moves from github.ref to github.run_id (push/schedule runs on main no longer cancel each other), and zizmorcore/zizmor-action v0.6.3 → v0.6.4 (zizmor 1.30.0 → 1.30.1; upstream's release notes omit it because they exclude Renovate commits). Inner pins (zizmor-action, actions/checkout, codeql-action/upload-sarif) are SHA-bound to immutable releases on their default branches; the scanner image digest matches GHCR. Permissions, persist-credentials: false, inputs and triggers unchanged.
• Caller side: persona: pedantic is still the one declared input; token scope contents: read + security-events: write confirmed in the run logs.
• Behavior: the zizmor job ran on this head under the new pin, auditing the same workflow files as on main with identical results (no new alerts; SARIF uploaded).