chore(deps): update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	patch	v4.37.7 → v4.37.9
jdx/mise-action	action	minor	v4.2.5 → v4.3.0
open-telemetry/shared-workflows	workflow	minor	v0.7.0 → v0.12.0

---

Release Notes

github/codeql-action (github/codeql-action)

v4.37.9

Compare Source

• Update default CodeQL bundle version to 2.26.4. #​4106

v4.37.8

Compare Source

No user facing changes.

jdx/mise-action (jdx/mise-action)

v4.3.0: : Install age-filtered mise releases

Compare Source

A small release that adds an opt-in way to hold back from installing brand-new mise releases.

Added

minimum_release_age input (#​604 by @​jdx)

When version is omitted, you can now set minimum_release_age to install the newest stable, non-draft mise release that is older than a given cutoff — a simple way to avoid picking up a mise release the moment it ships (closes #​603).

- uses: jdx/mise-action@v4
  with:
    minimum_release_age: 7d

It accepts relative durations (24h, 7d, 6mo, 1y) as well as absolute ISO dates and timestamps. Age-filtered versions are resolved from the GitHub Releases API (the CDN only serves the latest binary) and downloaded by their exact version. If mise is already present on disk, an age-filtered run updates it to the resolved version rather than keeping the existing binary. An explicit version always takes precedence over minimum_release_age, and invalid dates fail fast.

Full Changelog: jdx/mise-action@v4.2.5...v4.3.0

open-telemetry/shared-workflows (open-telemetry/shared-workflows)

v0.12.0

Compare Source

What's Changed

• Use typed dashboard result and state contracts by @​trask in #​303
• Normalize pull request data before dashboard evaluation by @​trask in #​304
• Add opentelemetry-ebpf-profiler to PR dashboard by @​florianl in #​318
• Allow callers to skip Scorecard publication by @​trask in #​317
• Extract pure classification policy by @​trask in #​313
• Isolate classification execution and cache orchestration by @​trask in #​314
• End reviewer handoff on actionable feedback by @​trask in #​310
• Create dashboard status comments for draft pull requests by @​trask in #​321

New Contributors

• @​florianl made their first contribution in #​318

Full Changelog: open-telemetry/shared-workflows@v0.11.0...v0.12.0

v0.11.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.10.0 by @​otelbot-shared-workflows[bot] in #​284
• Default releases to minor version bumps by @​trask in #​283
• Add a manual sweep that repairs stale author reminders by @​trask in #​281
• Load dashboard code from the reusable workflow commit by @​trask in #​285
• Restore dashboard workflow Git context by @​trask in #​287
• Extract PR dashboard discussion lifecycle by @​trask in #​293
• Extract PR dashboard routing snapshot by @​trask in #​294
• Extract dashboard routing into a single decision by @​trask in #​296
• Extract PR dashboard reviewer state by @​trask in #​297
• Extract pull request activity timeline by @​trask in #​298
• Separate PR evaluation from dashboard operations by @​trask in #​299
• Extract dashboard state update transaction by @​trask in #​300
• Defer dashboard comment updates for locked pull requests by @​trask in #​291
• Remove CNCF-hosted runner option from Scorecard and Zizmor docs by @​trask in #​309
• Add Scorecard file mode and Harden Runner options by @​trask in #​306

Full Changelog: open-telemetry/shared-workflows@v0.10.0...v0.11.0

v0.10.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.9.0 by @​otelbot-shared-workflows[bot] in #​275
• Shorten the author reminder comment by @​trask in #​276
• Restore GitHub-hosted runners by @​trask in #​278
• Show time spent in draft on PR dashboard by @​trask in #​272
• Make Netlify queue mode updates repeatable by @​trask in #​277
• Make Netlify queue worker retries safe by @​trask in #​279
• Stop a stalled gate from failing the repository run by @​trask in #​280

Full Changelog: open-telemetry/shared-workflows@v0.9.0...v0.10.0

v0.9.0

Compare Source

What's Changed

• Queue pull request dashboard updates in Netlify by @​trask in #​271

Full Changelog: open-telemetry/shared-workflows@v0.8.0...v0.9.0

v0.8.0

Compare Source

What's Changed

• Fix PR dashboard promotion permissions by @​trask in #​250
• Promote pull request dashboard to v0.7.0 by @​otelbot-shared-workflows[bot] in #​252
• Add otel-python repos to pull request dashboard by @​emdneto in #​249
• Add semantic-conventions-conformance to PR dashboard by @​lmolkova in #​257
• Request Copilot's first review when the automatic one never arrives by @​trask in #​253
• Stop a gate that never reports from holding a pull request forever by @​trask in #​255
• Keep re-requested approvals in reviewer queue by @​trask in #​262
• Keep conflicted PR routing actionable without gate failures by @​trask in #​265
• Migrate workflows to CNCF runners with caller opt-in by @​trask in #​269

New Contributors

• @​otelbot-shared-workflows[bot] made their first contribution in #​252
• @​emdneto made their first contribution in #​249
• @​lmolkova made their first contribution in #​257

Full Changelog: open-telemetry/shared-workflows@v0.7.0...v0.8.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 07:59 AM, only on Tuesday (* 0-7 * * 2)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.