[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-java	action	minor	v6.1.0 → v6.2.0
docker/login-action	action	minor	v4.7.0 → v4.8.0
github/codeql-action	action	patch	v4.39.2 → v4.39.3
jdx/mise-action	action	patch	v5.2.6 → v5.2.7
python (source)	final	digest	8c13a3f → 65a65fc
python (source)	stage	digest	d7a732b → d650864

---

Release Notes

actions/setup-java

v6.2.0

Compare Source

What's Changed

• Fix Liberica SDKMAN patch release resolution by @​brunoborges in #​1291
• Update Undici to 6.29.1 by @​brunoborges in #​1308
• chore(deps): bump the monthly-npm-updates group with 12 updates by @​dependabot[bot] in #​1309
• Fix Liberica Java 25 release resolution by @​brunoborges in #​1313
• Add repository-specific Copilot instructions by @​brunoborges in #​1312
• Support exact Corretto release versions by @​electrum in #​1310
• Support Maven mirrors in generated settings.xml by @​brunoborges in #​1289

New Contributors

• @​electrum made their first contribution in #​1310

Full Changelog: actions/setup-java@v6.1.0...v6.2.0

docker/login-action

v4.8.0

Compare Source

• Set Docker Hub OIDC token lifetime default to 1 hour by @​crazy-max in #​1070
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1161.0 in #​1103
• Bump @​docker/actions-toolkit from 0.107.0 to 0.109.0 in #​1105
• Bump vite from 7.3.6 to 7.3.7 in #​1101

Full Changelog: docker/login-action@v4.7.0...v4.8.0

github/codeql-action

v4.39.3

Compare Source

• Fixed diff-informed alert filtering incorrectly removing alerts in changed files whose paths contain spaces, special characters, or non-ASCII characters. #​4283

jdx/mise-action

v5.2.7: : Retry failed mise downloads with backoff and show the HTTP status

Compare Source

When the action can't download mise, the log now shows the HTTP status and host for each failed attempt. Retries wait longer between attempts, so a short GitHub outage is less likely to fail the job.

Fixed

• Download failures now show what went wrong, and brief outages are retried for longer. Before this release, a failed mise download logged only The process '/usr/bin/curl' failed with exit code 22 and retried five times with a fixed 2-second wait. From that message you couldn't tell a rate limit from a missing asset or a server error. Each failed attempt now logs the HTTP status and the host that answered:

  Download attempt 1/6 failed: Could not download github.com/…/mise-v2026.10.21-linux-x64.tar.zst (HTTP 503 from github.com). Retrying in 3.4 seconds.
  

  The wait between attempts doubles from about 2s up to a 30s cap, with random jitter, so the five retries cover roughly a minute. Only transient failures are retried: connection errors and timeouts, and HTTP 408, 429 and 5xx responses. A 404, any other 4xx, or a local file-write error fails at once. The log shows only the host and file name of each URL, never signed query strings or curl/wget stderr. Partial files are deleted before the next attempt. wget now runs with --tries=1, so its own 20-retry default no longer stacks on top of the action's retries. This applies to every download the action makes: the release archive, checksums and the packslip bundle. Checksum and signature verification are unchanged, and there are no new inputs. (#​722 by @​jdx, fixes #​721)

Changed

• packslip, which the action uses to verify downloaded mise releases, is updated from 1.11.0 to 1.11.2. This version includes upstream hardening of its verifier checks. (#​726)

Full Changelog: jdx/mise-action@v5.2.6...v5.2.7

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 07:59 AM, only on Tuesday (* 0-7 * * 2)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[opentelemetry-pr-dashboard]

Pull request dashboard status

Waiting on reviewers · refreshed 2026-11-10 02:17 UTC

Review the latest changes.

Status above doesn't look right?

• Just replied or pushed? Anything around or after the refresh time above may not be picked up yet — give it a few minutes.
• Anything look wrong? Report it with what you expected; it helps us improve the dashboard.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.37%. Comparing base (fecfb6d) to head (4584a4a).

Additional details and impacted files

@@            Coverage Diff            @@
##               main    #9026   +/-   ##
=========================================
  Coverage     90.37%   90.37%           
  Complexity    11018    11018           
=========================================
  Files          1021     1021           
  Lines         30124    30124           
  Branches       3933     3933           
=========================================
  Hits          27225    27225           
  Misses         1941     1941           
  Partials        958      958           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.