build(deps): update actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-java	action	patch	v6.0.0 → v6.0.1
github/codeql-action	action	minor	v4.37.9 → v4.38.0
open-telemetry/shared-workflows	workflow	minor	v0.10.0 → v0.13.0

---

Release Notes

actions/setup-java (actions/setup-java)

v6.0.1

Compare Source

github/codeql-action (github/codeql-action)

v4.38.0

Compare Source

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #​4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #​4072
• Update default CodeQL bundle version to 2.27.0. #​4129

open-telemetry/shared-workflows (open-telemetry/shared-workflows)

v0.13.0

Compare Source

What's Changed

• use ubuntu-slim runners where possible by @​codeboten in #​323
• Avoid duplicate author actions for review summaries by @​trask in #​324
• Avoid top-level replies for reviewer handoff clearance by @​trask in #​326
• Show bot review threads on pull request dashboard by @​trask in #​330
• Remove CNCF runner option by @​trask in #​337
• Keep open Copilot findings in author actions by @​trask in #​331

New Contributors

• @​codeboten made their first contribution in #​323

Full Changelog: open-telemetry/shared-workflows@v0.12.0...v0.13.0

v0.12.0

Compare Source

What's Changed

• Use typed dashboard result and state contracts by @​trask in #​303
• Normalize pull request data before dashboard evaluation by @​trask in #​304
• Add opentelemetry-ebpf-profiler to PR dashboard by @​florianl in #​318
• Allow callers to skip Scorecard publication by @​trask in #​317
• Extract pure classification policy by @​trask in #​313
• Isolate classification execution and cache orchestration by @​trask in #​314
• End reviewer handoff on actionable feedback by @​trask in #​310
• Create dashboard status comments for draft pull requests by @​trask in #​321

New Contributors

• @​florianl made their first contribution in #​318

Full Changelog: open-telemetry/shared-workflows@v0.11.0...v0.12.0

v0.11.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.10.0 by @​otelbot-shared-workflows[bot] in #​284
• Default releases to minor version bumps by @​trask in #​283
• Add a manual sweep that repairs stale author reminders by @​trask in #​281
• Load dashboard code from the reusable workflow commit by @​trask in #​285
• Restore dashboard workflow Git context by @​trask in #​287
• Extract PR dashboard discussion lifecycle by @​trask in #​293
• Extract PR dashboard routing snapshot by @​trask in #​294
• Extract dashboard routing into a single decision by @​trask in #​296
• Extract PR dashboard reviewer state by @​trask in #​297
• Extract pull request activity timeline by @​trask in #​298
• Separate PR evaluation from dashboard operations by @​trask in #​299
• Extract dashboard state update transaction by @​trask in #​300
• Defer dashboard comment updates for locked pull requests by @​trask in #​291
• Remove CNCF-hosted runner option from Scorecard and Zizmor docs by @​trask in #​309
• Add Scorecard file mode and Harden Runner options by @​trask in #​306

Full Changelog: open-telemetry/shared-workflows@v0.10.0...v0.11.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 8am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.