Update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	minor	v4.37.9 → v4.38.2
open-telemetry/shared-workflows	workflow	minor	v0.13.0 → v0.17.0
streetsidesoftware/cspell-action	action	minor	v9.0.1 → v9.1.0

---

Release Notes

github/codeql-action (github/codeql-action)

v4.38.2

Compare Source

• Update default CodeQL bundle version to 2.27.1. #​4160

v4.38.1

Compare Source

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #​4146

v4.38.0

Compare Source

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #​4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #​4072
• Update default CodeQL bundle version to 2.27.0. #​4129

open-telemetry/shared-workflows (open-telemetry/shared-workflows)

v0.17.0

Compare Source

What's Changed

• Avoid full-history checkout in release workflow by @​trask in #​401
• chloggen: skip workflow if not in a pull request by @​codeboten in #​409
• cloggen: remove duplicative name by @​codeboten in #​410
• Add queue time dashboard and filter unmeasurable jobs by @​trask in #​394
• Improve pull request dashboard failure recovery by @​trask in #​408
• Unblock queue dashboard migration and Pages deployment by @​trask in #​412
• Preserve dashboard dispatcher Netlify keys on repeat deploys by @​trask in #​415
• Recover dashboard backfills blocked by stale environment waits by @​trask in #​413
• Refresh dashboard CI for fork pull requests by @​trask in #​414
• Use Copilot SDK for dashboard classification and harden workflow cleanup by @​trask in #​416

Full Changelog: open-telemetry/shared-workflows@v0.16.0...v0.17.0

v0.16.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.15.0 by @​otelbot-shared-workflows[bot] in #​402
• add changelog workflow by @​codeboten in #​404

Full Changelog: open-telemetry/shared-workflows@v0.15.0...v0.16.0

v0.15.0

Compare Source

What's Changed

• Clarify unresolved reviewer feedback badge by @​trask in #​375
• Add PR dashboard to ecosystem-explorer by @​jaydeluca in #​379
• Separate pull request dashboard delivery state by @​trask in #​383
• Collect organization-wide GitHub Actions queue data by @​trask in #​377
• Route stable dashboard queue work through promoted workflows by @​trask in #​384
• Backfill GitHub Actions queue data to January 2026 by @​trask in #​385
• Improve pull request dashboard failure recovery by @​trask in #​388
• Retry truncated GitHub API responses by @​trask in #​392

New Contributors

• @​jaydeluca made their first contribution in #​379

Full Changelog: open-telemetry/shared-workflows@v0.14.0...v0.15.0

v0.14.0

Compare Source

What's Changed

• Promote pull request dashboard to v0.13.0 by @​otelbot-shared-workflows[bot] in #​340
• chore: add opentelemetry-go-compile-instrumentation to the pull request dashboard by @​kakkoyun in #​339
• chore: add opentelemetry-ebpf-instrumentation to the pull request dashboard by @​mmat11 in #​348
• Prevent duplicate workflow failure issues by @​trask in #​351
• Separate automation author routing from approval policy by @​trask in #​342
• Route workflow approval checks to reviewers and maintainers by @​trask in #​343
• Treat still-broken fixes as author action by @​trask in #​344
• Fix dashboard feedback handoffs by @​trask in #​345
• Switch PR dashboard to GPT-5.6 Luna by @​trask in #​354
• Fix dashboard author deferral classification by @​trask in #​362
• Cancel stalled dashboard workflow runs by @​trask in #​364
• Drain multiple dashboard queue waves per runner by @​trask in #​365
• Filter Scorecard false positives for same-repository actions by @​trask in #​367
• chore: add opentelemetry-rust to PR dashboard by @​scottgerring in #​372
• Show review thread badge only when authors need to act by @​trask in #​368
• Recover dashboard runs stalled before runner assignment by @​trask in #​373

New Contributors

• @​kakkoyun made their first contribution in #​339
• @​mmat11 made their first contribution in #​348
• @​scottgerring made their first contribution in #​372

Full Changelog: open-telemetry/shared-workflows@v0.13.0...v0.14.0

streetsidesoftware/cspell-action (streetsidesoftware/cspell-action)

v9.1.0

Compare Source

Features

• Update CSpell version (10.1.0) (#​2746) (16fdd45)
• Update CSpell version (10.2.0) (#​2755) (61bcff2)

Updates and Bug Fixes

• Update CSpell version (10.1.1) (#​2748) (705b9d5)
• Update CSpell version (10.2.1) (#​2756) (ff193e1)
• Update CSpell version (10.2.2) (#​2758) (86da7af)
• Update Dictionaries and Dependencies (#​2743) (13f222e)
• Update Dictionaries and Dependencies (#​2753) (2f47bea)
• Workflow Bot -- Update ALL Dependencies (main) (#​2747) (388fa3e)
• Workflow Bot -- Update ALL Dependencies (main) (#​2752) (c0b97ad)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • On day 2 of the month (* * 2 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.