Merge branch 'main' into feat-otelcol-receiver-github

Author: matt-gp

.github/ISSUE_TEMPLATE/blank.yaml

@@ -82,6 +82,7 @@ body:
       - mimir.rules.kubernetes
       - otelcol.auth.basic
       - otelcol.auth.bearer
+      - otelcol.auth.google
       - otelcol.auth.headers
       - otelcol.auth.oauth2
       - otelcol.auth.sigv4

.github/ISSUE_TEMPLATE/bug_report.yaml

@@ -82,6 +82,7 @@ body:
       - mimir.rules.kubernetes
       - otelcol.auth.basic
       - otelcol.auth.bearer
+      - otelcol.auth.google
       - otelcol.auth.headers
       - otelcol.auth.oauth2
       - otelcol.auth.sigv4

.github/ISSUE_TEMPLATE/docs.yaml

@@ -85,6 +85,7 @@ body:
       - mimir.rules.kubernetes
       - otelcol.auth.basic
       - otelcol.auth.bearer
+      - otelcol.auth.google
       - otelcol.auth.headers
       - otelcol.auth.oauth2
       - otelcol.auth.sigv4

.github/ISSUE_TEMPLATE/feature_request.yaml

@@ -82,6 +82,7 @@ body:
       - mimir.rules.kubernetes
       - otelcol.auth.basic
       - otelcol.auth.bearer
+      - otelcol.auth.google
       - otelcol.auth.headers
       - otelcol.auth.oauth2
       - otelcol.auth.sigv4

.github/ISSUE_TEMPLATE/proposal.yaml

@@ -82,6 +82,7 @@ body:
       - mimir.rules.kubernetes
       - otelcol.auth.basic
       - otelcol.auth.bearer
+      - otelcol.auth.google
       - otelcol.auth.headers
       - otelcol.auth.oauth2
       - otelcol.auth.sigv4

.github/renovate.json5

@@ -81,6 +81,9 @@
         "github.com/mackerelio/go-osstat",
         "github.com/ncabatoff/process-exporter",
         "github.com/nerdswords/yet-another-cloudwatch-exporter",
+        "github.com/percona/mongodb_exporter", // v0.48+ pulls in percona-backup-mongodb with platform-incompatible syscall usage
+        "github.com/prometheus-community/yet-another-cloudwatch-exporter", // Introduces breaking changes in minor versions
+        "github.com/prometheus/alertmanager", // v0.31+ requires sigv4 v0.4+ which is held
         "github.com/opencontainers/runc",
         "github.com/prometheus-operator/**",
         "github.com/prometheus/consul_exporter",

.github/workflows/fuzz-go.yml

@@ -107,7 +107,7 @@ jobs:
           # a different module.
           cd "${{ matrix.package }}"
           # Note: -parallel=1 is required to avoid race conditions in the fuzzer until https://github.com/golang/go/issues/56238 is fixed.
-          go test -parallel=1 -fuzz="${{ matrix.function }}\$" -run="${{ matrix.function }}\$" -fuzztime="${FUZZ_TIME}" .
+          go test -tags=gore2regex -parallel=1 -fuzz="${{ matrix.function }}\$" -run="${{ matrix.function }}\$" -fuzztime="${FUZZ_TIME}" .
         env:
           FUZZ_TIME: ${{ inputs.fuzz-time }}
 

.github/workflows/publish-technical-documentation-release.yml

@@ -20,11 +20,32 @@ jobs:
       contents: read
       id-token: write
     runs-on: ubuntu-latest
+
     steps:
+      - name: Wait for release branch ⏳
+        if: github.ref_type == 'tag'
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          TAG="${GITHUB_REF_NAME}"
+          BRANCH="release/v$(echo "${TAG}" | sed -E 's/^v([0-9]+\.[0-9]+)\..*/\1/')"
+          echo "Waiting for branch ${BRANCH}..."
+          for i in $(seq 1 60); do
+            if gh api "repos/${{ github.repository }}/branches/${BRANCH}" > /dev/null 2>&1; then
+              echo "Branch ${BRANCH} found."
+              exit 0
+            fi
+            echo "Attempt ${i}/60: branch not found, retrying in 10s..."
+            sleep 10
+          done
+          echo "::error::Branch ${BRANCH} did not appear within 10 minutes."
+          exit 1
+
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
           persist-credentials: false
+
       - uses: grafana/writers-toolkit/publish-technical-documentation-release@8cc658b604c6e05c275af30163a1c7728dfe19b2 # publish-technical-documentation-release/v2
         # This internal action's version is left as a tag instead of a pinned hash because renovate
         # does not support this type of tag/version format without custom configuration.

.github/workflows/release-code-freeze-guard.yml

@@ -32,6 +32,7 @@ jobs:
           REPO_OWNER: ${{ github.repository_owner }}
           REPO_NAME: ${{ github.event.repository.name }}
           BASE_BRANCH: ${{ github.base_ref }}
+          PR_TITLE: ${{ github.event.pull_request.title }}
         run: |
           # Always allow release-please bot PRs
           if [ "$PR_AUTHOR" = "grafana-alloybot[bot]" ]; then
@@ -45,6 +46,18 @@ jobs:
             exit 0
           fi
 
+          # Auto-exempt PR types.
+          # The PR title is validated as conventional commit format by
+          # release-lint-pr-title.yml, so we can reliably extract the type.
+          #
+          EXEMPT_TYPES="docs test ci style proposal"
+          #
+          CC_TYPE=$(echo "$PR_TITLE" | grep -oE '^[a-z]+' || true)
+          if echo "$EXEMPT_TYPES" | grep -qw "$CC_TYPE"; then
+            echo "✅ PR type '$CC_TYPE' is exempt from code freeze."
+            exit 0
+          fi
+
           # Determine which tags to consider based on the target branch.
           # On main: only minor-release tags (vX.Y.0 / vX.Y.0-rc.N).
           # On release/vX.Y: all tags in that series (vX.Y.Z / vX.Y.Z-rc.N).
@@ -81,7 +94,12 @@ jobs:
             echo ""
             echo "An RC has been published and $BASE_BRANCH is frozen until the final release."
             echo "Only critical fixes approved by the release manager may be merged."
-            echo "Add the 'freeze-exempt' label to this PR to bypass the freeze."
+            echo ""
+            echo "PRs with type [$EXEMPT_TYPES] are automatically exempt."
+            echo "If this PR qualifies, update the title to use the appropriate conventional"
+            echo "commit type."
+            echo ""
+            echo "Otherwise, add the 'freeze-exempt' label to bypass the freeze."
             exit 1
           fi
 

.github/workflows/release-lint-pr-title.yml

@@ -30,7 +30,6 @@ jobs:
             refactor
             perf
             test
-            build
             ci
             chore
             revert