chore(deps): update github-actions deps (#46560)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-go](https://redirect.github.com/actions/setup-go)
([changelog](https://redirect.github.com/actions/setup-go/compare/7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5..4b73464bb391d4059bd26b0524d20df3927bd417))
| action | digest | `7a3fe6c` → `4b73464` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | patch | `v4.32.4` → `v4.32.5` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
([changelog](https://redirect.github.com/github/codeql-action/compare/89a39a4e59826350b863aa6b6252a07ad50cf83e..c793b717bc78562f491db7b0e93a3a178b099162))
| action | digest | `89a39a4` → `c793b71` |
|
[lycheeverse/lychee-action](https://redirect.github.com/lycheeverse/lychee-action)
| action | minor | `v2.7.0` → `v2.8.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/20907) for more information.

---

### Release Notes

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v4.32.5`](https://redirect.github.com/github/codeql-action/compare/v4.32.4...v4.32.5)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.32.4...v4.32.5)

</details>

<details>
<summary>lycheeverse/lychee-action (lycheeverse/lychee-action)</summary>

###
[`v2.8.0`](https://redirect.github.com/lycheeverse/lychee-action/releases/tag/v2.8.0)

[Compare
Source](https://redirect.github.com/lycheeverse/lychee-action/compare/v2.7.0...v2.8.0)

#### What's Changed

- Update lycheeVersion to v0.23.0 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;324](https://redirect.github.com/lycheeverse/lychee-action/pull/324)
- Update args for lychee-action to use root-dir by
[@&#8203;mre](https://redirect.github.com/mre) in
[#&#8203;314](https://redirect.github.com/lycheeverse/lychee-action/pull/314)
- Update test to use `--root-dir` instead of the deprecated `--base` by
[@&#8203;mre](https://redirect.github.com/mre) in
[#&#8203;315](https://redirect.github.com/lycheeverse/lychee-action/pull/315)
- Bump actions/checkout from 5 to 6 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;316](https://redirect.github.com/lycheeverse/lychee-action/pull/316)
- Bump actions/cache from 4 to 5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;319](https://redirect.github.com/lycheeverse/lychee-action/pull/319)
- Bump peter-evans/create-pull-request from 7 to 8 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;318](https://redirect.github.com/lycheeverse/lychee-action/pull/318)
- Add message with Summary report URL by
[@&#8203;atteggiani](https://redirect.github.com/atteggiani) in
[#&#8203;326](https://redirect.github.com/lycheeverse/lychee-action/pull/326)

#### New Contributors

- [@&#8203;atteggiani](https://redirect.github.com/atteggiani) made
their first contribution in
[#&#8203;326](https://redirect.github.com/lycheeverse/lychee-action/pull/326)

**Full Changelog**:
<lycheeverse/lychee-action@v2.7.0...v2.8.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "on tuesday" (UTC), Automerge - At any
time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-collector-contrib).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My40OC4xIiwidXBkYXRlZEluVmVyIjoiNDMuNDguMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwicmVub3ZhdGVib3QiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/actions/setup-go-tools/action.yml

@@ -31,7 +31,7 @@ runs:
         "${{ inputs.repo-path }}/.github/workflows/scripts/free-disk-space.sh"
 
     - name: Setup Go
-      uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6
+      uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6
       id: go-setup
       with:
         go-version: ${{ inputs.go-version }}

.github/workflows/changelog.yml

@@ -35,7 +35,7 @@ jobs:
           # Fetch complete history depth only if the PR is not a chore.
           fetch-depth: ${{ !contains(github.event.pull_request.labels.*.name, 'dependencies') && !contains(github.event.pull_request.labels.*.name, 'Skip Changelog') && !contains(github.event.pull_request.title, '[chore]') && '0' || '1' }}
       - run: ./.github/workflows/scripts/free-disk-space.sh
-      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6
+      - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6
         with:
           go-version: oldstable
           cache-dependency-path: "**/*.sum"

.github/workflows/check-codeowners.yaml

@@ -36,7 +36,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - run: ./.github/workflows/scripts/free-disk-space.sh
-      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6
+      - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6
         id: go-setup
         with:
           go-version: oldstable

.github/workflows/check-links.yaml

@@ -46,7 +46,7 @@ jobs:
 
       - name: Link Checker
         id: lychee
-        uses: lycheeverse/lychee-action@a8c4c7cb88f0c7386610c35eb25108e448569cb0 # v2.7.0
+        uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2.8.0
         with:
           args: "--verbose --no-progress ${{needs.changedfiles.outputs.files}} --config .github/lychee.toml"
           failIfEmpty: false

.github/workflows/check-lychee-config.yml

@@ -20,7 +20,7 @@ jobs:
 
       - name: Lychee Config Checker
         id: lychee
-        uses: lycheeverse/lychee-action@a8c4c7cb88f0c7386610c35eb25108e448569cb0 # v2.7.0
+        uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2.8.0
         with:
           args: "--verbose --config .github/lychee.toml --dump .github/lychee.toml"
           failIfEmpty: false

.github/workflows/codeql-analysis.yml

@@ -25,15 +25,15 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - run: ./.github/workflows/scripts/free-disk-space.sh
-      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6
+      - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6
         id: go-setup
         with:
           go-version: oldstable
           cache-dependency-path: "**/*.sum"
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4
+        uses: github/codeql-action/init@c793b717bc78562f491db7b0e93a3a178b099162 # v4
         with:
           languages: go
 
@@ -43,7 +43,7 @@ jobs:
           make otelcontribcol
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4
+        uses: github/codeql-action/analyze@c793b717bc78562f491db7b0e93a3a178b099162 # v4
         timeout-minutes: 60
 
       - run: ./.github/workflows/scripts/check-disk-space.sh

.github/workflows/prepare-release.yml

@@ -29,7 +29,7 @@ jobs:
         with:
           path: opentelemetry-collector-contrib
       - run: opentelemetry-collector-contrib/.github/workflows/scripts/free-disk-space.sh
-      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6
+      - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6
         with:
           go-version: oldstable
           cache: false

.github/workflows/prometheus-compliance-tests.yml

@@ -33,7 +33,7 @@ jobs:
         with:
           path: opentelemetry-collector-contrib
       - run: opentelemetry-collector-contrib/.github/workflows/scripts/free-disk-space.sh
-      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6
+      - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6
         id: go-setup
         with:
           go-version: oldstable

.github/workflows/scorecard.yml

@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
+        uses: github/codeql-action/upload-sarif@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
         with:
           sarif_file: results.sarif