Merge branch 'main' into ap/stabilityOtep

Author: austinlparker

.cspell.yaml

@@ -0,0 +1,109 @@
+# For settings, see
+# https://www.streetsidesoftware.com/vscode-spell-checker/docs/configuration/
+version: '0.2'
+language: en-US
+caseSensitive: true
+allowCompoundWords: true
+useGitignore: true
+import:
+  - https://cdn.jsdelivr.net/npm/@cspell/dict-people-names/cspell-ext.json
+ignorePaths:
+  - '**/*.svg'
+  - '.*.yml'
+  - '.*.yaml'
+  - 'schemas/**'
+  - 'spec-compliance-matrix/*.yaml'
+  - 'oteps/assets/0225*.*'
+patterns:
+  - name: CodeBlock
+    pattern: |
+      /
+          ^(\s*[~`]{3,})   # Matches 3 or more backticks or tildes to start a code block.
+          .*               # all languages and options, e.g. shell {hl_lines=[12]}
+          [\s\S]*?         # content
+          \1               # Matches the same symbol which started the match.
+      /igmx
+  - name: CodeName
+    pattern: |
+      /
+          ([~`])          # Matches a single backtick or tilde to start a code block.
+          [^~`]*?         # Matches any characters except backticks or tildes, non-greedy.
+          \1              # Matches the same symbol which started the match.
+      /x
+  - name: Links
+    pattern: |
+      /
+          \[[^\]]+\]      # Matches the link text inside square brackets [ ... ].
+          \(              # Match the opening parentheses for the URL.
+          [^)]+           # Matches any URL/path until the closing ) — works for both relative and absolute.
+          \)              # Match the closing parentheses for the URL.
+      /x
+  - name: Redirect
+    pattern: |
+      /
+        redirect:.+$     # Matches any front-matter redirect line.
+      /mx
+languageSettings:
+  - languageId:
+      - markdown
+      - yaml
+    ignoreRegExpList:
+      - CodeBlock
+      - CodeName
+      - Links
+      - Redirect
+dictionaries:
+  # Local word lists
+  - en-words
+  # Programming languages and software terms
+  - cpp
+  - csharp
+  - dart
+  - django
+  - docker
+  - dotnet
+  - elixir
+  - flutter
+  - fsharp
+  - golang
+  - haskell
+  - html
+  - java
+  - julia
+  - k8s
+  - kotlin
+  - markdown
+  - node
+  - npm
+  - php
+  - python
+  - ruby
+  - rust
+  - scala
+  - softwareTerms
+  - swift
+  - typescript
+  # Other
+  - companies
+  - aws
+  - google
+  - people-names
+words:
+  - BLRP
+  - Kubecon
+  - OpAMP
+  - OTCA
+  - OTEP
+  - OTTL
+  - cumulatives
+  - deser
+  - inclusivity
+  - oteps
+  - representivity
+  - relatedly
+  - Naur
+  - configurator
+  - relitigating
+  - IDCONTEXT
+  - pdata
+  - Dpanic

.github/PULL_REQUEST_TEMPLATE.md

@@ -10,4 +10,5 @@ For non-trivial changes, follow the [change proposal process](https://github.com
 * [ ] Related [OTEP(s)](https://github.com/open-telemetry/oteps) #
 * [ ] Links to the prototypes (when adding or changing features)
 * [ ] [`CHANGELOG.md`](https://github.com/open-telemetry/opentelemetry-specification/blob/main/CHANGELOG.md) file updated for non-trivial changes
+  * For trivial changes, include `[chore]` in the PR title to skip the changelog check
 * [ ] [Spec compliance matrix](https://github.com/open-telemetry/opentelemetry-specification/blob/main/spec-compliance-matrix/template.yaml) updated if necessary

.github/scripts/triage-helper/Pipfile.lock

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: check out code
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: install dependencies
       run: npm install
@@ -27,9 +27,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: check out code
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-    - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
+    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 
     - name: install yamllint
       run: make install-yamllint
@@ -41,7 +41,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: check out code
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: install dependencies
       run: npm install
@@ -56,7 +56,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: check out code
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: install dependencies
       run: npm install
@@ -71,7 +71,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: check out code
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: run compliance-matrix
       run: make compliance-matrix
@@ -83,7 +83,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: check out code
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-
-    - name: run misspell
-      run: make misspell
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+    - uses: streetsidesoftware/cspell-action@9cd41bb518a24fefdafd9880cbab8f0ceba04d28 # v8.3.0
+      with:
+        incremental_files_only: false # check all files, not just changed files
+        config: .cspell.yaml
+        suggestions: true
+        treat_flagged_words_as_errors: true

.github/workflows/checks.yaml

@@ -12,9 +12,9 @@ jobs:
   fossa:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: fossas/fossa-action@3ebcea1862c6ffbd5cf1b4d0bd6b3fe7bd6f2cac # v1.7.0
+      - uses: fossas/fossa-action@c414b9ad82eaad041e47a7cf62a4f02411f427a0 # v1.8.0
         with:
           api-key: ${{secrets.FOSSA_API_KEY}}
           team: OpenTelemetry

.github/workflows/fossa.yml

@@ -19,7 +19,7 @@ jobs:
       # Needed for GitHub OIDC token if publish_results is true
       id-token: write
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
 
@@ -33,7 +33,7 @@ jobs:
       # uploads of run results in SARIF format to the repository Actions tab.
       # https://docs.github.com/en/actions/advanced-guides/storing-workflow-data-as-artifacts
       - name: "Upload artifact"
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: SARIF file
           path: results.sarif
@@ -42,6 +42,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
+        uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
         with:
           sarif_file: results.sarif

.github/workflows/ossf-scorecard.yml

@@ -12,7 +12,7 @@ jobs:
       pull-requests: write # required for marking and closing stale PRs
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@997185467fa4f803885201cee163a9f38240193d # v10.1.1
+      - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           stale-pr-message: 'This PR was marked stale. It will be closed in 14 days without additional activity.'

.github/workflows/stale-pr.yaml

@@ -17,8 +17,8 @@ jobs:
       run:
         working-directory: ./.github/scripts/triage-helper
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: 3.14
       - name: Install pipenv

.github/workflows/triage-followup.yml

@@ -7,7 +7,7 @@ name: Verify CHANGELOG
 
 on:
   pull_request:
-    types: [opened, synchronize, reopened, labeled, unlabeled]
+    types: [opened, synchronize, reopened, labeled, unlabeled, edited]
     branches:
       - main
 
@@ -20,15 +20,16 @@ jobs:
     # Skip if:
     # - PR has "Skip Changelog" label
     # - PR has "dependencies" label
-    # - PR title contains "[chore]"
+    # - PR title contains "[chore]" or starts with "chore:"
     if: >
       ! contains(github.event.pull_request.labels.*.name, 'Skip Changelog') &&
       ! contains(github.event.pull_request.labels.*.name, 'dependencies') &&
-      ! contains(github.event.pull_request.title, '[chore]')
+      ! contains(github.event.pull_request.title, '[chore]') &&
+      ! startsWith(github.event.pull_request.title, 'chore:')
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 

.github/workflows/verify-changelog.yaml

@@ -22,9 +22,6 @@ bin
 # Vim
 .swp
 
-# Misspell binary
-internal/tools/bin
-
 # Node.js files for tools (e.g. markdown-toc)
 node_modules/
 package-lock.json