Update all minor and patch dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
boringssl	bazel_dep	minor	0.20260730.0 → 0.20260803.0
github/codeql-action	action	patch	v4.37.5 → v4.37.6
otel/opentelemetry-collector	final	minor	0.157.0 → 0.158.0

---

Release Notes

github/codeql-action (github/codeql-action)

v4.37.6

Compare Source

• Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #​4070

open-telemetry/opentelemetry-collector-releases (otel/opentelemetry-collector)

v0.158.0

Compare Source

🛑 Breaking changes 🛑

• all: Update Cosign usage to work with v3 (#​1570)
  The Cosign v3 upgrade introduced a change in signing workflow. Previous two files
  were required to map the outputs (certificate and signature), now only one file is required.
  The new file is a bundle that contains both outputs in JSON format.
  This change has been done following the guidance from https://goreleaser.com/blog/cosign-v3/.
  With this change, anyone who wants to verify the signature of the artifacts produced by the
  release will need to use Cosign V3 and point to the new bundle file or download the bundle and
  unpack it to get the certificate and signature files.

• all: Use split checksum for all binaries and distros (#​1582)
  The previous attempt at splitting the checksum file for AIX releases was not successful.
  The problem lies on the fac that .runtime.GOOS will always be the runtime of the compiled
  goreleaser binary ("linux" in this case). The only way to split the checksum file per target
  is what's implement here, but it ends up giving one checksum file per produced artifact.

🚀 New components 🚀

• icmpcheckreceiver: Add icmpcheckreceiver to the contrib distribution (#​1577)

💡 Enhancements 💡

• all: Add new binaries for aix/ppc64 (#​1424)

🧰 Bug fixes 🧰

• all: Skip Docker build and publish in AIX release job. (#​1580)
  The release for Contrib on AIX runs in its own job, where it doesn't build
  Docker images. The continue --merge phase of goreleaser runs all publishers
  by default, including the Docker manifests one. This will fail for AIX as
  the images aren't built.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.