[renova-chan]

This PR contains the following updates:

Package	Update	Change
otel/opentelemetry-collector-k8s	minor	0.164.0 → 0.165.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

open-telemetry/opentelemetry-collector-releases (otel/opentelemetry-collector-k8s)

v0.165.0

Compare Source

🛑 Breaking changes 🛑

• extension/asapauthextension: disable asapauth extension as it's causing an issue w/ go 1.27 (#​1742)

🚀 New components 🚀

• queue_batch: Add queue_batch processor, eventually to replace batch processor. (#​1749)
  See docs/rfcs/batching-migration.md
• receiver/ecs: Add the Prometheus ecs_exporter as a receiver for Amazon ECS task metrics in otelcol-prometheus distribution. (#​1741)
• receiver/mysqld: Add the Prometheus mysqld_exporter as a receiver for MySQL server metrics in otelcol-prometheus distribution. (#​1741)

💡 Enhancements 💡

• otelcol-prometheus: Update embedded Prometheus receivers to v0.3.0. (#​1741)
• packaging: Enable baseline hardening for packaged Collector systemd services. (#​1690)
  Applies to otelcol, otelcol-contrib, otelcol-otlp and otelcol-prometheus.
  NoNewPrivileges prevents gaining privileges through file capabilities or
  setuid/setgid programs. Use systemd AmbientCapabilities for required
  capabilities, or configure a service drop-in for deployment-specific needs.

🧰 Bug fixes 🧰

• packaging: Skip systemctl commands that need a running systemd when it is not running, e.g. during Docker image builds (#​1698)
  • The preremove scripts (deb and rpm) only call systemctl stop when systemd is running. Otherwise it printed errors when upgrading or removing packages.
  • The rpm postinstall scripts only call systemctl daemon-reload and systemctl try-restart when systemd is running. Otherwise the %post scriptlet failed when installing or upgrading packages.

---

Configuration

📅 Schedule: (in timezone America/Chicago)

• Branch creation
  • Between 05:00 AM and 08:59 AM (* 5-8 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[github-actions]

--- HelmRelease media/kometa (kubernetes/apps/media/kometa)
+++ HelmRelease media/kometa (kubernetes/apps/media/kometa)
@@ -96,7 +96,7 @@
                     fieldPath: metadata.uid
             image:
               repository: otel/opentelemetry-collector-k8s
-              tag: 0.164.0@sha256:8f7e5aaac0302f090164d5f9c14e4437d8037c5aaa2d025fc3ad74c1922602eb
+              tag: 0.165.0@sha256:ce55d0a38923c83120e4ba613fbdf446786652d2ce9f29d1cd7879e5d869829f
             probes:
               liveness:
                 custom: true

--- HelmRelease media/radarr (kubernetes/apps/media/radarr)
+++ HelmRelease media/radarr (kubernetes/apps/media/radarr)
@@ -35,7 +35,7 @@
                 name: radarr-secret
             image:
               repository: ghcr.io/home-operations/radarr
-              tag: 7.0.2.10888
+              tag: 7.0.1.10859
             nameOverride: radarr
             probes:
               liveness:

--- HelmRelease media/radarr-4k (kubernetes/apps/media/radarr-4k)
+++ HelmRelease media/radarr-4k (kubernetes/apps/media/radarr-4k)
@@ -35,7 +35,7 @@
                 name: radarr-4k-secret
             image:
               repository: ghcr.io/home-operations/radarr
-              tag: 7.0.2.10888
+              tag: 7.0.1.10859
             nameOverride: radarr-4k
             probes:
               liveness:

--- HelmRelease media/radarr-anime (kubernetes/apps/media/radarr-anime)
+++ HelmRelease media/radarr-anime (kubernetes/apps/media/radarr-anime)
@@ -35,7 +35,7 @@
                 name: radarr-anime-secret
             image:
               repository: ghcr.io/home-operations/radarr
-              tag: 7.0.2.10888
+              tag: 7.0.1.10859
             nameOverride: radarr-anime
             probes:
               liveness:

--- HelmRelease observability/opentelemetry-operator (kubernetes/apps/observability/opentelemetry-operator)
+++ HelmRelease observability/opentelemetry-operator (kubernetes/apps/observability/opentelemetry-operator)
@@ -28,7 +28,7 @@
     manager:
       collectorImage:
         repository: otel/opentelemetry-collector-k8s
-        tag: 0.164.0
+        tag: 0.165.0
       resources:
         limits:
           memory: 256Mi

[github-actions]

--- CronJob media/kometa
+++ CronJob media/kometa
@@ -112,7 +112,7 @@
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.uid
-            image: otel/opentelemetry-collector-k8s:0.164.0@sha256:8f7e5aaac0302f090164d5f9c14e4437d8037c5aaa2d025fc3ad74c1922602eb
+            image: otel/opentelemetry-collector-k8s:0.165.0@sha256:ce55d0a38923c83120e4ba613fbdf446786652d2ce9f29d1cd7879e5d869829f
             livenessProbe:
               httpGet:
                 path: /

--- Deployment media/radarr
+++ Deployment media/radarr
@@ -54,7 +54,7 @@
         envFrom:
         - secretRef:
             name: radarr-secret
-        image: ghcr.io/home-operations/radarr:7.0.2.10888
+        image: ghcr.io/home-operations/radarr:7.0.1.10859
         livenessProbe:
           failureThreshold: 3
           httpGet:

--- Deployment media/radarr-4k
+++ Deployment media/radarr-4k
@@ -54,7 +54,7 @@
         envFrom:
         - secretRef:
             name: radarr-4k-secret
-        image: ghcr.io/home-operations/radarr:7.0.2.10888
+        image: ghcr.io/home-operations/radarr:7.0.1.10859
         livenessProbe:
           failureThreshold: 3
           httpGet:

--- Deployment media/radarr-anime
+++ Deployment media/radarr-anime
@@ -54,7 +54,7 @@
         envFrom:
         - secretRef:
             name: radarr-anime-secret
-        image: ghcr.io/home-operations/radarr:7.0.2.10888
+        image: ghcr.io/home-operations/radarr:7.0.1.10859
         livenessProbe:
           failureThreshold: 3
           httpGet:

--- Deployment observability/otel-operator
+++ Deployment observability/otel-operator
@@ -37,7 +37,7 @@
         - --enable-leader-election
         - --health-probe-addr=:8081
         - --webhook-port=9443
-        - --collector-image=otel/opentelemetry-collector-k8s:0.164.0
+        - --collector-image=otel/opentelemetry-collector-k8s:0.165.0
         - --target-allocator-image=ghcr.io/open-telemetry/opentelemetry-operator/target-allocator:0.162.0
         command:
         - /manager

[claude]

Verdict: safe · confidence: high · otel/opentelemetry-collector-k8s 0.164.0 ➜ 0.165.0 · head 1036f86

All Collectors managed by the Operator (gateway, node, cluster, scrape) restart on the new image, and so does the Kometa sidecar on its next run. The new release removes no setting we use, and the image runs the same user, entrypoint, and ports.

Findings

• 0.165.0, opentelemetry-cluster/collector.yaml: container metrics from the cluster receiver now take the image name from the pod spec, not the runtime. Docker Hub images listed without a registry (for example kometateam/kometa) lose the docker.io/ prefix in the container_image_name label. Their container metric series restart under new labels once. No alert rule or dashboard filters on image labels.

Changed resources

• Deployment observability/otel-operator: the default Collector image changes to 0.165.0. The Operator then rolls the otel-gateway, otel-node, otel-cluster, and otel-scrape Collectors.
• CronJob media/kometa: sidecar image changes to 0.165.0 and applies on the next scheduled job.
• The Plex sidecar is injected when the pod is created, so it stays on 0.164.0 until the Plex pod is next recreated. Its trigger ConfigMap tracks the Collector config, not the image.
• The Flux Diff also shows radarr, radarr-4k, and radarr-anime going from 7.0.2 to 7.0.1. That comes from this branch predating build(deps): update image ghcr.io/home-operations/radarr ( 7.0.1.10859 ➜ 7.0.2.10888 ) #1633 on main. The PR itself changes only kometa/helmrelease.yaml and opentelemetry-operator/helmrelease.yaml.

Sources

• Distribution release: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.165.0 (the otelcol-k8s component list is unchanged except that it adds queuebatchprocessor)
• Core v0.165.0: https://github.com/open-telemetry/opentelemetry-collector/releases/tag/v0.165.0
• Contrib v0.165.0: https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.165.0
• k8s_cluster image source change: [receiver/k8scluster] Fix container.image.name and container.image.tag when status image is a bare digest open-telemetry/opentelemetry-collector-contrib#46987 (issue #46541)
• Prometheus receiver keeps __scheme__/__metrics_path__ sample labels: [receiver/prometheus] Do not drop __scheme__ and __metrics_path__ labels from datapoint attributes open-telemetry/opentelemetry-collector-contrib#52736. The repo has zero uses of these labels.
• file_log removes the filelog.protobufCheckpointEncoding gate: #52388. The gate was already stable in 0.164.0, and old JSON checkpoints are still read.
• Warning when the batch processor is combined with exporter batching: [exporterhelper,service/internal/graph] Warn about double batching open-telemetry/opentelemetry-collector#15966. Exporter batching stays off by default behind the alpha pkg.exporterhelper.queueBatchEnabled gate, and no exporter here sets sending_queue.batch, so the warning does not fire.
• Removed confighttp idle-connection fields and the transform flatten_data option: zero uses in the repo.
• The semconv 1.44 bump in k8s_attributes v1.4.0 and kubelet_stats (#52600) only changes the schema URL.
• Operator chart 0.128.0 ships Operator 0.162.0; the Collector image is set through manager.collectorImage.
• crane config for both digests: same user (10001), entrypoint, env, and exposed ports
• Run: https://github.com/rcdailey/home-ops/actions/runs/42613964904

[github-actions]

Claude review of patch 127933fd19bdffaf646f08280e42e724f5e2b2b3: verdict safe, confidence high. Rebases that keep this patch reuse a safe, high-confidence verdict.