build(deps): Upgrade otelcollector to v0.135.0

[azure-monitor-assistant]

This PR upgrades the otelcollector to the latest version available for the opentelemetry-collector and opentelemetry-operator.

It was automatically generated by the GitHub Actions workflow.

The summary of the OSS changelog is below:

Prometheusreceiver Changes

v0.132.0 to v0.135.0

Generated on: 2025-09-17 07:05:42

---

v0.133.0

• [FEATURE] prometheusreceiver: Remove temporary fix for metric name validation, fix upstream resolved (#42004)
• [BUG FIX] prometheusreceiver: Fixes a bug where static configuration labels were dropped when using the Prometheus receiver. Previously, labels defined in the static config were not being applied to the metrics. (#41727)

Summary

Category	Count
Breaking Changes	0
Features	1
Bug Fixes	1
Other Changes	0
Total	2

Target-allocator Changes

v0.132.0 to v0.135.0

Generated on: 2025-09-17 07:05:56

---

0.135.0

• [FEATURE] collector, target allocator: Add TrafficDistribution support for OpenTelemetryCollector and TargetAllocator Services (#4285) The TrafficDistribution field is now available in OpenTelemetryCollector and TargetAllocator. This field allows setting the traffic distribution policy for Kubernetes Services.

0.134.0

• [FEATURE] target allocator: Add CollectorTargetReloadInterval option to configure the interval at which the Prometheus receiver reloads targets from the target allocator (#4095)

Summary

Category	Count
Breaking Changes	0
Features	2
Bug Fixes	0
Other Changes	0
Total	2

[azure-monitor-assistant]

✅ Building the otelcollector and related go binaries succeeded. No breaking changes were detected.
The otelcollector was successfully upgraded to version v0.135.0.

[azure-monitor-assistant]

CVE Changes Report

The following CVE changes were detected when upgrading to version v0.135.0:

=== CVE Changes Report ===
Removed CVEs:
  - CVE-2025-54388 from otelcollector with severity MEDIUM and package github.com/docker/docker
  - CVE-2025-54388 from promconfigvalidator with severity MEDIUM and package github.com/docker/docker
Added CVEs:

Preserved CVEs (not scanned):
  = CVE-2024-33599 from kube-state-metrics with severity HIGH and package 
  = CVE-2023-4806 from kube-state-metrics with severity MEDIUM and package 
  = CVE-2023-4527 from kube-state-metrics with severity MEDIUM and package 
  = CVE-2024-33601 from kube-state-metrics with severity HIGH and package 
  = CVE-2024-33600 from kube-state-metrics with severity MEDIUM and package 

The trivyignore file was updated to ignore the new CVEs.

[github-actions]

This PR is stale because it has been open 7 days with no activity. Remove stale label or comment or this will be closed in 5 days.