ci: update to rust version of flint

.editorconfig

@@ -761,3 +761,7 @@ ij_properties_spaces_around_key_value_delimiter = false
 [{*.yaml, *.yml}]
 ij_yaml_keep_indents_on_empty_lines = false
 ij_yaml_keep_line_breaks = true
+
+[*.md]
+# Markdown line length is handled by rumdl
+max_line_length = off

.github/agents/code-review-and-fix.agent.md

@@ -178,27 +178,27 @@ Auto-fix boundaries:
     but absent from the current module's check (or vice versa) reveal a version boundary —
     the class was likely added or removed between versions.
     Then determine the comment form for each class:
-   **Positive floor class** (proves "at least version X"): look up when the class was
-   **introduced** → comment `// added in X.Y`.
-   **Positive ceiling class** (proves "not yet version Y"): look up when the class was
-   **removed** → comment `// removed in Y.Z` (meaning: its presence here ensures we
-   don't match version Y.Z+ where a different module takes over).
-   **Negated exclusion class** in `not(hasClassesNamed(...))`: look up when the class was
-   **introduced** → comment `// added in Y.Z`, because that first appearance begins the
-   excluded version range.
-   **Single positive class that provides both bounds**: include both facts in one comment,
-   e.g. `// added in X.Y, removed in Y.Z`.
-    A ceiling class might have been *introduced* much earlier than the module's target version.
-   Do not use `// added in` for a positive ceiling class — that is misleading. The relevant
-   fact is when it was **removed**. But for a negated exclusion class, `// added in` is the
-   correct form because the class's introduction is exactly what starts excluding newer versions.
-    Validate the version in the comment before adding or requesting it. Do not guess the
-    version from the module name alone; confirm it with repository or upstream evidence.
-    Sources: muzzle `versions.set(...)` ranges, sibling module `classLoaderMatcher()` checks,
-    module directory names, existing code comments, Javadoc/release notes.
-    Do NOT add a `classLoaderMatcher()` override where one does not already exist —
-    this method is only for version-boundary detection when muzzle is insufficient,
-    not for optimization (use `TypeInstrumentation.classLoaderOptimization()` instead)
+  **Positive floor class** (proves "at least version X"): look up when the class was
+  **introduced** → comment `// added in X.Y`.
+  **Positive ceiling class** (proves "not yet version Y"): look up when the class was
+  **removed** → comment `// removed in Y.Z` (meaning: its presence here ensures we
+  don't match version Y.Z+ where a different module takes over).
+  **Negated exclusion class** in `not(hasClassesNamed(...))`: look up when the class was
+  **introduced** → comment `// added in Y.Z`, because that first appearance begins the
+  excluded version range.
+  **Single positive class that provides both bounds**: include both facts in one comment,
+  e.g. `// added in X.Y, removed in Y.Z`.
+  A ceiling class might have been *introduced* much earlier than the module's target version.
+  Do not use `// added in` for a positive ceiling class — that is misleading. The relevant
+  fact is when it was **removed**. But for a negated exclusion class, `// added in` is the
+  correct form because the class's introduction is exactly what starts excluding newer versions.
+  Validate the version in the comment before adding or requesting it. Do not guess the
+  version from the module name alone; confirm it with repository or upstream evidence.
+  Sources: muzzle `versions.set(...)` ranges, sibling module `classLoaderMatcher()` checks,
+  module directory names, existing code comments, Javadoc/release notes.
+  Do NOT add a `classLoaderMatcher()` override where one does not already exist —
+  this method is only for version-boundary detection when muzzle is insufficient,
+  not for optimization (use `TypeInstrumentation.classLoaderOptimization()` instead)
   - redundant `isMethod()` in method matchers inside `transform()` when the matcher already
     names a specific, non-empty method (e.g., `isMethod().and(named("execute"))` →
     `named("execute")`). Do not remove `isMethod()` when the name could be empty —

.github/config/.rumdl.toml

@@ -0,0 +1,15 @@
+# See https://rumdl.dev/
+# and https://rumdl.dev/rules/
+[global]
+# disable link text should be descriptive check
+disable = ["MD059", "line-length", "no-inline-html", "MD041", "MD022", "ul-style", "fenced-code-language"]
+
+[no-duplicate-heading]
+siblings-only = true
+
+[no-trailing-punctuation]
+# allowing exclamation points and question marks at end of sentences
+punctuation = ".,;:"
+
+[ol-prefix]
+style = "ordered"

.github/config/flint.toml

@@ -0,0 +1,6 @@
+[settings]
+exclude = ["CHANGELOG.md", "licenses/licenses.md"]
+setup_migration_version = 2
+
+[checks.lychee]
+check_all_local = true

.github/prompts/fix-pr-ci-failures.md

@@ -64,6 +64,7 @@ Create `/tmp/ci-plan.md` (outside the repo — no risk of accidental commit):
 # CI Failure Analysis Plan
 
 ## Failed Jobs Summary
+
 - Job 1: <job-name> (job ID: <id>)
 ...
 
@@ -74,6 +75,7 @@ Create `/tmp/ci-plan.md` (outside the repo — no risk of accidental commit):
   - Log files: /tmp/<file1>.log, ...
 
 ## Suspected Flaky / Infra Failures (skipped)
+
 - <job-name>: <reason>
 
 ## Notes

.github/renovate.json5

@@ -1,6 +1,7 @@
 {
   $schema: 'https://docs.renovatebot.com/renovate-schema.json',
   extends: [
+    "github>grafana/flint#v0.21.0",
     'config:best-practices',
     'helpers:pinGitHubActionDigestsToSemver',
     ':semanticCommits',
@@ -385,17 +386,6 @@
     },
   ],
   customManagers: [
-    {
-      // keep SHA-pinned raw.githubusercontent.com URLs in mise.toml up to date
-      customType: 'regex',
-      datasourceTemplate: 'github-tags',
-      managerFilePatterns: [
-        '/^mise\\.toml$/',
-      ],
-      matchStrings: [
-        'https://raw\\.githubusercontent\\.com/(?<depName>[^/]+/[^/]+)/(?<currentDigest>[a-f0-9]{40})/.*#\\s*(?<currentValue>v\\S+)',
-      ],
-    },
 // commented out to see whether weekly update passes without this block
 //    {
 //      customType: 'regex',

.github/workflows/build-daily.yml

@@ -23,11 +23,8 @@ jobs:
   muzzle:
     uses: ./.github/workflows/reusable-muzzle.yml
 
-  link-check:
-    uses: ./.github/workflows/reusable-link-check.yml
-
-  markdown-lint-check:
-    uses: ./.github/workflows/reusable-markdown-lint-check.yml
+  lint:
+    uses: ./.github/workflows/reusable-lint-check.yml
 
   publish-snapshots:
     environment: protected
@@ -76,7 +73,7 @@ jobs:
       - common
       - test-latest-deps
       - muzzle
-      - link-check
+      - lint
       - publish-snapshots
     if: always()
     uses: ./.github/workflows/reusable-workflow-notification.yml
@@ -86,6 +83,6 @@ jobs:
           needs.common.result == 'success' &&
           needs.test-latest-deps.result == 'success' &&
           needs.muzzle.result == 'success' &&
-          needs.link-check.result == 'success' &&
+          needs.lint.result == 'success' &&
           needs.publish-snapshots.result == 'success'
         }}

.github/workflows/build.yml

@@ -32,14 +32,8 @@ jobs:
     if: "!startsWith(github.ref_name, 'release/')"
     uses: ./.github/workflows/reusable-muzzle.yml
 
-  link-check:
-    # release branches are excluded to avoid unnecessary maintenance if external links break
-    # (and also because the README.md javaagent download link has to be updated on release branches
-    #  before the release download has been published)
+  lint:
+    # release branches are excluded because the README.md javaagent download link has to be updated
+    # on release branches before the release download has been published
     if: "!startsWith(github.ref_name, 'release/')"
-    uses: ./.github/workflows/reusable-link-check.yml
-
-  markdown-lint-check:
-    # release branches are excluded
-    if: "!startsWith(github.ref_name, 'release/')"
-    uses: ./.github/workflows/reusable-markdown-lint-check.yml
+    uses: ./.github/workflows/reusable-lint-check.yml

.github/workflows/reusable-link-check.yml → .github/workflows/reusable-lint-check.yml

@@ -1,4 +1,4 @@
-name: Reusable - Link check
+name: Reusable - Lint check
 
 on:
   workflow_call:
@@ -7,7 +7,7 @@ permissions:
   contents: read
 
 jobs:
-  link-check:
+  lint-check:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -16,16 +16,18 @@ jobs:
 
       - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1
 
-      - name: Link check for pull requests
+      - name: Lint for pull requests
         if: github.event_name == 'pull_request'
         env:
           GITHUB_TOKEN: ${{ github.token }}
-          GITHUB_HEAD_SHA: ${{ github.event.pull_request.head.sha }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_BASE_REF: ${{ github.base_ref }}
+          GITHUB_HEAD_REF: ${{ github.head_ref }}
           PR_HEAD_REPO: ${{ github.event.pull_request.head.repo.full_name }}
-        run: mise run lint:links
+        run: mise run lint
 
-      - name: Link check for pushes and scheduled workflows
+      - name: Lint for pushes and scheduled workflows
         if: github.event_name != 'pull_request'
         env:
           GITHUB_TOKEN: ${{ github.token }}
-        run: mise run lint:links --full
+        run: mise run lint

.github/workflows/reusable-pr-build.yml

@@ -41,28 +41,27 @@ jobs:
     with:
       cache-read-only: true
 
-  # this is not a required check to avoid blocking pull requests if external links break
-  markdown-check:
+  lint:
     # release branches are excluded because the README.md javaagent download link has to be updated
     # on release branches before the release download has been published
     if: "!startsWith(github.ref_name, 'release/') && !startsWith(github.base_ref, 'release/')"
-    uses: ./.github/workflows/reusable-link-check.yml
-
-  markdown-lint-check:
-    uses: ./.github/workflows/reusable-markdown-lint-check.yml
+    uses: ./.github/workflows/reusable-lint-check.yml
 
   required-status-check:
     needs:
       - common
       - test-latest-deps
       - muzzle
-      - markdown-lint-check
+      - lint
     runs-on: ubuntu-latest
     if: ${{ always() }}
     steps:
       - if: |
           needs.common.result != 'success' ||
           needs.test-latest-deps.result != 'success' ||
           needs.muzzle.result != 'success' ||
-          needs.markdown-lint-check.result != 'success'
+          (
+            !startsWith(github.base_ref, 'release/') &&
+            needs.lint.result != 'success'
+          )
         run: exit 1 # fail

docs/contributing/documenting-instrumentation.md

@@ -64,6 +64,7 @@ Every javaagent instrumentation module should have a README.md file in the javaa
 [Brief description of what the instrumentation does and what versions it applies to]
 
 ## Settings
+
 | System property | Type | Default | Description |
 |-----------------|------|---------|-------------|
 | `property.name` | Type | Default | Description |

instrumentation-docs/readme.md

@@ -236,7 +236,7 @@ We parse gradle files in order to determine several pieces of metadata:
 ### Scope
 
 For now, the scope name is the only value that is implemented in our instrumentations. The scope
-name is determined by the instrumentation module name:  `io.opentelemetry.{instrumentation name}`
+name is determined by the instrumentation module name: `io.opentelemetry.{instrumentation name}`
 
 We will implement gatherers for the schemaUrl and scope attributes when instrumentations start
 implementing them.

instrumentation/apache-httpclient/apache-httpclient-5.2/library/README.md

@@ -7,7 +7,7 @@ Provides OpenTelemetry instrumentation for [Apache Http Client 5.2](https://hc.a
 ### Add these dependencies to your project
 
 Replace `OPENTELEMETRY_VERSION` with the [latest
-release]( https://central.sonatype.com/artifact/io.opentelemetry.instrumentation/opentelemetry-apache-httpclient-5.2).
+release](https://central.sonatype.com/artifact/io.opentelemetry.instrumentation/opentelemetry-apache-httpclient-5.2).
 
 For Maven, add to your `pom.xml` dependencies:
 

instrumentation/aws-lambda/aws-lambda-core-1.0/library/README.md

@@ -50,7 +50,7 @@ link to tracing information provided by Lambda itself. To do so, add a dependenc
 `io.opentelemetry.contrib:opentelemetry-aws-xray-propagator`.
 
 Replace `OPENTELEMETRY_VERSION` with the [latest
-release]( https://central.sonatype.com/artifact/io.opentelemetry.contrib/opentelemetry-aws-xray-propagator).
+release](https://central.sonatype.com/artifact/io.opentelemetry.contrib/opentelemetry-aws-xray-propagator).
 
 Gradle:
 

instrumentation/c3p0-0.9/library/README.md

@@ -7,7 +7,7 @@ Provides OpenTelemetry instrumentation for [C3P0](https://www.mchange.com/projec
 ### Add these dependencies to your project
 
 Replace `OPENTELEMETRY_VERSION` with the [latest
-release]( https://central.sonatype.com/artifact/io.opentelemetry.instrumentation/opentelemetry-c3p0-0.9).
+release](https://central.sonatype.com/artifact/io.opentelemetry.instrumentation/opentelemetry-c3p0-0.9).
 
 For Maven, add to your `pom.xml` dependencies:
 

instrumentation/graphql-java/graphql-java-12.0/library/README.md

@@ -7,7 +7,7 @@ Provides OpenTelemetry instrumentation for [GraphQL Java](https://www.graphql-ja
 ### Add these dependencies to your project
 
 Replace `OPENTELEMETRY_VERSION` with the [latest
-release]( https://central.sonatype.com/artifact/io.opentelemetry.instrumentation/opentelemetry-graphql-java-12.0).
+release](https://central.sonatype.com/artifact/io.opentelemetry.instrumentation/opentelemetry-graphql-java-12.0).
 
 For Maven, add to your `pom.xml` dependencies:
 

instrumentation/graphql-java/graphql-java-20.0/library/README.md

@@ -7,7 +7,7 @@ Provides OpenTelemetry instrumentation for [GraphQL Java](https://www.graphql-ja
 ### Add these dependencies to your project
 
 Replace `OPENTELEMETRY_VERSION` with the [latest
-release]( https://central.sonatype.com/artifact/io.opentelemetry.instrumentation/opentelemetry-graphql-java-12.0).
+release](https://central.sonatype.com/artifact/io.opentelemetry.instrumentation/opentelemetry-graphql-java-12.0).
 
 For Maven, add to your `pom.xml` dependencies:
 

instrumentation/grpc-1.6/library/README.md

@@ -6,7 +6,7 @@ Provides OpenTelemetry instrumentation for [gRPC](https://grpc.io/).
 
 ### Add the following dependencies to your project
 
-Replace `OPENTELEMETRY_VERSION` with the [latest release]( https://central.sonatype.com/artifact/io.opentelemetry.instrumentation/opentelemetry-grpc-1.6).
+Replace `OPENTELEMETRY_VERSION` with the [latest release](https://central.sonatype.com/artifact/io.opentelemetry.instrumentation/opentelemetry-grpc-1.6).
 
 For Maven, add the following to your `pom.xml` dependencies:
 

instrumentation/hikaricp-3.0/library/README.md

@@ -7,7 +7,7 @@ Provides OpenTelemetry instrumentation for [HikariCP](https://github.com/brettwo
 ### Add these dependencies to your project
 
 Replace `OPENTELEMETRY_VERSION` with the [latest
-release]( https://central.sonatype.com/artifact/io.opentelemetry.instrumentation/opentelemetry-hikaricp-3.0).
+release](https://central.sonatype.com/artifact/io.opentelemetry.instrumentation/opentelemetry-hikaricp-3.0).
 
 For Maven, add to your `pom.xml` dependencies:
 

instrumentation/java-http-client/library/README.md

@@ -7,7 +7,7 @@ Provides OpenTelemetry instrumentation for [Java HTTP Client](https://openjdk.or
 ### Add these dependencies to your project
 
 Replace `OPENTELEMETRY_VERSION` with the [latest
-release]( https://central.sonatype.com/artifact/io.opentelemetry.instrumentation/opentelemetry-java-http-client).
+release](https://central.sonatype.com/artifact/io.opentelemetry.instrumentation/opentelemetry-java-http-client).
 
 For Maven, add to your `pom.xml` dependencies:
 

instrumentation/java-http-server/library/README.md

@@ -7,7 +7,7 @@ Provides OpenTelemetry instrumentation for [Java HTTP Server](https://docs.oracl
 ### Add these dependencies to your project
 
 Replace `OPENTELEMETRY_VERSION` with the [latest
-release]( https://central.sonatype.com/artifact/io.opentelemetry.instrumentation/opentelemetry-java-http-server).
+release](https://central.sonatype.com/artifact/io.opentelemetry.instrumentation/opentelemetry-java-http-server).
 
 For Maven, add to your `pom.xml` dependencies: