fix: pin LGTM version in OATs acceptance test

grafana/otel-lgtm:latest changed behavior in v0.24.0 (released
2026-04-10), breaking the service_instance_id_check. Pin to v0.23.0
for reproducible builds and add renovate tracking so the pin is kept
up to date.

Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

Author: zeitlinger

.github/renovate-tracked-deps.json

@@ -139,7 +139,7 @@
       "protoc",
       "ubi:google/google-java-format"
     ],
-    "regex": ["ghcr.io/super-linter/super-linter", "grafana/flint"]
+    "regex": ["ghcr.io/super-linter/super-linter", "grafana/flint", "grafana/docker-otel-lgtm"]
   },
   "mvnw": {
     "maven-wrapper": ["maven-wrapper"]

mise.toml

@@ -12,6 +12,8 @@ protoc = "34.0"
 RENOVATE_TRACKED_DEPS_EXCLUDE="github-actions,github-runners"
 # renovate: datasource=docker depName=ghcr.io/super-linter/super-linter
 SUPER_LINTER_VERSION="slim-v8.5.0@sha256:857dcc3f0bf5dd065fdeed1ace63394bb2004238a5ef02910ea23d9bcd8fd2b8"
+# renovate: datasource=github-releases depName=grafana/docker-otel-lgtm
+LGTM_VERSION="v0.23.0"
 
 [tasks.ci]
 description = "CI Build"
@@ -107,7 +109,7 @@ run = "mise generate git-pre-commit --write --task=pre-commit"
 [tasks.acceptance-test]
 description = "Run OATs acceptance tests"
 depends = "build"
-run = "oats -timeout 5m examples/"
+run = "oats -lgtm-version $LGTM_VERSION -timeout 5m examples/"
 
 [tasks.javadoc]
 description = "Generate Javadoc"