ci: fix self-repository references

.github/workflows/build-daily-no-build-cache.yml

@@ -11,14 +11,14 @@ permissions:
 
 jobs:
   common:
-    uses: ./.github/workflows/build-common.yml
+    uses: $/.github/workflows/build-common.yml
     with:
       no-build-cache: true
     secrets:
       DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
 
   test-latest-deps:
-    uses: ./.github/workflows/reusable-test-latest-deps.yml
+    uses: $/.github/workflows/reusable-test-latest-deps.yml
     with:
       no-build-cache: true
     secrets:
@@ -38,7 +38,7 @@ jobs:
       - common
       - test-latest-deps
     if: always()
-    uses: ./.github/workflows/reusable-workflow-notification.yml
+    uses: $/.github/workflows/reusable-workflow-notification.yml
     with:
       success: >-
         ${{

.github/workflows/build-daily.yml

@@ -11,20 +11,20 @@ permissions:
 
 jobs:
   common:
-    uses: ./.github/workflows/build-common.yml
+    uses: $/.github/workflows/build-common.yml
     secrets:
       DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
 
   test-latest-deps:
-    uses: ./.github/workflows/reusable-test-latest-deps.yml
+    uses: $/.github/workflows/reusable-test-latest-deps.yml
     secrets:
       DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
 
   muzzle:
-    uses: ./.github/workflows/reusable-muzzle.yml
+    uses: $/.github/workflows/reusable-muzzle.yml
 
   lint:
-    uses: ./.github/workflows/reusable-lint-check.yml
+    uses: $/.github/workflows/reusable-lint-check.yml
 
   publish-snapshots:
     environment: protected
@@ -80,7 +80,7 @@ jobs:
       - lint
       - publish-snapshots
     if: always()
-    uses: ./.github/workflows/reusable-workflow-notification.yml
+    uses: $/.github/workflows/reusable-workflow-notification.yml
     with:
       success: >-
         ${{

.github/workflows/build-pull-request.yml

@@ -94,7 +94,7 @@ jobs:
 
   build:
     needs: [resolve-native, resolve-servlet-images]
-    uses: ./.github/workflows/reusable-pr-build.yml
+    uses: $/.github/workflows/reusable-pr-build.yml
     with:
       skip-native-tests: ${{ !(needs.resolve-native.outputs.run-native-tests == 'true' || contains(github.event.pull_request.labels.*.name, 'test native')) }}
       skip-openj9-tests: ${{ !contains(github.event.pull_request.labels.*.name, 'test openj9') }}

.github/workflows/build.yml

@@ -12,7 +12,7 @@ permissions:
 
 jobs:
   common:
-    uses: ./.github/workflows/build-common.yml
+    uses: $/.github/workflows/build-common.yml
     secrets:
       DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
 
@@ -21,7 +21,7 @@ jobs:
     # because any time a new library version is released to maven central it can fail
     # which requires unnecessary release branch maintenance, especially for patches
     if: "!startsWith(github.ref_name, 'release/')"
-    uses: ./.github/workflows/reusable-test-latest-deps.yml
+    uses: $/.github/workflows/reusable-test-latest-deps.yml
     secrets:
       DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
 
@@ -30,10 +30,10 @@ jobs:
     # because any time a new library version is released to maven central it can fail
     # which requires unnecessary release branch maintenance, especially for patches
     if: "!startsWith(github.ref_name, 'release/')"
-    uses: ./.github/workflows/reusable-muzzle.yml
+    uses: $/.github/workflows/reusable-muzzle.yml
 
   lint:
     # release branches are excluded because the README.md javaagent download link has to be updated
     # on release branches before the release download has been published
     if: "!startsWith(github.ref_name, 'release/')"
-    uses: ./.github/workflows/reusable-lint-check.yml
+    uses: $/.github/workflows/reusable-lint-check.yml

.github/workflows/documentation-synchronization-audit.yml

@@ -54,7 +54,7 @@ jobs:
     needs:
       - crawl
     if: ${{ needs.crawl.result == 'success' }}
-    uses: ./.github/workflows/reusable-workflow-notification.yml
+    uses: $/.github/workflows/reusable-workflow-notification.yml
     with:
       success: ${{ needs.crawl.outputs.success == 'true' }}
       title: "Documentation sync needed: opentelemetry.io site out of sync"
@@ -66,6 +66,6 @@ jobs:
     needs:
       - crawl
     if: always()
-    uses: ./.github/workflows/reusable-workflow-notification.yml
+    uses: $/.github/workflows/reusable-workflow-notification.yml
     with:
       success: ${{ needs.crawl.result == 'success' }}

.github/workflows/native-tests-daily.yml

@@ -11,7 +11,7 @@ permissions:
 
 jobs:
   graalvm-native-tests:
-    uses: ./.github/workflows/reusable-native-tests.yml
+    uses: $/.github/workflows/reusable-native-tests.yml
     with:
       test-latest-deps: true
 
@@ -22,7 +22,7 @@ jobs:
     needs:
       - graalvm-native-tests
     if: always()
-    uses: ./.github/workflows/reusable-workflow-notification.yml
+    uses: $/.github/workflows/reusable-workflow-notification.yml
     with:
       success: ${{ needs.graalvm-native-tests.result == 'success' }}
       failure-notification-after-attempts: 2

.github/workflows/ossf-scorecard.yml

@@ -16,7 +16,7 @@ jobs:
       contents: read # for actions/checkout
       id-token: write # for Scorecard to publish results
       security-events: write # for the SARIF upload to code scanning
-    uses: open-telemetry/shared-workflows/.github/workflows/scorecard.yml@03559ef555db0eae5d85c3c6347d1530243e7aa7 # v0.13.0
+    uses: open-telemetry/shared-workflows/.github/workflows/scorecard.yml@68c7b2f0ef9cd9c1e2b71d3018f63127be189578 # v0.14.0
 
   workflow-notification:
     permissions:

.github/workflows/pr-smoke-test-grpc-images.yml

@@ -14,7 +14,7 @@ permissions:
 
 jobs:
   build:
-    uses: ./.github/workflows/reusable-pr-smoke-test-images.yml
+    uses: $/.github/workflows/reusable-pr-smoke-test-images.yml
     with:
       project: ":smoke-tests:images:grpc"
       cache-read-only: true

.github/workflows/pr-smoke-test-play-images.yml

@@ -14,7 +14,7 @@ permissions:
 
 jobs:
   build:
-    uses: ./.github/workflows/reusable-pr-smoke-test-images.yml
+    uses: $/.github/workflows/reusable-pr-smoke-test-images.yml
     with:
       project: ":smoke-tests:images:play"
       cache-read-only: true

.github/workflows/pr-smoke-test-quarkus-images.yml

@@ -14,7 +14,7 @@ permissions:
 
 jobs:
   build:
-    uses: ./.github/workflows/reusable-pr-smoke-test-images.yml
+    uses: $/.github/workflows/reusable-pr-smoke-test-images.yml
     with:
       project: ":smoke-tests:images:quarkus"
       cache-read-only: true

.github/workflows/pr-smoke-test-security-manager-images.yml

@@ -14,7 +14,7 @@ permissions:
 
 jobs:
   build:
-    uses: ./.github/workflows/reusable-pr-smoke-test-images.yml
+    uses: $/.github/workflows/reusable-pr-smoke-test-images.yml
     with:
       project: ":smoke-tests:images:security-manager"
       cache-read-only: true

.github/workflows/pr-smoke-test-spring-boot-images.yml

@@ -14,7 +14,7 @@ permissions:
 
 jobs:
   build:
-    uses: ./.github/workflows/reusable-pr-smoke-test-images.yml
+    uses: $/.github/workflows/reusable-pr-smoke-test-images.yml
     with:
       project: ":smoke-tests:images:spring-boot"
       cache-read-only: true

.github/workflows/publish-smoke-test-grpc-images.yml

@@ -17,7 +17,7 @@ jobs:
     permissions:
       contents: read
       packages: write
-    uses: ./.github/workflows/reusable-publish-smoke-test-images.yml
+    uses: $/.github/workflows/reusable-publish-smoke-test-images.yml
     with:
       project: ":smoke-tests:images:grpc"
 

.github/workflows/publish-smoke-test-play-images.yml

@@ -17,7 +17,7 @@ jobs:
     permissions:
       contents: read
       packages: write
-    uses: ./.github/workflows/reusable-publish-smoke-test-images.yml
+    uses: $/.github/workflows/reusable-publish-smoke-test-images.yml
     with:
       project: ":smoke-tests:images:play"
 

.github/workflows/publish-smoke-test-quarkus-images.yml

@@ -17,7 +17,7 @@ jobs:
     permissions:
       contents: read
       packages: write
-    uses: ./.github/workflows/reusable-publish-smoke-test-images.yml
+    uses: $/.github/workflows/reusable-publish-smoke-test-images.yml
     with:
       project: ":smoke-tests:images:quarkus"
       # Quarkus 3.7+ requires Java 17+

.github/workflows/publish-smoke-test-security-manager-images.yml

@@ -17,7 +17,7 @@ jobs:
     permissions:
       contents: read
       packages: write
-    uses: ./.github/workflows/reusable-publish-smoke-test-images.yml
+    uses: $/.github/workflows/reusable-publish-smoke-test-images.yml
     with:
       project: ":smoke-tests:images:security-manager"
 

.github/workflows/publish-smoke-test-servlet-images.yml

@@ -101,7 +101,7 @@ jobs:
     needs:
       - publish
     if: always()
-    uses: ./.github/workflows/reusable-workflow-notification.yml
+    uses: $/.github/workflows/reusable-workflow-notification.yml
     with:
       success: ${{ needs.publish.result == 'success' }}
       failure-notification-after-attempts: 2

.github/workflows/publish-smoke-test-spring-boot-images.yml

@@ -17,7 +17,7 @@ jobs:
     permissions:
       contents: read
       packages: write
-    uses: ./.github/workflows/reusable-publish-smoke-test-images.yml
+    uses: $/.github/workflows/reusable-publish-smoke-test-images.yml
     with:
       project: ":smoke-tests:images:spring-boot"
 

.github/workflows/release.yml

@@ -7,7 +7,7 @@ permissions:
 
 jobs:
   common:
-    uses: ./.github/workflows/build-common.yml
+    uses: $/.github/workflows/build-common.yml
 
   # test-latest-deps is intentionally not included in the release workflows
   # because any time a new library version is released to maven central
@@ -203,7 +203,7 @@ jobs:
       issues: write
     needs:
       - release
-    uses: ./.github/workflows/documentation-synchronization-audit.yml
+    uses: $/.github/workflows/documentation-synchronization-audit.yml
 
   post-release-updates:
     runs-on: ubuntu-latest

.github/workflows/reusable-pr-build.yml

@@ -26,36 +26,36 @@ permissions:
 
 jobs:
   common:
-    uses: ./.github/workflows/build-common.yml
+    uses: $/.github/workflows/build-common.yml
     with:
       skip-openj9-tests: ${{ inputs.skip-openj9-tests }}
       skip-windows-smoke-tests: ${{ inputs.skip-windows-smoke-tests }}
       reduced-appserver-tests: ${{ inputs.reduced-appserver-tests }}
       cache-read-only: true
 
   test-latest-deps:
-    uses: ./.github/workflows/reusable-test-latest-deps.yml
+    uses: $/.github/workflows/reusable-test-latest-deps.yml
     with:
       cache-read-only: true
 
   test-native:
     if: "!inputs.skip-native-tests"
-    uses: ./.github/workflows/reusable-native-tests.yml
+    uses: $/.github/workflows/reusable-native-tests.yml
 
   muzzle:
-    uses: ./.github/workflows/reusable-muzzle.yml
+    uses: $/.github/workflows/reusable-muzzle.yml
     with:
       cache-read-only: true
 
   lint:
     # release branches are excluded because the README.md javaagent download link has to be updated
     # on release branches before the release download has been published
     if: "!startsWith(github.ref_name, 'release/') && !startsWith(github.base_ref, 'release/')"
-    uses: ./.github/workflows/reusable-lint-check.yml
+    uses: $/.github/workflows/reusable-lint-check.yml
 
   build-servlet-images:
     if: "!inputs.skip-servlet-images"
-    uses: ./.github/workflows/reusable-build-servlet-images.yml
+    uses: $/.github/workflows/reusable-build-servlet-images.yml
 
   required-status-check:
     needs: