[docker] Update opensearchproject/opensearch Docker tag to v3.5.0

[renovate]

This PR contains the following updates:

Package	Update	Change
opensearchproject/opensearch	minor	3.4.0 → 3.5.0

---

Release Notes

opensearch-project/OpenSearch (opensearchproject/opensearch)

v3.5.0

Compare Source

Version 3.5.0 Release Notes

Compatible with OpenSearch and OpenSearch Dashboards version 3.5.0

Added

• Add support for fields containing dots in their name as literals (#​19958)
• Add support for forward translog reading (#​20163)
• Added public getter method in SourceFieldMapper to return excluded field (#​20205)
• Add integ test for simulating node join left event when data node cluster state publication lag because the cluster applier thread being busy (#​19907).
• Relax jar hell check when extended plugins share transitive dependencies (#​20103)
• Added public getter method in SourceFieldMapper to return included field (#​20290)
• Support for HTTP/3 (server side) (#​20017)
• Add circuit breaker support for gRPC transport to prevent out-of-memory errors (#​20203)
• Add index-level-encryption support for snapshots and remote-store (#​20095)
• Adding BackWardCompatibility test for remote publication enabled cluster (#​20221)
• Support for hll field mapper to support cardinality rollups (#​20129)
• Add tracing support for StreamingRestChannel (#​20361)
• Introduce new libs/netty4 module to share common implementation between netty-based plugins and modules (transport-netty4, transport-reactor-netty4) (#​20447)
• Add validation to make crypto store settings immutable (#​20123)
• Introduce concurrent translog recovery to accelerate segment replication primary promotion (#​20251)
• Update to almalinux:10 (#​20482)
• Add X-Request-Id to uniquely identify a search request (#​19798)
• Added TopN selection logic for streaming terms aggregations (#​20481)
• Added support for Intra Segment Search (#​19704)
• Introduce AdditionalCodecs and EnginePlugin::getAdditionalCodecs hook to allow additional Codec registration (#​20411)

Changed

• Handle custom metadata files in subdirectory-store (#​20157)
• Add support for missing proto fields in GRPC FunctionScore and Highlight (#​20169)
• Ensure all modules are included in INTEG_TEST testcluster distribution (#​20241)
• Cleanup HttpServerTransport.Dispatcher in Netty tests (#​20160)
• Use compact object headers with JDK25+ (#​20392)
• Add cluster.initial_cluster_manager_nodes to testClusters OVERRIDABLE_SETTINGS (#​20348)
• Add BigInteger support for unsigned_long fields in gRPC transport (#​20346)
• Install demo security information when running ./gradlew run -PinstalledPlugins="['opensearch-security']" (#​20372)
• Add Alt-Svc header support to advertise HTTP/3 availability (#​20434)
• Refactor streaming agg query phase planning (#​20471)

Fixed

• Fix Snapshot rename replacement unbounded length rename (#​20464)
• Fix segment replication failure during rolling restart (#​19234)
• Fix bug of warm index: FullFileCachedIndexInput was closed error (#​20055)
• Fix flaky test ClusterMaxMergesAtOnceIT.testClusterLevelDefaultUpdatesMergePolicy (#​18056)
• Fix bug in Assertion framework(Yaml Rest test): numeric comparison fails when comparing Integer vs Long (or Float vs Double) (#​19376)
• Fix Netty deprecation warnings in transport-netty4 module (#​20233)
• Fix snapshot restore when an index sort is present (#​20284)
• Fix SearchPhaseExecutionException to properly initCause (#​20320)
• [repository-s3] remove endpointOverride and let AWS SDK V2 S3 determine the s3 url based on bucket name or arn provided (#​20345)
• Fix cluster.remote.<cluster_alias>.server_name setting no populating SNI (#​20321)
• Fix X-Opaque-Id header propagation (along with other response headers) for streaming Reactor Netty 4 transport (#​20371)
• Allow removing plugin that's optionally extended (#​20417)
• Fix indexing regression and bug fixes for grouping criteria. (20145)
• LeafReader should not remove SubReaderWrappers incase IndexWriter encounters a non aborting Exception (#​20193)
• Fix Netty deprecation warnings in transport-reactor-netty4 module (20429)
• Fix stats aggregation returning zero results with size:0. (20427)
• Fix the node local term and version being truncated in logs when host providers return very long IP or host strings (20432)
• Remove child level directory on refresh for CompositeIndexWriter (#​20326)
• Fixes and refactoring in stream transport to make it more robust (#​20359)

Dependencies

• Bump com.google.auth:google-auth-library-oauth2-http from 1.38.0 to 1.41.0 (#​20183)
• Bump actions/checkout from 5 to 6 (#​20186)
• Bump org.apache.commons:commons-configuration2 from 2.12.0 to 2.13.0 (#​20185, #​20184)
• Bump Project Reactor to 3.8.1 and Reactor Netty to 1.3.1 (#​20217)
• Bump OpenTelemetry to 1.57.0 and OpenTelemetry Semconv to 1.37.0 (#​20231)
• Bump peter-evans/create-pull-request from 7 to 8 (#​20236)
• Bump org.apache.kerby:kerb-admin from 2.1.0 to 2.1.1 (#​20235)
• Bump org.checkerframework:checker-qual from 3.49.0 to 3.52.1 (#​20234)
• Bump netty to 4.2.9.Final (#​20230)
• Bump log4j from 2.21.0 to 2.25.3 (#​20308)
• Bump org.apache.logging.log4j:log4j-core from 2.25.2 to 2.25.3 (#​20300)
• Bump ch.qos.logback:logback-core from 1.5.20 to 1.5.23 (#​20303)
• Bump com.google.api.grpc:proto-google-iam-v1 from 1.57.0 to 1.58.2 (#​20302)
• Bump actions/setup-java from 4 to 5 (#​20304)
• Bump com.squareup.okhttp3:okhttp from 5.3.0 to 5.3.2 (#​20331)
• Bump asm from 9.7 to 9.9.1 (#​20330)
• Bump actions/upload-artifact from 5 to 6 (#​20333)
• Bump com.google.http-client:google-http-client-appengine from 2.0.2 to 2.0.3 (#​20332)
• Bump jackson from 2.18.1 to 2.20.1 (#​20343)
• Bump opensearch-protobufs from 0.24.0 to 1.0.0 and update transport-grpc module compatibility (#​20335)
• Bump Apache HttpClient5 to 5.6 (#​20358)
• Bump Apache HttpCore5 to 5.4 (#​20358)
• Bump org.jsoup:jsoup from 1.21.2 to 1.22.1 (#​20368)
• Bump org.jline:jline from 3.30.5 to 3.30.6 (#​20369)
• Bump lycheeverse/lychee-action from 2.6.1 to 2.7.0 (#​20370)
• Bump opensearch-protobufs from 1.0.0 to 1.1.0 and update transport-grpc module compatibility (#​20396)
• Bump ch.qos.logback:logback-classic from 1.5.23 to 1.5.24 (#​20407)
• Bump org.wiremock:wiremock-standalone from 3.6.0 to 3.13.2 (#​20406)
• Bump tj-actions/changed-files from 47.0.0 to 47.0.1 (#​20408)
• Bump reactor-netty to 1.3.2, reactor to 3.8.2 (#​20419)
• Bump org.apache.maven:maven-model from 3.9.6 to 3.9.12 (#​20438)
• Bump dnsjava:dnsjava from 3.6.3 to 3.6.4 (#​20440)
• Bump com.netflix.nebula.ospackage-base from 12.1.1 to 12.2.0 (#​20439)
• Bump OpenTelemetry to 1.58.0 (#​20441)
• Bump com.nimbusds:nimbus-jose-jwt from 10.6 to 10.7 (#​20478)
• Bump opensearch-protobufs from 1.1.0 to 1.2.0 (#​20480)
• Bump com.netflix.nebula:nebula-publishing-plugin from 21.1.0 to 23.0.0 (#​20477)

Removed

• Remove identity-shiro from plugins folder (#​20305)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.