chore(workflows): update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
actions/cache	action	digest	6849a64 -> 5a3ec84
actions/setup-node	action	digest	0a44ba7 -> 49933ea
actions/stale	action	digest	28ca103 -> 5bef64f
actions/upload-artifact	action	digest	b4b15b8 -> ea165f8
ajinabraham/njsscan-action	action	digest	74e5a58 -> c7b65a3
chromaui/action	action	digest	25f8ff3 -> e8cc4c3
crazy-max/ghaction-import-gpg	action	digest	01dd5d3 -> e89d409
github/codeql-action	action	digest	6624720 -> 28deaed
github/privileged-requester	action	patch	v2.3.2 -> v2.3.4
mheap/github-action-required-labels	action	digest	d25134c -> 388fd6a
peter-evans/create-pull-request	action	digest	5e91468 -> 271a8d0
pnpm/action-setup	action	minor	v4.0.0 -> v4.1.0
tj-actions/verify-changed-files	action	digest	6ed7632 -> a1c6ace

---

Release Notes

github/privileged-requester (github/privileged-requester)

v2.3.4

Compare Source

What's Changed

• Bump undici from 5.28.4 to 5.28.5 in the npm_and_yarn group by @​dependabot in https://github.com/github/privileged-requester/pull/185
• Bump actions/upload-artifact from 4.4.0 to 4.5.0 in the github-actions group across 1 directory by @​dependabot in https://github.com/github/privileged-requester/pull/184
• Bump the npm-dependencies group across 1 directory with 7 updates by @​dependabot in https://github.com/github/privileged-requester/pull/183

Full Changelog: github/privileged-requester@v2.3.3...v2.3.4

v2.3.3

Compare Source

What's Changed

• Bump actions/upload-artifact from 4.3.6 to 4.4.0 in the github-actions group by @​dependabot in https://github.com/github/privileged-requester/pull/175
• fallback to commit.commit.author.name by @​GrantBirki in https://github.com/github/privileged-requester/pull/182

Full Changelog: github/privileged-requester@v2.3.2...v2.3.3

pnpm/action-setup (pnpm/action-setup)

v4.1.0

Compare Source

Add support for package.yaml #​156.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
inreach-app	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Apr 25, 2025 11:04pm

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Generate unit testing code for this file.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai generate unit testing code for this file.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read src/utils.ts and generate unit testing code.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary or <!-- #coderabbitai summary --> to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai or @coderabbitai title anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.

[github-actions]

📦 Next.js Bundle Analysis for @weareinreach/app

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

[relativeci]

#2510 Bundle Size — 5.64MiB (0%).

28f884c(current) vs a9927c0 dev#2503(baseline)

Warning

Bundle contains 5 duplicate packages – View duplicate packages

Bundle metrics  no changes

	Current #2510	Baseline #2503
Initial JS	3.05MiB	3.05MiB
Initial CSS	9.7KiB	9.7KiB
Cache Invalidation	29.69%	29.69%
Chunks	67	67
Assets	80	80
Modules	2017	2017
Duplicate Modules	361	361
Duplicate Code	10%	10%
Packages	159	159
Duplicate Packages	5	5

Bundle size by type  no changes

	Current #2510	Baseline #2503
JS	4.41MiB	4.41MiB
Other	1.13MiB	1.13MiB
Fonts	94.54KiB	94.54KiB
CSS	9.7KiB	9.7KiB
IMG	8.57KiB	8.57KiB

Bundle analysis report Branch renovate/github-actions Project dashboard

---

^{Generated by RelativeCI Documentation Report issue}

[alwaysmeticulous]

🤖 No test run has been triggered as your Meticulous project has been deactivated (since you haven't viewed any test results in a while). Click here to reactivate.

_{Last updated for commit 28f884c. This comment will update as new commits are pushed.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud