chore(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	pin	v4 → v4.4.0
actions/setup-node	action	pin	v4 → v4.4.0
codecov/codecov-action	action	pin	v5 → v5.5.5
node	uses-with	pin	24 → 24.21.0

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Configuration

📅 Schedule: (in timezone Europe/Warsaw)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coldtea-pr-lens]

◈ PR Lens

🟢 +0 new · 🟠 ~5 changed · 🔴 -0 removed · 1 flow · 3 files · commit 23b6ce8

Architecture

5 components touched across 3 lanes.

Open the interactive canvas

Data flow

Running CI workflow

Open the interactive canvas

View

• Architecture lens
• Data flow lens
• Expand every detail

Tip

The diagrams are links. Click one to open it on the canvas, then press W or click play to walk through the change.

🪧 More tips

• Run npx skills add coldteadotai/pr-lens, then tell your coding agent: "Diagram the change you just made with PR Lens and attach it to the pull request."
• Run npx @coldtea/pr-lens-cli analyze --base origin/main on a branch, then npx @coldtea/pr-lens-cli render .pr-lens/graph.json. Same lenses, your own model key, before the pull request exists.
• Untick Architecture lens or Data flow lens under View to hide a diagram, or tick Expand every detail to open every section. The comment redraws in a few seconds.
• Click the link under each diagram to open it on a canvas you can zoom, pan and step through.
• Open a diagram on the canvas, then press W or click play to walk through the change one step at a time.
• The CLI's render reads .github/pr-lens.yml and applies your renames, exclusions and lane pins at draw time.
• Set github.comment.collapsed: true in .github/pr-lens.yml to fold the comment behind one View architecture and data flow row. Drawing still runs on every push.
• Add .github/workflows/pr-lens.yml with coldteadotai/pr-lens/packages/action@v0 and your model provider's key as its api-key to run PR Lens from your own CI. Any /chat/completions endpoint works.
• Push a commit and the comment redraws for the new head. A slow older run never overwrites a newer one.
• Switch GitHub to dark mode and the diagrams follow. The moving dots are this pull request's data in motion.

---

Thanks for using PR Lens! It's built by Coldtea, free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Bluesky
• Mastodon
• Reddit
• LinkedIn

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: QUIET

Plan: Advanced

Run ID: 2bef43cc-70a5-454c-a2d7-357aae503443

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cloudflare-workers-and-pages]

🚀 Deploying Preview to Cloudflare 🚀

Preview URL: https://renovate-github-actions-agntn-keys.oritwoen.workers.dev (commit 34c5430)

This URL reflects your latest Preview deployment

Preview Deployments by commit

Status	Deployment URL	Commit	Updated (UTC)	See this deployment's details
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://40f15875-agntn-keys.oritwoen.workers.dev	34c5430	2026-09-20T21:17:10.240Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://47ec15e7-agntn-keys.oritwoen.workers.dev	b404bef	2026-09-20T09:41:02.009Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://bd661496-agntn-keys.oritwoen.workers.dev	e972385	2026-09-20T06:54:19.586Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://ee944aee-agntn-keys.oritwoen.workers.dev	3b88076	2026-09-19T21:01:48.556Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://a612a06d-agntn-keys.oritwoen.workers.dev	762dd28	2026-09-19T16:50:41.252Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://56bc1d56-agntn-keys.oritwoen.workers.dev	23b6ce8	2026-09-19T14:26:28.590Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://9e193e99-agntn-keys.oritwoen.workers.dev	d5b7aa3	2026-09-19T14:19:28.155Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://f7c35ef4-agntn-keys.oritwoen.workers.dev	55234bd	2026-09-19T13:38:07.244Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://b362c945-agntn-keys.oritwoen.workers.dev	e8675a9	2026-09-19T09:34:57.029Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://386995d4-agntn-keys.oritwoen.workers.dev	6c46320	2026-09-19T05:28:27.342Z	Visit the dashboard ↗

View all previews: View all previews ↗

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — The diff is limited to immutable action pins and a Node patch-version pin across CI, autofix, and package publishing workflows, with no application-code changes. Human review is still warranted because all affected workflow files are explicitly owned by another maintainer.

No code changes detected at 34c5430. Prior analysis still applies.

^{You can add or adjust custom eligibility rules. Learn more.}