chore(deps): update github actions (#333)

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [chromaui/action](https://github.com/chromaui/action) | action | digest | `c53f509` -> `c906769` |
| [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) | action | digest | `e7466d1` -> `f6b0bac` |
| [github/codeql-action](https://github.com/github/codeql-action) | action | digest | `e8893c5` -> `3796146` |
| [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels) | action | digest | `cc7a79f` -> `80a96a4` |
| [tinkurlab/monorepo-pr-labeler-action](https://github.com/tinkurlab/monorepo-pr-labeler-action) | action | minor | `4.1.5` -> `4.2.0` |

---

### Release Notes

<details>
<summary>tinkurlab/monorepo-pr-labeler-action (tinkurlab/monorepo-pr-labeler-action)</summary>

### [`v4.2.0`](https://github.com/TinkurLab/monorepo-pr-labeler-action/releases/tag/4.2.0): Monorepo PR Labeler v4.2.0

[Compare Source](https://github.com/tinkurlab/monorepo-pr-labeler-action/compare/4.1.5...4.2.0)

Update to use Node 20.

Thanks to [@&#8203;sigurdga](https://github.com/sigurdga) for the contribution!

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on Monday,before 4am on Thursday" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/weareinreach/GLAAD).



PR-URL: #333
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/workflows/chromatic.yml

@@ -32,7 +32,7 @@ jobs:
       - name: Install dependencies
         run: pnpm install
       - name: Publish to Chromatic
-        uses: chromaui/action@c53f50952a7b6d99666d77d8a61eb1b58944d68a # v10
+        uses: chromaui/action@c9067691aca4a28d6fbb40d9eea6e144369fbcae # v10
         with:
           projectToken: ${{ secrets.CHROMATIC_PROJECT_TOKEN }}
           onlyChanged: true

.github/workflows/codeql.yml

@@ -21,6 +21,6 @@ jobs:
       - name: ⤵️ Check out code from GitHub
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: 🏗 Initialize CodeQL
-        uses: github/codeql-action/init@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 # v3
+        uses: github/codeql-action/init@379614612a29c9e28f31f39a59013eb8012a51f0 # v3
       - name: 🚀 Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 # v3
+        uses: github/codeql-action/analyze@379614612a29c9e28f31f39a59013eb8012a51f0 # v3

.github/workflows/nextjs_bundle_analysis.yml

@@ -72,7 +72,7 @@ jobs:
           path: .next/analyze/__bundle_analysis.json
 
       - name: Download base branch bundle stats
-        uses: dawidd6/action-download-artifact@e7466d1a7587ed14867642c2ca74b5bcc1e19a2d # v3
+        uses: dawidd6/action-download-artifact@f6b0bace624032e30a85a8fd9c1a7f8f611f5737 # v3
         if: success() && github.event.number
         with:
           workflow: nextjs_bundle_analysis.yml

.github/workflows/pr-labels.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 🏷 Verify PR has a valid label
-        uses: mheap/github-action-required-labels@cc7a79fadbba6ed1d6f0efd70707e7b8bf7e6910 # v5
+        uses: mheap/github-action-required-labels@80a96a4863886addcbc9f681b5b295ba7f5424e1 # v5
         with:
           labels: 'breaking-change, bugfix, documentation, enhancement, refactor, performance, new-feature, maintenance, ci, dependencies, translations, changelog-ignore'
           mode: minimum
@@ -31,7 +31,7 @@ jobs:
     if: contains(fromJson('["main", "l10_*"]'), github.base_ref) != true
     steps:
       - name: 🏷 Apply repo labels
-        uses: tinkurlab/monorepo-pr-labeler-action@290105bf438d979f86a9a2b1d20a080098c26edc # 4.1.5
+        uses: tinkurlab/monorepo-pr-labeler-action@026d1e71df075b29ee3986875bfbb8a5b5d969f1 # 4.2.0
         env:
           GITHUB_TOKEN: ${{ secrets.GH_ACT_PAT }}
           BASE_DIRS: 'apps|packages'