Automated spamming of open source contributor users

[MikeMcC399]

This repo and others from the same owner are spamming open source contributors like me.

Expanding the release notes that include the GitHub usernames of contributors means that every contributor gets notified.

Please don't do this!

• ci(deps): bump actions/setup-node from 4.4.0 to 6.4.0 #214 includes the first entry with collapsed Release notes. That is fine.

• ci(deps): bump actions/setup-node from 4.4.0 to 6.4.0 #214 (comment) with the heading " Major Version Update — Manual Review Required" created by a user-written action expands the release notes and posts them

This results in notifications being sent to each of the users the workflow bot has named.

[jpr5]

Sincere apologies @MikeMcC399, unforeseen consequences of mass-hardening across all our repos in response to the TanStack compromise. Fix should be out shortly.