chore(deps): consolidate GitHub Actions updates

[ArangoGutierrez]

Summary

Consolidates the two open Dependabot GitHub Actions updates into one change: lycheeverse/lychee-action 2.8.0 → 2.9.0 and actions/stale 10.3.0 → 10.4.0.

Motivation / Context

Reviewing and merging these independent action updates together avoids repeated rebases and CI runs while preserving the immutable SHA pins from the original Dependabot PRs.

Fixes: N/A
Related: #1700, #1701

Type of Change

• Bug fix (non-breaking change that fixes an issue)
• New feature (non-breaking change that adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Documentation update
• Refactoring (no functional changes)
• Build/CI/tooling

Component(s) Affected

• CLI (cmd/aicr, pkg/cli)
• API server (cmd/aicrd, pkg/api, pkg/server)
• Recipe engine / data (pkg/recipe)
• Bundlers (pkg/bundler, pkg/component/*)
• Collectors / snapshotter (pkg/collector, pkg/snapshotter)
• Validator (pkg/validator)
• Core libraries (pkg/errors, pkg/k8s)
• Docs/examples (docs/, examples/)
• Other: GitHub Actions workflows

Implementation Notes

• Preserves the exact immutable action SHAs from chore: deps: bump lycheeverse/lychee-action from 2.8.0 to 2.9.0 #1700 and chore: deps: bump actions/stale from 10.3.0 to 10.4.0 #1701.
• Verifies both SHAs resolve to the proposed upstream release tags and signed upstream commits.
• Keeps the existing action inputs unchanged; the two updates touch separate workflows.
• Corrects the stale actions/stale inline version annotation to v10.4.0.
• Requires no BOM regeneration or Go coverage delta because no recipe, chart, component, or Go files change.

Testing

actionlint .github/workflows/fern-docs-ci.yaml .github/workflows/stale.yaml
yamllint -c .yamllint.yaml .github/workflows/fern-docs-ci.yaml .github/workflows/stale.yaml
unset GITLAB_TOKEN
make qualify

• make qualify: passed
• Race-enabled unit tests: passed
• Coverage: 78.1% (75% required)
• golangci-lint: 0 issues
• Chainsaw E2E: 23 passed, 0 failed, 0 skipped
• Vulnerability and license gates: passed
• The targeted actionlint command exits successfully with one pre-existing SC2046 warning on an untouched Fern install line.

Risk Assessment

• Low — Isolated change, well-tested, easy to revert
• Medium — Touches multiple components or has broader impact
• High — Breaking change, affects critical paths, or complex rollout

Rollout notes: No migration is required. Revert the single commit to restore both previous action pins.

Checklist

• Tests pass locally (make test with -race)
• Linter passes (make lint)
• I did not skip/disable tests to make CI green
• I added/updated tests for new functionality
  • Not applicable: this dependency-only update adds no functionality; existing workflow and qualification gates cover the changed pins.
• I updated docs if user-facing behavior changed
• Changes follow existing patterns in the codebase
• Commits are cryptographically signed (git commit -S) — GPG signing info

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Enterprise

Run ID: 26d84bb9-00f6-4dd2-8252-b16e30359418

📥 Commits

Reviewing files that changed from the base of the PR and between 755c37a and d5fbc57.

📒 Files selected for processing (2)

• .github/workflows/fern-docs-ci.yaml
• .github/workflows/stale.yaml

---

📝 Walkthrough

Walkthrough

The Fern Docs CI workflow updates its pinned lycheeverse/lychee-action reference from v2.8.0 to v2.9.0. The stale-item workflow updates its pinned actions/stale reference from v10.1.0 to v10.4.0. No workflow triggers, permissions, or stale/close settings change.

Estimated code review effort: 1 (Trivial) | ~3 minutes

🚥 Pre-merge checks | ✅ 4

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the main change: consolidating two GitHub Actions dependency updates.
Description check	✅ Passed	The description directly matches the workflow updates and version bumps made in the pull request.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands.}