chore: update release actions to latest versions

[BYK]

Update release-related GitHub Actions workflows to use the latest action versions, matching the patterns from the CLI repo.

Changes

.github/workflows/release.yml:

• actions/create-github-app-token: SHA pin → v2.2.1
• actions/checkout: v4 → v6
• getsentry/craft: SHA pin → v2

.github/workflows/changelog-preview.yml:

• getsentry/craft reusable workflow: SHA pin → v2
• Add explicit permissions block (contents: read, pull-requests: write, statuses: write)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
spotlightjs	Ready	Preview, Comment	Mar 16, 2026 8:28am

[github-actions]

Semver Impact of This PR

🟢 Patch (bug fixes)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

---

New Features ✨

• (telemetry) EmptyState component by Shubhdeep12 in #1264
• (ui) Collapsible insights section by Shubhdeep12 in #1263
• Added new codecov action by MathurAditya724 in #1255

Bug Fixes 🐛

Deps

• Resolve security vulnerabilities via pnpm overrides by BYK in #1276
• Address Dependabot security alerts by BYK in #1261

Other

• (cli) Show options in command-specific help output by BYK in #1260
• (ui) Update TelemetryView layout for better responsiveness by Shubhdeep12 in #1262
• Add cleanup handlers for EventSource connection in cli tail by Shubhdeep12 in #1258
• Updated the codecov action to point to getsentry by MathurAditya724 in #1259

Internal Changes 🔧

Deps

• Bump @hono/node-server from 1.19.3 to 1.19.10 by dependabot in #1274
• Bump hono from 4.11.7 to 4.12.4 by dependabot in #1273
• Bump hono from 4.11.4 to 4.11.7 by dependabot in #1267
• Bump hono from 4.10.3 to 4.11.4 by dependabot in #1254

Other

• (ci) Fix workflow warnings for cache action and codecov by BYK in #1251
• (release) Fix Docker Latest Target by BYK in #1252

• Update release actions to latest versions by BYK in #1277

• Use pull_request_target for changelog preview by BYK in #1256

Other

• Update documentation link in README.md by sergical in #1253

---

_{🤖 This preview updates automatically when you update the PR.}

[github-actions]

Codecov Results 📊

✅ Patch coverage is 100.00%. Project has 1348 uncovered lines.
✅ Project coverage is 76.31%. Comparing base (base) to head (head).

Files with missing lines (31)

File	Patch %	Lines
event.ts	52.61%	⚠️ 263 Missing
mcp.ts	65.91%	⚠️ 151 Missing
messageBuffer.ts	67.57%	⚠️ 120 Missing
docker-compose.ts	77.33%	⚠️ 85 Missing
utils.ts	31.71%	⚠️ 84 Missing
extras.ts	28.13%	⚠️ 69 Missing
debugLogging.ts	29.47%	⚠️ 67 Missing
utils.ts	75.28%	⚠️ 66 Missing
index.ts	24.59%	⚠️ 46 Missing
cors.ts	91.08%	⚠️ 39 Missing and 1 partials
logs.ts	28.85%	⚠️ 37 Missing
traces.ts	93.10%	⚠️ 33 Missing and 1 partials
userAgent.ts	52.63%	⚠️ 27 Missing
index.ts	80.47%	⚠️ 25 Missing
utils.ts	66.67%	⚠️ 23 Missing
errors.ts	75.53%	⚠️ 23 Missing
JsonViewer.tsx	71.62%	⚠️ 21 Missing
traces.ts	75.86%	⚠️ 21 Missing
processEnvelope.ts	86.67%	⚠️ 18 Missing
eventContainer.ts	78.05%	⚠️ 18 Missing
open.ts	42.86%	⚠️ 16 Missing
CodeViewer.tsx	54.55%	⚠️ 15 Missing
contentType.ts	66.67%	⚠️ 15 Missing
Attachment.tsx	90.00%	⚠️ 12 Missing and 1 partials
helpers.ts	70.27%	⚠️ 11 Missing
streaming.ts	76.09%	⚠️ 11 Missing
ShikiProvider.tsx	54.17%	⚠️ 11 Missing
AnsiText.tsx	91.00%	⚠️ 9 Missing
logger.ts	65.22%	⚠️ 8 Missing
logger.ts	87.50%	⚠️ 4 Missing and 1 partials
profileChunkProcessor.ts	100.00%	⚠️ 1 partials

Coverage diff

@@            Coverage Diff             @@
##          main       #PR       +/-##
==========================================
+ Coverage    76.31%    76.31%        —%
==========================================
  Files           47        47         —
  Lines         5690      5690         —
  Branches       611       611         —
==========================================
+ Hits          4342      4342         —
- Misses        1348      1348         —
- Partials         5         5         —

---

Generated by Codecov Action