chore(deployment-matrix): update matrix lerian notifications

[bedatty]

GitHub Actions Shared Workflows

---

Description

Type of Change

• feat: New workflow or new input/output/step in an existing workflow
• fix: Bug fix in a workflow (incorrect behavior, broken step, wrong condition)
• perf: Performance improvement (e.g. caching, parallelism, reduced steps)
• refactor: Internal restructuring with no behavior change
• docs: Documentation only (README, docs/, inline comments)
• ci: Changes to self-CI (workflows under .github/workflows/ that run on this repo)
• chore: Dependency bumps, config updates, maintenance
• test: Adding or updating tests
• BREAKING CHANGE: Callers must update their configuration after this PR

Breaking Changes

None.

Testing

• YAML syntax validated locally
• Triggered a real workflow run on a caller repository using @this-branch or the beta tag
• Verified all existing inputs still work with default values
• Confirmed no secrets or tokens are printed in logs
• Checked that unrelated workflows are not affected

Caller repo / workflow run:

Related Issues

Closes #

Summary by CodeRabbit

• Chores
  • Updated GitHub Actions workflow automation dependencies to latest compatible versions.
  • Updated deployment configuration to optimize cluster distribution for application availability.

[coderabbitai]

Walkthrough

This PR updates the pinned version of actions/create-github-app-token from v3.1.1 to v3.2.0 across seven workflow files, and expands lerian-notification deployment coverage to three additional Kubernetes clusters (clotilde, anacleto, benedita) while removing a temporary development-only annotation.

Changes

GitHub Actions Token Generation Pinning

Layer / File(s)	Summary
Workflow action version updates .github/workflows/backmerge.yml, .github/workflows/gptchangelog.yml, .github/workflows/helm-update-chart.yml, .github/workflows/helm-upgrade-doc.yml, .github/workflows/release-notification.yml, .github/workflows/release.yml, .github/workflows/typescript-release.yml	Nine workflow files update pinned actions/create-github-app-token from v3.1.1 to v3.2.0. The release.yml workflow pins the action in three separate jobs (publish_release, generate_changelog, update_major_tag). Token inputs and downstream usage remain unchanged.

Deployment Matrix Expansion

Layer / File(s)	Summary
Cluster deployment configuration updates config/deployment-matrix.yml	The lerian-notification app is added to the deployment matrix for clotilde, anacleto, and benedita Kubernetes clusters. The "firmino-dev only today" temporary annotation is removed from the registry entry.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• LerianStudio/github-actions-shared-workflows#371: Updates GitHub Actions pin revisions and deployment-matrix configuration for lerian-notification across clusters.
• LerianStudio/github-actions-shared-workflows#373: Modifies config/deployment-matrix.yml to add lerian-notification to deployment registry and app entries.
• LerianStudio/github-actions-shared-workflows#364: Updates actions/create-github-app-token pinned SHA in helm-upgrade-doc.yml workflow.

Suggested labels

workflow, deployment-matrix, dependencies, github-config, size/S

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The PR description is incomplete. The Description section is empty, missing a summary of affected workflows and behavior changes despite template guidance.	Add a clear description summarizing which workflows were updated (backmerge, gptchangelog, helm-update-chart, helm-upgrade-doc, release-notification, release, typescript-release) and the deployment matrix changes. Include specific behavior changes and rationale.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title partially relates to the changeset. It references lerian notifications and deployment matrix, matching the config/deployment-matrix.yml changes, but omits the significant GitHub Actions version bumps across 7 workflow files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/update-matrix-lerian-notifications

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[lerian-studio]

⚠️ Invalid Source Branch

Pull requests to main can only come from:

• develop
• hotfix/*

Your source branch: chore/update-matrix-lerian-notifications

Please change the base branch or create a PR from an allowed branch.

[lerian-studio]

🔍 PR Validation Summary

✅ PR Mergeable — no blocking failures

Check	Status	Blocking
Source Branch	✅ success	yes
PR Title	✅ success	yes
PR Description	✅ success	yes
PR Size	✅ success	no
Auto Labels	✅ success	no
PR Metadata	✅ success	no

---

_{🔍 View workflow run}

[lerian-studio]

🔍 Lint Analysis

Check	Files Scanned	Status
YAML Lint	1 file(s)	✅ success
Action Lint	no changes	⏭️ skipped
Pinned Actions	no changes	⏭️ skipped
Markdown Link Check	no changes	⏭️ skipped
Spelling Check	1 file(s)	✅ success
Shell Check	no changes	⏭️ skipped
README Check	no changes	⏭️ skipped
Composite Schema	no changes	⏭️ skipped
Deployment Matrix	1 file(s)	✅ success

---

_{🔍 View full scan logs}

[lerian-studio]

🛡️ CodeQL Analysis Results

Languages analyzed: actions

✅ No security issues found.

---

_{🔍 View full scan logs | 🛡️ Security tab}

[coderabbitai]

Actionable comments posted: 0