chore(deps): batch-consolidate patch/minor/security Renovate updates

.changeset/renovate-batch-consolidation.md

@@ -0,0 +1,7 @@
+---
+'@commercetools-uikit/pagination': patch
+---
+
+Bump `formik` (a runtime dependency of this package) from `^2.4.6` to `^2.4.9` as part of a batch Renovate dependency consolidation. No API or behavior changes; picks up upstream patch/minor fixes only.
+
+The remaining dependencies consolidated in this batch (`qs`, `postcss`, `@changesets/changelog-github`, plus the previously-open Renovate PRs for `dompurify`, `immutable`, `react`/`react-dom`, `@changesets/cli`, `@formatjs/cli`, `browserslist`, and CI-only workflow/action updates) are devDependencies or repo tooling only and do not affect any published `@commercetools-uikit/*` / `@commercetools-frontend/*` package's runtime behavior, so no further changesets are added for them — consistent with existing precedent in this repo.

.github/workflows/chromatic.yml

@@ -135,7 +135,7 @@ jobs:
           (steps.changed-files.outputs.any_changed == 'true' ||
           github.event_name == 'workflow_dispatch') && github.head_ref !=
           'changeset-release/main'
-        uses: chromaui/action@94713c544284a14195de3b50ef24301579f1877e # v18
+        uses: chromaui/action@14cfaef73576e69f95f47f60058063f46ca38719 # v18
         with:
           projectToken: ${{ secrets.CHROMATIC_PROJECT_TOKEN }}
           # Run inside the storybook workspace rather than pointing

.github/workflows/merge-blocking-labels.yml

@@ -20,7 +20,7 @@ jobs:
     name: Prevent merge with blocking labels
     runs-on: ubuntu-latest
     steps:
-      - uses: docker://agilepathway/pull-request-label-checker:latest
+      - uses: docker://agilepathway/pull-request-label-checker:latest@sha256:14f5f3dfda922496d07d53494e2d2b42885165f90677a1c03d600059b7706a61
         with:
           none_of: '👁 👨‍🎨 Status: UI/UX Review,🖐 🖐 Status: On Hold,🛑 Status: blocked,🚧 Status: WIP,🚨 🚨 🚨DO NOT MERGE🚨 🚨 🚨'
           repo_token: ${{ secrets.GITHUB_TOKEN }}