build: update pinned ci-tools to a98f5d0

[marc0olo]

Picks up dfinity/ci-tools#94. bdfe993..a98f5d0 is only that commit.

Since reuse_branch (dfinity/ci-tools#80), the changelog pull request is force pushed on every push to main, and those pushes came from the default token as github-actions[bot]. Its workflows then waited for approval, and required pull_request_target workflows such as the External PR Ruleset never ran, which blocks the pull request even when approved (e.g. dfinity/pic-js#290). With #94, the branch is pushed with the app token instead.

🤖 Generated with Claude Code

[zeropath-ai]

✅ No security or compliance issues detected. Reviewed everything up to 3dfc822.

Security Overview

• 🔎 Scanned files: 12 changed file(s)
• 🔗 Scan Link: https://zeropath.com/app/repositories/d57f9d06-f73e-44d7-87e6-48ac7e591b20?scanId=229081e0-c531-4da0-b86f-5adee6634734&codeScanTypes=PrScan&tab=issues&detectionTypes=traditional,businessLogic,customRule,IAC,SECRETS,CICD,EOL,uncategorized

Detected Code Changes

Change Type

Relevant files

Enhancement

► .github/workflows/create-release-pr.yml       Replace various dfinity/ci-tools action versions with a98f5d0198719ad41ded2f02fa0f5e426102f369 for setup-python, setup-commitizen, setup-pnpm, bump-version, and create-pr # main ► .github/workflows/docs.yml       Update setup-pnpm action version to a98f5d0198719ad41ded2f02fa0f5e426102f369 # main ► .github/workflows/e2e-tests.yml       Update setup-pnpm action version to a98f5d0198719ad41ded2f02fa0f5e426102f369 # main ► .github/workflows/generate-changelog.yml       Update generate-changelog workflow to use a98f5d0198719ad41ded2f02fa0f5e426102f369 # main ► .github/workflows/lint.yml       Update setup-pnpm action version to a98f5d0198719ad41ded2f02fa0f5e426102f369 # main ► .github/workflows/mitm.yml       Update setup-pnpm action version to a98f5d0198719ad41ded2f02fa0f5e426102f369 # main ► .github/workflows/npm-audit.yml       Update setup-pnpm and create-pr action versions to a98f5d0198719ad41ded2f02fa0f5e426102f369 # main ► .github/workflows/prettier.yml       Update setup-pnpm action version to a98f5d0198719ad41ded2f02fa0f5e426102f369 # main ► .github/workflows/publish-docs.yml       Update setup-pnpm and extract-version/assemble-docs/submit-docs actions to a98f5d0198719ad41ded2f02fa0f5e426102f369 # main ► .github/workflows/release.yml       Update setup-python, setup-commitizen, setup-pnpm, is-beta-tag, extract-version, generate-release-notes to a98f5d0198719ad41ded2f02fa0f5e426102f369 # main ► .github/workflows/size-limit.yml       Update setup-pnpm action version to a98f5d0198719ad41ded2f02fa0f5e426102f369 # main ► .github/workflows/unit-tests.yml       Update setup-pnpm action version to a98f5d0198719ad41ded2f02fa0f5e426102f369 # main

[github-actions]

size-limit report 📦

Path	Size
@icp-sdk/core	91 B (0%)
@icp-sdk/core/agent	53.35 KB (0%)
@icp-sdk/core/candid	13.7 KB (0%)
@icp-sdk/core/identity	21.38 KB (0%)
@icp-sdk/core/identity/secp256k1	33.73 KB (0%)
@icp-sdk/core/principal	4.38 KB (0%)