Synchronize common files from prometheus/prometheus (#5545)

Propagating changes from prometheus/prometheus default branch.

*Source can be found
[here](https://github.com/prometheus/prometheus/blob/main/scripts/sync_repo_files.sh).*

To check out this branch locally and push changes back:
```
git remote add prombot https://github.com/prombot/prometheus_alertmanager.git
git fetch prombot repo_sync
git checkout -b repo_sync prombot/repo_sync
```

Signed-off-by: prombot <prometheus-team@googlegroups.com>

Author: prombot

.github/workflows/approve-workflows.yml

@@ -22,6 +22,6 @@ jobs:
       contents: read
       pull-requests: write
     steps:
-      - uses: prometheus/promci/approve_workflows@370e8c15dcec50043cbe66f2f34633d9efc0a190 # v0.9.0
+      - uses: prometheus/promci/approve_workflows@872d318d090d73df349cb6ed90aadd072ca478f7 # v0.10.0
         with:
           github_token: ${{ github.token }}

.github/workflows/stale.yml

@@ -14,7 +14,7 @@ jobs:
     if: github.repository_owner == 'prometheus' || github.repository_owner == 'prometheus-community' # Don't run this workflow on forks.
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629 # v10.4.0
+      - uses: actions/stale@4391f3da665fdf50b6810c1a66712fb9ba21aa93 # v11.0.0
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           # opt out of defaults to avoid marking issues as stale and closing them