chore(ci): bump actions/checkout from 6 to 7 in the github-actions group

.github/workflows/ci.yml

@@ -14,7 +14,7 @@ jobs:
     name: build & test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Go
         uses: actions/setup-go@v6
@@ -49,7 +49,7 @@ jobs:
     # are reviewed from the logs. Build/test/vet/gofmt above remain hard gates.
     continue-on-error: true
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with:
           go-version: stable

.github/workflows/claude-pr-review.yml

@@ -33,7 +33,7 @@ jobs:
       github.actor != 'dependabot[bot]'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - uses: anthropics/claude-code-action@v1

.github/workflows/claude.yml

@@ -24,7 +24,7 @@ jobs:
       contains(github.event.comment.body, '@claude')
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - uses: anthropics/claude-code-action@v1

.github/workflows/codeql.yml

@@ -20,7 +20,7 @@ jobs:
       contents: read
       actions: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4

.github/workflows/homebrew-publish.yml

@@ -22,7 +22,7 @@ jobs:
     name: Publish formula to the Homebrew tap
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Render and push the formula
         env:

.github/workflows/python-publish.yml

@@ -27,7 +27,7 @@ jobs:
     permissions:
       id-token: write # OIDC for PyPI trusted publishing — no stored secret
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.12"

.github/workflows/python.yml

@@ -22,7 +22,7 @@ jobs:
       run:
         working-directory: sdks/python
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python }}

.github/workflows/release.yml

@@ -14,7 +14,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - uses: actions/setup-go@v6
@@ -36,7 +36,7 @@ jobs:
       packages: write
       id-token: write # cosign keyless signing
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: docker/setup-qemu-action@v4
       - uses: docker/setup-buildx-action@v4
       - uses: docker/login-action@v4

.github/workflows/typescript-publish.yml

@@ -42,7 +42,7 @@ jobs:
     permissions:
       id-token: write # OIDC for npm trusted publishing + provenance — no stored token
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v6
         with:
           node-version: "22"

.github/workflows/typescript.yml

@@ -22,7 +22,7 @@ jobs:
       run:
         working-directory: sdks/typescript
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node }}