From 1ab58385aef6abca332c79c4aab9bc33b69c4b28 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 22 Jun 2026 11:57:11 +0000
Subject: [PATCH] chore(deps)(deps): bump actions/checkout from 6 to 7

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/actionlint.yml               | 2 +-
 .github/workflows/admin-deploy.yml             | 2 +-
 .github/workflows/auto-recover-pr.yml          | 2 +-
 .github/workflows/changelog-check.yml          | 2 +-
 .github/workflows/codeql.yml                   | 4 ++--
 .github/workflows/gitleaks.yml                 | 2 +-
 .github/workflows/image-bake-on-change.yml     | 2 +-
 .github/workflows/image-bake.yml               | 4 ++--
 .github/workflows/license-check.yml            | 8 ++++----
 .github/workflows/openapi-schema-drift.yml     | 2 +-
 .github/workflows/panakoes-site-deploy.yml     | 2 +-
 .github/workflows/pytest.yml                   | 4 ++--
 .github/workflows/release.yml                  | 2 +-
 .github/workflows/scorecard.yml                | 2 +-
 .github/workflows/terraform-apply-on-merge.yml | 4 ++--
 .github/workflows/terraform-ci.yml             | 2 +-
 .github/workflows/terraform-plan-on-pr.yml     | 4 ++--
 .github/workflows/trivy.yml                    | 2 +-
 .github/workflows/vitest.yml                   | 4 ++--
 19 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
index 6e377377..d6c084e6 100644
--- a/.github/workflows/actionlint.yml
+++ b/.github/workflows/actionlint.yml
@@ -45,7 +45,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Run actionlint
         uses: rhysd/actionlint@v1.7.12
diff --git a/.github/workflows/admin-deploy.yml b/.github/workflows/admin-deploy.yml
index fd036496..a4bb215e 100644
--- a/.github/workflows/admin-deploy.yml
+++ b/.github/workflows/admin-deploy.yml
@@ -65,7 +65,7 @@ jobs:
       AWS_REGION: us-east-1
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Configure AWS credentials via OIDC
         uses: aws-actions/configure-aws-credentials@v6
diff --git a/.github/workflows/auto-recover-pr.yml b/.github/workflows/auto-recover-pr.yml
index 568098e4..900e534c 100644
--- a/.github/workflows/auto-recover-pr.yml
+++ b/.github/workflows/auto-recover-pr.yml
@@ -82,7 +82,7 @@ jobs:
 
       - name: Checkout (shallow)
         if: steps.pr.outputs.number != ''
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 
diff --git a/.github/workflows/changelog-check.yml b/.github/workflows/changelog-check.yml
index 75ffaf31..fdbd40f4 100644
--- a/.github/workflows/changelog-check.yml
+++ b/.github/workflows/changelog-check.yml
@@ -59,7 +59,7 @@ jobs:
 
       - name: Checkout
         if: github.event_name == 'pull_request'
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b3e32920..75ed92af 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -38,7 +38,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
@@ -74,7 +74,7 @@ jobs:
       security-events: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Scan IAM resource="*" outside allowlist
         continue-on-error: true
diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 9e48b8b3..5e648258 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/image-bake-on-change.yml b/.github/workflows/image-bake-on-change.yml
index 0e0a4cb4..686e6fde 100644
--- a/.github/workflows/image-bake-on-change.yml
+++ b/.github/workflows/image-bake-on-change.yml
@@ -53,7 +53,7 @@ jobs:
       any: ${{ steps.compute.outputs.any }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Run path filter per service
         id: filter
diff --git a/.github/workflows/image-bake.yml b/.github/workflows/image-bake.yml
index 32070422..1260f02f 100644
--- a/.github/workflows/image-bake.yml
+++ b/.github/workflows/image-bake.yml
@@ -64,7 +64,7 @@ jobs:
       tag: ${{ steps.resolve-tag.outputs.tag }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Resolve tag
         id: resolve-tag
@@ -97,7 +97,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           # Need full history so the bot can branch off main cleanly.
           fetch-depth: 0
diff --git a/.github/workflows/license-check.yml b/.github/workflows/license-check.yml
index 9630722d..877c4e15 100644
--- a/.github/workflows/license-check.yml
+++ b/.github/workflows/license-check.yml
@@ -52,7 +52,7 @@ jobs:
       services: ${{ steps.scope.outputs.python_services }}
       has-services: ${{ steps.scope.outputs.python_has_changes }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - id: scope
@@ -73,7 +73,7 @@ jobs:
       matrix:
         service: ${{ fromJson(needs.detect-python-services.outputs.services) }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install uv
         uses: astral-sh/setup-uv@v7
@@ -114,7 +114,7 @@ jobs:
       services: ${{ steps.scope.outputs.typescript_services }}
       has-services: ${{ steps.scope.outputs.typescript_has_changes }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - id: scope
@@ -132,7 +132,7 @@ jobs:
       matrix:
         service: ${{ fromJson(needs.detect-ts-services.outputs.services) }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/openapi-schema-drift.yml b/.github/workflows/openapi-schema-drift.yml
index 3c32b180..5b841c6e 100644
--- a/.github/workflows/openapi-schema-drift.yml
+++ b/.github/workflows/openapi-schema-drift.yml
@@ -31,7 +31,7 @@ jobs:
           - services/cost-api
           - services/admin-api
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install uv
         uses: astral-sh/setup-uv@v7
diff --git a/.github/workflows/panakoes-site-deploy.yml b/.github/workflows/panakoes-site-deploy.yml
index 1d9ed1c7..f8854106 100644
--- a/.github/workflows/panakoes-site-deploy.yml
+++ b/.github/workflows/panakoes-site-deploy.yml
@@ -49,7 +49,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Verify static directory exists
         run: |
diff --git a/.github/workflows/pytest.yml b/.github/workflows/pytest.yml
index 9f4cbd88..95a32503 100644
--- a/.github/workflows/pytest.yml
+++ b/.github/workflows/pytest.yml
@@ -24,7 +24,7 @@ jobs:
       has-services: ${{ steps.scope.outputs.python_has_changes }}
       docs-only: ${{ steps.scope.outputs.docs_only }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           # The detect-changed-services composite uses
           # `git diff BASE...HEAD`; that needs both sides reachable.
@@ -52,7 +52,7 @@ jobs:
       matrix:
         service: ${{ fromJson(needs.detect-services.outputs.services) }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install uv
         uses: astral-sh/setup-uv@v7
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index eec5c5f2..89ba6ea5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index d1b496b8..cfbae5da 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -29,7 +29,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/terraform-apply-on-merge.yml b/.github/workflows/terraform-apply-on-merge.yml
index 602e162d..52f95b02 100644
--- a/.github/workflows/terraform-apply-on-merge.yml
+++ b/.github/workflows/terraform-apply-on-merge.yml
@@ -44,7 +44,7 @@ jobs:
       has_changes: ${{ steps.changed.outputs.has_changes }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -93,7 +93,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Terraform
         uses: hashicorp/setup-terraform@v4
diff --git a/.github/workflows/terraform-ci.yml b/.github/workflows/terraform-ci.yml
index 29b0ff80..d0133b3a 100644
--- a/.github/workflows/terraform-ci.yml
+++ b/.github/workflows/terraform-ci.yml
@@ -41,7 +41,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Terraform
         uses: hashicorp/setup-terraform@v4
diff --git a/.github/workflows/terraform-plan-on-pr.yml b/.github/workflows/terraform-plan-on-pr.yml
index 1d67afef..c4c3eeab 100644
--- a/.github/workflows/terraform-plan-on-pr.yml
+++ b/.github/workflows/terraform-plan-on-pr.yml
@@ -48,7 +48,7 @@ jobs:
       has_changes: ${{ steps.changed.outputs.has_changes }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           # Full history so `origin/main...HEAD` resolves on PRs from
           # forks or long-lived branches.
@@ -93,7 +93,7 @@ jobs:
         module: ${{ fromJson(needs.detect-modules.outputs.modules) }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Terraform
         uses: hashicorp/setup-terraform@v4
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index bdac0553..bbc13531 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -34,7 +34,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Run Trivy filesystem scan (SARIF)
         uses: aquasecurity/trivy-action@v0.36.0
diff --git a/.github/workflows/vitest.yml b/.github/workflows/vitest.yml
index 4b31857b..4c8bfd20 100644
--- a/.github/workflows/vitest.yml
+++ b/.github/workflows/vitest.yml
@@ -24,7 +24,7 @@ jobs:
       has-services: ${{ steps.scope.outputs.typescript_has_changes }}
       docs-only: ${{ steps.scope.outputs.docs_only }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - id: scope
@@ -44,7 +44,7 @@ jobs:
       matrix:
         service: ${{ fromJson(needs.detect-services.outputs.services) }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Node.js
         uses: actions/setup-node@v6