chore(deps): Bump the actions group with 3 updates

.github/workflows/auth-contract-compose-pw.yml

@@ -69,7 +69,7 @@ jobs:
           path: common
 
       - name: Set up Node (for Playwright)
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '20'
           cache: 'npm'

.github/workflows/ci.yml

@@ -122,7 +122,7 @@ jobs:
       - name: Place ../common for Go replace directive
         run: mv _common_ci ../common
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version: '1.25'
 
@@ -227,7 +227,7 @@ jobs:
           path: _common_ci
       - run: mv _common_ci ../common
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version: '1.25'
 

.github/workflows/codeql.yml

@@ -33,7 +33,7 @@ jobs:
         with:
           repository: InstaNode-dev/proto
           path: proto
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version-file: api/go.mod
       - uses: github/codeql-action/init@v4

.github/workflows/coverage.yml

@@ -114,7 +114,7 @@ jobs:
           token: ${{ secrets.REPO_ACCESS_TOKEN || secrets.GITHUB_TOKEN }}
           path: common
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version-file: api/go.mod
 
@@ -159,7 +159,7 @@ jobs:
       # coverage" step above is continue-on-error, so it still produces
       # coverage.out even if a flaky test trips — the gate reads that file.
       # ------------------------------------------------------------------
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         if: github.event_name == 'pull_request'
         with:
           python-version: '3.12'

.github/workflows/deploy.yml

@@ -132,7 +132,7 @@ jobs:
           echo "Built ${VERSION} (${BUILD_TIME})"
 
       - name: Set up Go (for unit tests + go.mod replace directives)
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: '1.25'
           # This workflow checks the api repo out into ./api (path: api above),

.github/workflows/golangci-lint.yml

@@ -34,7 +34,7 @@ jobs:
           repository: InstaNode-dev/proto
           path: proto
         continue-on-error: true
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version-file: api/go.mod
       - uses: golangci/golangci-lint-action@v9

.github/workflows/govulncheck.yml

@@ -30,7 +30,7 @@ jobs:
         with:
           repository: InstaNode-dev/proto
           path: proto
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version-file: api/go.mod
           check-latest: true

.github/workflows/integration-backup.yml

@@ -62,7 +62,7 @@ jobs:
       - name: Install kubectl
         uses: azure/setup-kubectl@v5
       - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version-file: api/go.mod
       - name: Materialise drill kubeconfig

.github/workflows/openapi-snapshot.yml

@@ -69,7 +69,7 @@ jobs:
       - name: Place ../common for Go replace directive
         run: mv _common_ci ../common
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version: '1.25'