chore(deps): bump actions/checkout from 6.0.3 to 7.0.1 (#235)

* chore(deps): bump actions/checkout from 6.0.3 to 7.0.1

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@df4cb1c...3d3c42e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* ci: align token-liveness.yml checkout pin with v7.0.1

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mitsuki Fukunaga <mtskf@users.noreply.github.com>
Co-authored-by: Mitsuki Fukunaga <mitsukifukunaga@gmail.com>

Author: dependabot[bot]

.github/workflows/ci.yml

@@ -27,7 +27,7 @@ jobs:
       # `gh api repos/<owner>/<repo>/commits/<tag> --jq '.sha'` — this handles both
       # lightweight and annotated tags (e.g. `pnpm/action-setup` uses annotated tags,
       # and `git/refs/tags/<tag>` would return its tag-object SHA, not the commit).
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
         with:
@@ -165,7 +165,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # SHA-pinned per the repo-wide policy documented in the `build` job above.
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
         with:

.github/workflows/publish.yml

@@ -39,7 +39,7 @@ jobs:
       # `gh api repos/<owner>/<repo>/commits/<tag> --jq '.sha'` — this handles both
       # lightweight and annotated tags (e.g. `pnpm/action-setup` uses annotated tags,
       # and `git/refs/tags/<tag>` would return its tag-object SHA, not the commit).
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       # Reachability gate — the FIRST thing after checkout so nothing else runs
       # for an off-main tag. Branch protection does NOT cover tag refs, so a `v*`

.github/workflows/token-liveness.yml

@@ -106,7 +106,7 @@ jobs:
       # `gh api repos/<owner>/<repo>/commits/<tag> --jq '.sha'` — this handles both
       # lightweight and annotated tags (e.g. `pnpm/action-setup` uses annotated tags,
       # and `git/refs/tags/<tag>` would return its tag-object SHA, not the commit).
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
         with: