ci: bump remaining GitHub Action pins from Dependabot

[sumitake]

Supersedes open Dependabot PRs:

• build(deps): bump actions/checkout from 4.3.1 to 7.0.1 #7 actions/checkout 4.3.1 → 7.0.1 (3d3c42e5…)
• build(deps): bump actions/setup-python from 5.6.0 to 7.0.0 #6 actions/setup-python 5.6.0 → 7.0.0 (5fda3b95…)
• build(deps): bump actions/setup-node from 4.4.0 to 7.0.0 #5 actions/setup-node 4.4.0 → 7.0.0 (82076278…)
• build(deps): bump gitleaks/gitleaks-action from 2.3.9 to 3.0.0 #3 gitleaks/gitleaks-action 2.3.9 → 3.0.0 (e0c47f4f…)
• build(deps): bump github/codeql-action/init from 3.37.0 to 4.37.8 #2 github/codeql-action init+analyze 3.37.0 → 4.37.8 (db488dde…)

#2 could not merge on its own: Dependabot updated only init, leaving analyze on v3 (Loaded a configuration file for version '4.x', but running version '3.x').

Each SHA was verified against the corresponding upstream tag object.

[chatgpt-codex-connector]

You have reached your Codex usage limits for security reviews. Please try again later.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: bfb8adde-cc3b-4ec6-8578-b3e3540ebd0b

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}