chore(actions)(deps): bump actions/checkout from 6 to 7

.github/workflows/docs.yml

@@ -45,7 +45,7 @@ jobs:
     name: TypeDoc (chrome-crx)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
@@ -71,7 +71,7 @@ jobs:
     name: go doc snapshots (chrome-native-host)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup Go
         uses: actions/setup-go@v6
@@ -113,7 +113,7 @@ jobs:
       name: github-pages
       url: ${{ steps.deploy.outputs.page_url }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Download TypeDoc artifact
         uses: actions/download-artifact@v8

.github/workflows/droid.yml

@@ -55,7 +55,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 

.github/workflows/duckpr.yml

@@ -43,15 +43,15 @@ jobs:
       matrix:
         reviewer: [claude, opencode, ocr]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           ref: ${{ inputs.head_sha }}
           persist-credentials: false
 
       - name: Checkout private Pullfrog source
         if: matrix.reviewer != 'ocr'
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: superduck-ai/pullfrog-private
           ref: main

.github/workflows/labels-sync.yml

@@ -39,7 +39,7 @@ jobs:
     name: Apply label catalog
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Sync labels
         uses: EndBug/label-sync@v2
         with:

.github/workflows/lint-go.yml

@@ -19,7 +19,7 @@ jobs:
       run:
         working-directory: chrome-native-host
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-go@v6
         with:

.github/workflows/lint-ts.yml

@@ -18,7 +18,7 @@ jobs:
     name: format, lint, typecheck
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: oven-sh/setup-bun@v2
         with:

.github/workflows/min-release-age.yml

@@ -27,7 +27,7 @@ jobs:
     name: Min release age (>= ${{ inputs.days || '3' }}d)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           # Need history so the script can diff against the PR base.
           fetch-depth: 0

.github/workflows/pullfrog.yml

@@ -22,7 +22,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
       - name: Run agent

.github/workflows/release.yml

@@ -32,7 +32,7 @@ jobs:
       run:
         working-directory: chrome-native-host
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:

.github/workflows/secret-scan.yml

@@ -19,7 +19,7 @@ jobs:
     name: Scan for embedded PostHog keys
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 

.github/workflows/sentry-release.yml

@@ -46,7 +46,7 @@ jobs:
       SENTRY_PROJECT: ${{ vars.SENTRY_PROJECT }}
       SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 

.github/workflows/test-coverage.yml

@@ -30,7 +30,7 @@ jobs:
       run:
         working-directory: chrome-crx
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: oven-sh/setup-bun@v2
         with:
           bun-version: latest
@@ -73,7 +73,7 @@ jobs:
       run:
         working-directory: chrome-native-host
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with:
           go-version-file: chrome-native-host/go.mod

.github/workflows/validate-agents-md.yml

@@ -23,7 +23,7 @@ jobs:
     name: Validate AGENTS.md commands & links
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v6