chore(deps): bump actions/checkout from 4 to 7

.github/workflows/docs-deploy.yml

@@ -22,7 +22,7 @@ jobs:
   build-and-deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-node@v4
         with:

.github/workflows/e2e-install.yml

@@ -64,15 +64,15 @@ jobs:
     steps:
       - name: Checkout PR head
         if: ${{ github.event_name == 'pull_request' }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           ref: ${{ github.event.pull_request.head.ref }}
           fetch-depth: 0
 
       - name: Checkout repository
         if: ${{ github.event_name != 'pull_request' }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           # We need the target branch reachable from the working tree so the
           # updater can `git fetch origin <branch>`. Fetch tags too since the

.github/workflows/e2e-tests.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: oven-sh/setup-bun@v2
         with:

.github/workflows/issue-triage.yml

@@ -29,7 +29,7 @@ jobs:
       - name: Checkout
         # SHA-pinned: this workflow runs on every opened issue with
         # issues:write and a paid API secret in scope.
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           # The script auths to GitHub via GH_TOKEN only — no need to persist
           # GITHUB_TOKEN into the runner's git config.

.github/workflows/pr-review.yml

@@ -37,7 +37,7 @@ jobs:
       HAS_APP: ${{ secrets.CLAWREVIEW_APP_ID }}
     steps:
       - name: Checkout (base repo only — never the PR head)
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 

.github/workflows/pr-tests-coverage.yml

@@ -18,7 +18,7 @@ jobs:
       functions: ${{ steps.coverage.outputs.functions }}
       lines: ${{ steps.coverage.outputs.lines }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: oven-sh/setup-bun@v2
         with: