chore(ci): bump actions/checkout from 4 to 7

.github/workflows/ci.yml

@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 2
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
@@ -41,7 +41,7 @@ jobs:
     timeout-minutes: 15
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install pnpm
         uses: pnpm/action-setup@v6
@@ -91,7 +91,7 @@ jobs:
     # ratchet (Session 262 PR #42).
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           # Need git history so `git describe --tags --abbrev=0` resolves
           # the latest tag in CI (default checkout depth is 1).
@@ -165,7 +165,7 @@ jobs:
           --health-retries 10
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install pnpm
         uses: pnpm/action-setup@v6
@@ -259,7 +259,7 @@ jobs:
           --health-retries 10
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install pnpm
         uses: pnpm/action-setup@v6

.github/workflows/codeql.yml

@@ -29,7 +29,7 @@ jobs:
         language: ["javascript-typescript"]
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4

.github/workflows/e2e.yml

@@ -53,7 +53,7 @@ jobs:
       # Optional integrations stay unset so the app runs in graceful-fallback mode.
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install pnpm
         uses: pnpm/action-setup@v6

.github/workflows/eval.yml

@@ -70,7 +70,7 @@ jobs:
     timeout-minutes: 15
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       # ADR-0067 carve-out: when EMERGENCY_STOP is engaged on the
       # Knowlex Vercel project, /api/kb/ingest short-circuits to 503

.github/workflows/pnpm-audit.yml

@@ -24,7 +24,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-node@v4
         with:

.github/workflows/python-audit.yml

@@ -24,7 +24,7 @@ jobs:
       run:
         working-directory: packages/data-analytics-demo
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-python@v5
         with:

.github/workflows/python-test.yml

@@ -22,7 +22,7 @@ jobs:
       run:
         working-directory: packages/data-analytics-demo
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-python@v5
         with:

.github/workflows/sbom.yml

@@ -17,7 +17,7 @@ jobs:
   sbom:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       # Don't pin a pnpm version here — package.json's `packageManager`
       # field is the single source of truth. pnpm/action-setup@v6 errors

.github/workflows/scorecard.yml

@@ -51,7 +51,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 

.github/workflows/smoke.yml

@@ -42,7 +42,7 @@ jobs:
     timeout-minutes: 5
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Wait for Vercel deploy to settle (push only)
         if: github.event_name == 'push'
@@ -173,7 +173,7 @@ jobs:
     timeout-minutes: 5
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Wait for Vercel deploy to settle (push only)
         if: github.event_name == 'push'