chore(ci): bump actions/checkout from 5 to 7

.github/workflows/beta.yml

@@ -25,7 +25,7 @@ jobs:
       state_schema: ${{ steps.version.outputs.state_schema }}
     steps:
       - name: Checkout selected commit
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -84,7 +84,7 @@ jobs:
             image_suffix: "-updater"
     steps:
       - name: Checkout beta tag
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           ref: ${{ needs.tag.outputs.version }}
 

.github/workflows/brand-cleanup.yml

@@ -32,7 +32,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 

.github/workflows/bundled-driver-pin.yml

@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Check the snapshot and comparison order
         run: bash scripts/test-bundled-driver-pin-order.sh

.github/workflows/changeset-check.yml

@@ -76,7 +76,7 @@ jobs:
           fi
 
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 

.github/workflows/debian-base-currency.yml

@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Compare the pinned suite against Debian stable
         id: compare

.github/workflows/optimizer-release.yml

@@ -32,7 +32,7 @@ jobs:
       alias: ${{ steps.version.outputs.alias }}
       image_exists: ${{ steps.version.outputs.image_exists }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - uses: actions/setup-python@v6
@@ -139,7 +139,7 @@ jobs:
     needs: validate
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: '3.12'
@@ -170,7 +170,7 @@ jobs:
     if: needs.validate.outputs.image_exists != 'true'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.sha }}
       - uses: docker/setup-qemu-action@v3
@@ -212,7 +212,7 @@ jobs:
       }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - env:

.github/workflows/release-assets.yml

@@ -107,7 +107,7 @@ jobs:
             archive: zip
     steps:
       - name: Checkout tag
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           # Check out the tag so -X main.Version matches what users install.
           ref: ${{ needs.meta.outputs.tag }}
@@ -238,7 +238,7 @@ jobs:
             description: Sidecar that executes docker compose pull + up for in-app updates
     steps:
       - name: Checkout tag
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           ref: ${{ needs.meta.outputs.tag }}
 

.github/workflows/release.yml

@@ -66,7 +66,7 @@ jobs:
       version:   ${{ steps.publish.outputs.version }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           # changesets/action needs full history so it can detect
           # which changesets have already been consumed by past

.github/workflows/repo-hygiene.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 

.github/workflows/rpi-image-build.yml

@@ -59,7 +59,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Validate shell syntax
         run: |
@@ -113,7 +113,7 @@ jobs:
           df -h /
 
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref || github.sha }}
 

.github/workflows/test.yml

@@ -28,7 +28,7 @@ jobs:
       base_sha: ${{ steps.paths.outputs.base_sha }}
       head_sha: ${{ steps.paths.outputs.head_sha }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - id: paths
@@ -114,7 +114,7 @@ jobs:
     if: needs.changes.outputs.core == 'true'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
           go-version: '1.26'
@@ -140,7 +140,7 @@ jobs:
     if: needs.changes.outputs.optimizer == 'true'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: '3.12'
@@ -168,7 +168,7 @@ jobs:
     if: needs.changes.outputs.web == 'true'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v7
         with:
           node-version: '22'
@@ -188,7 +188,7 @@ jobs:
     if: needs.changes.outputs.drivers == 'true'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
           go-version: '1.26'
@@ -238,7 +238,7 @@ jobs:
     if: needs.changes.outputs.drivers == 'true'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - uses: actions/setup-go@v7
@@ -288,7 +288,7 @@ jobs:
     env:
       DEVICE_SUPPORT_TOKEN: ${{ secrets.SOURCEFUL_CI_REPO_TOKEN }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: astral-sh/setup-uv@v7
         if: env.DEVICE_SUPPORT_TOKEN != ''
         with:
@@ -318,7 +318,7 @@ jobs:
 
       - name: Check out canonical Device Support package source
         if: env.DEVICE_SUPPORT_TOKEN != ''
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           repository: ${{ steps.baseline.outputs.repository }}
           ref: ${{ steps.baseline.outputs.commit }}
@@ -398,7 +398,7 @@ jobs:
     if: needs.changes.outputs.compose == 'true'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - run: make compose-migration-test container-boundary-test
 
   # contract/registry.yaml is one file that lives in this repository and in
@@ -414,7 +414,7 @@ jobs:
     name: the registry has not drifted from the app
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       # A change that lands in both repositories at once cannot be compared
       # against the other one's default branch: the counterpart is not there
@@ -439,7 +439,7 @@ jobs:
 
       # One file, not the app's whole history.
       - name: Check out the app
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           repository: srcfl/ftw-webapp
           ref: ${{ steps.pair.outputs.ref }}
@@ -485,7 +485,7 @@ jobs:
     if: needs.changes.outputs.core == 'true'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
           go-version: '1.26'