Merge commit 'ae445b68d490dd0cdf98755d97f8789dce325a26'

Author: Zahnentferner

.github/workflows/checklist-score.yml

@@ -17,7 +17,7 @@ jobs:
       contents: write
     if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
@@ -166,7 +166,7 @@ jobs:
       github.repository == 'AOSSIE-Org/Template-Repo' &&
       (github.event_name == 'schedule' || github.event_name == 'workflow_dispatch')
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Fetch upstream OpenSSF criteria
         run: |

.github/workflows/codeql.yml

@@ -71,7 +71,7 @@ jobs:
     steps:
 
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
 
 # --------------------------------------------------

.github/workflows/create-initial-issues.yml

@@ -16,7 +16,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Check if issues file exists
         id: check_file

.github/workflows/danger.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout base branch
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v6

.github/workflows/gitleaks-scanning.yml

@@ -10,7 +10,7 @@ jobs:
     name: gitleaks
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - uses: gitleaks/gitleaks-action@v3

.github/workflows/release-goreleaser.yml

@@ -14,7 +14,7 @@ jobs:
       packages: write          # [DOCKER] Required for ghcr.io push
       id-token: write          # [SIGNING] Required for cosign keyless signing
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
         with:
           fetch-depth: 0   # Full history needed for changelog
           persist-credentials: false  # Avoid exposing token to submodules

.github/workflows/scorecard.yml

@@ -63,7 +63,7 @@ jobs:
             api.scorecard.dev:443
 
       - name: "Checkout code"
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 

.github/workflows/template-sync.yml

@@ -17,7 +17,7 @@ jobs:
     steps:
       # Check out the repository
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         # https://github.com/actions/checkout#usage
         # uncomment if you use submodules within the repository
         # with:

.github/workflows/version-release.yml

@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0