From ae445b68d490dd0cdf98755d97f8789dce325a26 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 19 Jun 2026 08:33:54 +0000
Subject: [PATCH] chore(deps)(deps): bump actions/checkout from 4 to 7

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v4...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/checklist-score.yml       | 4 ++--
 .github/workflows/codeql.yml                | 2 +-
 .github/workflows/create-initial-issues.yml | 2 +-
 .github/workflows/danger.yml                | 2 +-
 .github/workflows/gitleaks-scanning.yml     | 2 +-
 .github/workflows/release-goreleaser.yml    | 2 +-
 .github/workflows/scorecard.yml             | 2 +-
 .github/workflows/template-sync.yml         | 2 +-
 .github/workflows/version-release.yml       | 2 +-
 9 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/checklist-score.yml b/.github/workflows/checklist-score.yml
index 867b1d6..a4c1223 100644
--- a/.github/workflows/checklist-score.yml
+++ b/.github/workflows/checklist-score.yml
@@ -17,7 +17,7 @@ jobs:
       contents: write
     if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
@@ -166,7 +166,7 @@ jobs:
       github.repository == 'AOSSIE-Org/Template-Repo' &&
       (github.event_name == 'schedule' || github.event_name == 'workflow_dispatch')
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Fetch upstream OpenSSF criteria
         run: |
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b474a61..d3547bf 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -71,7 +71,7 @@ jobs:
     steps:
 
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
 
 # --------------------------------------------------
diff --git a/.github/workflows/create-initial-issues.yml b/.github/workflows/create-initial-issues.yml
index 4ca398c..a09e306 100644
--- a/.github/workflows/create-initial-issues.yml
+++ b/.github/workflows/create-initial-issues.yml
@@ -16,7 +16,7 @@ jobs:
     
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Check if issues file exists
         id: check_file
diff --git a/.github/workflows/danger.yml b/.github/workflows/danger.yml
index 145f33b..293a697 100644
--- a/.github/workflows/danger.yml
+++ b/.github/workflows/danger.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout base branch
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/gitleaks-scanning.yml b/.github/workflows/gitleaks-scanning.yml
index f4a1cdc..b6c86cb 100644
--- a/.github/workflows/gitleaks-scanning.yml
+++ b/.github/workflows/gitleaks-scanning.yml
@@ -10,7 +10,7 @@ jobs:
     name: gitleaks
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - uses: gitleaks/gitleaks-action@v2
diff --git a/.github/workflows/release-goreleaser.yml b/.github/workflows/release-goreleaser.yml
index 91b6989..1ccf6ca 100644
--- a/.github/workflows/release-goreleaser.yml
+++ b/.github/workflows/release-goreleaser.yml
@@ -14,7 +14,7 @@ jobs:
       packages: write          # [DOCKER] Required for ghcr.io push
       id-token: write          # [SIGNING] Required for cosign keyless signing
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
         with:
           fetch-depth: 0   # Full history needed for changelog
           persist-credentials: false  # Avoid exposing token to submodules
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index b5c0065..5de34f6 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -63,7 +63,7 @@ jobs:
             api.scorecard.dev:443
 
       - name: "Checkout code"
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/template-sync.yml b/.github/workflows/template-sync.yml
index 960624e..19784b8 100644
--- a/.github/workflows/template-sync.yml
+++ b/.github/workflows/template-sync.yml
@@ -17,7 +17,7 @@ jobs:
     steps:
       # Check out the repository
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         # https://github.com/actions/checkout#usage
         # uncomment if you use submodules within the repository
         # with:
diff --git a/.github/workflows/version-release.yml b/.github/workflows/version-release.yml
index 82e2261..c58a429 100644
--- a/.github/workflows/version-release.yml
+++ b/.github/workflows/version-release.yml
@@ -17,7 +17,7 @@ jobs:
     
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0