From bb3bdfad0d6228d9c538db29937154f3093da1b2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 28 Jun 2026 14:54:37 +0000
Subject: [PATCH] ci: bump actions/checkout from 6.0.3 to 7.0.0

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v6.0.3...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ai-review.yml                  | 2 +-
 .github/workflows/apps-web-check.yml             | 2 +-
 .github/workflows/broken-links.yml               | 2 +-
 .github/workflows/build-check.yml                | 4 ++--
 .github/workflows/changeset-check.yml            | 4 ++--
 .github/workflows/check-dist-links.yml           | 2 +-
 .github/workflows/check-image-alt-text.yml       | 2 +-
 .github/workflows/check-migration-numbers.yml    | 2 +-
 .github/workflows/check-schema-links.yml         | 2 +-
 .github/workflows/check-seo-metadata.yml         | 2 +-
 .github/workflows/check-testable-snippets.yml    | 2 +-
 .github/workflows/codeql.yml                     | 2 +-
 .github/workflows/deploy.yml                     | 4 ++--
 .github/workflows/forward-merge-3.0.yml          | 2 +-
 .github/workflows/ipr-agreement.yml              | 2 +-
 .github/workflows/ipr-check-callable.yml         | 2 +-
 .github/workflows/migration-smoke-test.yml       | 2 +-
 .github/workflows/release-docs.yml               | 2 +-
 .github/workflows/release.yml                    | 2 +-
 .github/workflows/semgrep.yml                    | 2 +-
 .github/workflows/training-agent-storyboards.yml | 2 +-
 .github/workflows/validate-agent-context.yml     | 2 +-
 .github/workflows/validate-agent-roles-sync.yml  | 2 +-
 23 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/.github/workflows/ai-review.yml b/.github/workflows/ai-review.yml
index e120fce81d..58f284d86d 100644
--- a/.github/workflows/ai-review.yml
+++ b/.github/workflows/ai-review.yml
@@ -62,7 +62,7 @@ jobs:
       # review App token and Anthropic secret. Never check out the PR head or
       # execute PR-controlled code in this job. Keep the workspace pinned to the
       # trusted base SHA and inspect the PR through GitHub APIs / gh pr diff.
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           ref: ${{ github.event.pull_request.base.sha }}
           fetch-depth: 0
diff --git a/.github/workflows/apps-web-check.yml b/.github/workflows/apps-web-check.yml
index bf2b8dd3cb..835eff1a0a 100644
--- a/.github/workflows/apps-web-check.yml
+++ b/.github/workflows/apps-web-check.yml
@@ -25,7 +25,7 @@ jobs:
       run:
         working-directory: apps/web
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/broken-links.yml b/.github/workflows/broken-links.yml
index 62b2f0fd1c..b1690b4bf9 100644
--- a/.github/workflows/broken-links.yml
+++ b/.github/workflows/broken-links.yml
@@ -40,7 +40,7 @@ jobs:
 
     steps:
     - name: Checkout code
-      uses: actions/checkout@v6.0.3
+      uses: actions/checkout@v7.0.0
       with:
         # Ensure we get latest changes including synced docs
         ref: ${{ github.event.workflow_run.head_branch || github.ref }}
diff --git a/.github/workflows/build-check.yml b/.github/workflows/build-check.yml
index d4326cb6c1..d673d0dbaa 100644
--- a/.github/workflows/build-check.yml
+++ b/.github/workflows/build-check.yml
@@ -19,7 +19,7 @@ jobs:
     # headroom without masking real regressions.
     timeout-minutes: 20
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0
 
@@ -147,7 +147,7 @@ jobs:
     env:
       DATABASE_URL: postgresql://ci_runner:ci_runner_throwaway_no_secret_value@127.0.0.1:5432/adcp_test
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/changeset-check.yml b/.github/workflows/changeset-check.yml
index fa3704aabc..494be61d89 100644
--- a/.github/workflows/changeset-check.yml
+++ b/.github/workflows/changeset-check.yml
@@ -11,7 +11,7 @@ jobs:
     # Keep the release-machinery exceptions aligned with the changeset check below.
     if: ${{ !startsWith(github.head_ref, 'changeset-release/') && !startsWith(github.head_ref, 'forward-merge/') && !startsWith(github.head_ref, 'auto/docs-v') }}
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
@@ -40,7 +40,7 @@ jobs:
     #   already-published version and do not represent a new package release.
     if: ${{ !startsWith(github.head_ref, 'changeset-release/') && !startsWith(github.head_ref, 'forward-merge/') && !startsWith(github.head_ref, 'auto/docs-v') }}
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/check-dist-links.yml b/.github/workflows/check-dist-links.yml
index 1cee816fcb..d1b70c4b68 100644
--- a/.github/workflows/check-dist-links.yml
+++ b/.github/workflows/check-dist-links.yml
@@ -11,7 +11,7 @@ jobs:
   check-dist-links:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
 
       - name: Check for unversioned links in dist docs
         run: |
diff --git a/.github/workflows/check-image-alt-text.yml b/.github/workflows/check-image-alt-text.yml
index 8e758a1be7..100a7b0f5e 100644
--- a/.github/workflows/check-image-alt-text.yml
+++ b/.github/workflows/check-image-alt-text.yml
@@ -14,7 +14,7 @@ jobs:
     permissions:
       pull-requests: write
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0
diff --git a/.github/workflows/check-migration-numbers.yml b/.github/workflows/check-migration-numbers.yml
index d2007369ed..b265256ce7 100644
--- a/.github/workflows/check-migration-numbers.yml
+++ b/.github/workflows/check-migration-numbers.yml
@@ -31,7 +31,7 @@ jobs:
     name: No duplicate migration numbers
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/check-schema-links.yml b/.github/workflows/check-schema-links.yml
index 82e295b6ce..a283424d38 100644
--- a/.github/workflows/check-schema-links.yml
+++ b/.github/workflows/check-schema-links.yml
@@ -13,7 +13,7 @@ jobs:
     permissions:
       pull-requests: write
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
diff --git a/.github/workflows/check-seo-metadata.yml b/.github/workflows/check-seo-metadata.yml
index f55057e4b4..16dc7b8be5 100644
--- a/.github/workflows/check-seo-metadata.yml
+++ b/.github/workflows/check-seo-metadata.yml
@@ -15,7 +15,7 @@ jobs:
     permissions:
       pull-requests: write
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
diff --git a/.github/workflows/check-testable-snippets.yml b/.github/workflows/check-testable-snippets.yml
index 750772fc32..40e6ef1eab 100644
--- a/.github/workflows/check-testable-snippets.yml
+++ b/.github/workflows/check-testable-snippets.yml
@@ -15,7 +15,7 @@ jobs:
   check-snippets:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0  # Need full history for diff
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 4949b08744..0c01433202 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -17,7 +17,7 @@ jobs:
       actions: read
       contents: read
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
       - uses: github/codeql-action/init@v4
         with:
           languages: javascript-typescript
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 94276f3029..ac44ab467f 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -18,7 +18,7 @@ jobs:
     name: Preflight
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
       - name: No duplicate migration numbers
         run: |
           dupes=$(ls server/src/db/migrations/*.sql \
@@ -44,7 +44,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
 
       - name: Setup Fly CLI
         uses: superfly/flyctl-actions/setup-flyctl@1.6
diff --git a/.github/workflows/forward-merge-3.0.yml b/.github/workflows/forward-merge-3.0.yml
index e61ec93ded..60f8336e58 100644
--- a/.github/workflows/forward-merge-3.0.yml
+++ b/.github/workflows/forward-merge-3.0.yml
@@ -46,7 +46,7 @@ jobs:
           repositories: adcp
 
       - name: Checkout main with full history
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0
           ref: main
diff --git a/.github/workflows/ipr-agreement.yml b/.github/workflows/ipr-agreement.yml
index 34a383fb1d..66c7a2c5c1 100644
--- a/.github/workflows/ipr-agreement.yml
+++ b/.github/workflows/ipr-agreement.yml
@@ -48,7 +48,7 @@ jobs:
           repositories: adcp
 
       - name: Checkout default branch
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
         with:
           ref: main
           fetch-depth: 1
diff --git a/.github/workflows/ipr-check-callable.yml b/.github/workflows/ipr-check-callable.yml
index 24471b503a..fe860914ee 100644
--- a/.github/workflows/ipr-check-callable.yml
+++ b/.github/workflows/ipr-check-callable.yml
@@ -73,7 +73,7 @@ jobs:
           repositories: adcp
 
       - name: Checkout central IPR ledger
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
         with:
           repository: adcontextprotocol/adcp
           ref: main
diff --git a/.github/workflows/migration-smoke-test.yml b/.github/workflows/migration-smoke-test.yml
index 8520cf2e71..027c87b28c 100644
--- a/.github/workflows/migration-smoke-test.yml
+++ b/.github/workflows/migration-smoke-test.yml
@@ -42,7 +42,7 @@ jobs:
           --health-retries 5
 
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/release-docs.yml b/.github/workflows/release-docs.yml
index f6b57b68b6..d6d85552e4 100644
--- a/.github/workflows/release-docs.yml
+++ b/.github/workflows/release-docs.yml
@@ -58,7 +58,7 @@ jobs:
           repositories: adcp
 
       - name: Checkout main branch
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
         with:
           ref: main
           fetch-depth: 0
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ceb975f51b..65a3867b70 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -40,7 +40,7 @@ jobs:
           repositories: adcp
 
       - name: Checkout Repo
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0
           token: ${{ steps.app-token.outputs.token }}
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index 663e6f4ec3..c5a9ce1843 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -14,7 +14,7 @@ jobs:
     name: Scan
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
 
       - uses: actions/setup-python@v6
         with:
diff --git a/.github/workflows/training-agent-storyboards.yml b/.github/workflows/training-agent-storyboards.yml
index 4a66323338..05d2eab332 100644
--- a/.github/workflows/training-agent-storyboards.yml
+++ b/.github/workflows/training-agent-storyboards.yml
@@ -125,7 +125,7 @@ jobs:
             min_clean_storyboards: 65
             min_passing_steps: 80
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/validate-agent-context.yml b/.github/workflows/validate-agent-context.yml
index df3b60834f..fef61cf4e2 100644
--- a/.github/workflows/validate-agent-context.yml
+++ b/.github/workflows/validate-agent-context.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 2
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
       - uses: actions/setup-node@v6
         with:
           node-version: '22'
diff --git a/.github/workflows/validate-agent-roles-sync.yml b/.github/workflows/validate-agent-roles-sync.yml
index a74e0599e7..a4c5420dfd 100644
--- a/.github/workflows/validate-agent-roles-sync.yml
+++ b/.github/workflows/validate-agent-roles-sync.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 2
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.0
       - uses: actions/setup-node@v6
         with:
           node-version: '22'