Merge pull request #24 from lukasMega/dependabot/github_actions/actions/checkout-7

ci: bump actions/checkout from 5 to 7

Author: lukasMega

.github/workflows/auto-tag.yml

@@ -16,7 +16,7 @@ jobs:
   tag:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0 # need full tag history to check whether this version was already tagged
           # GITHUB_TOKEN-authored pushes don't trigger other workflows (GitHub's

.github/workflows/ci.yml

@@ -23,7 +23,7 @@ jobs:
     name: TS lint • types • test • knip
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       # ci-checks builds deckbridge-native for FFI tests, so Rust + system deps needed.
       - name: Install Rust
@@ -71,7 +71,7 @@ jobs:
     name: Rust fmt + clippy + test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Install Rust (rust-toolchain.toml pins 1.95 + clippy/rustfmt)
         uses: dtolnay/rust-toolchain@stable
@@ -104,7 +104,7 @@ jobs:
     name: Windows bundle + cargo check
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Install Rust
         uses: dtolnay/rust-toolchain@stable
@@ -146,7 +146,7 @@ jobs:
     name: cargo-deny
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: EmbarkStudios/cargo-deny-action@v2
         with:
           manifest-path: rust/Cargo.toml
@@ -157,15 +157,15 @@ jobs:
     name: actionlint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: raven-actions/actionlint@v2
 
   # ── Secret scan across full history (free for personal/public repos) ──
   gitleaks:
     name: gitleaks
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - uses: gitleaks/gitleaks-action@v3
@@ -177,7 +177,7 @@ jobs:
     name: typos
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: crate-ci/typos@master
         with:
           config: .github/typos.toml

.github/workflows/deploy-docs.yml

@@ -33,7 +33,7 @@ jobs:
       run:
         working-directory: docs-site
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-node@v7
         with:

.github/workflows/release.yml

@@ -45,7 +45,7 @@ jobs:
       TJS_FROM_SOURCE: '1'
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Install Rust
         uses: dtolnay/rust-toolchain@stable
@@ -139,7 +139,7 @@ jobs:
     # scripts/tjs-download.mjs's win32 branch. Working beats slim for v1.
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       # Stamps ts/package.json's version (the single source of truth) into
       # src-tauri/Cargo.toml + tauri.conf.json so the NSIS installer version
@@ -280,7 +280,7 @@ jobs:
       TJS_FROM_SOURCE: '1'
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       # Stamps ts/package.json's version (the single source of truth) into
       # src-tauri/Cargo.toml + tauri.conf.json so the dmg version is correct
@@ -369,7 +369,7 @@ jobs:
     steps:
       # Guards against a stray/manual tag diverging from ts/package.json — the
       # normal path is auto-tag.yml, which only ever tags the current version.
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         if: github.event_name == 'push'
 
       - name: Verify tag matches ts/package.json version