From 2cef5952a87d85b49c9988bea672b4f471c8754f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 2 Sep 2026 21:14:11 +0000
Subject: [PATCH] ci(actions): bump actions/checkout from 4 to 7

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/cdn-deploy.yml           |  8 +++----
 .github/workflows/changelog.yml            |  4 ++--
 .github/workflows/chaos.yml                |  2 +-
 .github/workflows/ci.yml                   | 26 +++++++++++-----------
 .github/workflows/contract-build.yml       | 12 +++++-----
 .github/workflows/coverage.yml             |  2 +-
 .github/workflows/db-migration.yml         | 10 ++++-----
 .github/workflows/disaster-recovery.yml    |  2 +-
 .github/workflows/e2e-detox.yml            |  4 ++--
 .github/workflows/fuzz-test.yml            |  2 +-
 .github/workflows/i18n.yml                 |  4 ++--
 .github/workflows/integration-tests.yml    |  2 +-
 .github/workflows/invariant-tests.yml      |  4 ++--
 .github/workflows/lighthouse.yml           |  4 ++--
 .github/workflows/notification-service.yml |  2 +-
 .github/workflows/performance-ci.yml       |  4 ++--
 .github/workflows/release.yml              |  6 ++---
 .github/workflows/sdk-generate.yml         |  4 ++--
 .github/workflows/sdk-publish.yml          |  2 +-
 .github/workflows/security-scan.yml        | 10 ++++-----
 .github/workflows/test-actions.yml         |  2 +-
 21 files changed, 58 insertions(+), 58 deletions(-)

diff --git a/.github/workflows/cdn-deploy.yml b/.github/workflows/cdn-deploy.yml
index 45419e10..7d27671b 100644
--- a/.github/workflows/cdn-deploy.yml
+++ b/.github/workflows/cdn-deploy.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Check VCL syntax (basic)
         run: |
@@ -31,7 +31,7 @@ jobs:
     environment: production
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Deploy VCL snippet to Fastly
         env:
@@ -53,7 +53,7 @@ jobs:
     environment: production
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Verify Cloudflare cache tag support
         env:
@@ -73,7 +73,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
index 9cad1cef..2195efb6 100644
--- a/.github/workflows/changelog.yml
+++ b/.github/workflows/changelog.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -51,7 +51,7 @@ jobs:
     if: github.ref == 'refs/heads/main' && github.event_name == 'push'
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/chaos.yml b/.github/workflows/chaos.yml
index dd3ad48a..8c298d78 100644
--- a/.github/workflows/chaos.yml
+++ b/.github/workflows/chaos.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d61ec4be..09a0facf 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,7 @@ jobs:
     if: github.event_name == 'pull_request'
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -49,7 +49,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -79,7 +79,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -98,7 +98,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -137,7 +137,7 @@ jobs:
       SHARD_COUNT: 3
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -172,7 +172,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -213,7 +213,7 @@ jobs:
     if: github.event_name == 'pull_request' || github.ref == 'refs/heads/main'
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -237,7 +237,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@master
@@ -253,7 +253,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@master
@@ -282,7 +282,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@master
@@ -310,7 +310,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@master
@@ -345,7 +345,7 @@ jobs:
         scenario: [subscription, billing, contract]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Prepare reports directory
         run: mkdir -p load-tests/reports
@@ -385,7 +385,7 @@ jobs:
       EXPO_NO_TELEMETRY: 1
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
diff --git a/.github/workflows/contract-build.yml b/.github/workflows/contract-build.yml
index 633ddba6..c334b27d 100644
--- a/.github/workflows/contract-build.yml
+++ b/.github/workflows/contract-build.yml
@@ -26,7 +26,7 @@ jobs:
     name: Build Core Contracts
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Build core contracts (no optional features)
         uses: ./.github/actions/build-contracts
@@ -41,7 +41,7 @@ jobs:
     name: Build Subscription (All Features)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Build subscription with all features
         uses: ./.github/actions/build-contracts
@@ -69,7 +69,7 @@ jobs:
           - 'full'      # all features combined
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install Rust stable
         uses: actions-rust-lang/setup-rust-toolchain@v1
@@ -109,7 +109,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event_name == 'pull_request'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install Rust stable
         uses: actions-rust-lang/setup-rust-toolchain@v1
@@ -192,7 +192,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.ref == 'refs/heads/main'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install Rust stable
         uses: actions-rust-lang/setup-rust-toolchain@v1
@@ -226,7 +226,7 @@ jobs:
     name: Module Dependency Analysis
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install Rust stable
         uses: actions-rust-lang/setup-rust-toolchain@v1
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 74e839c4..2b2f0bf1 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
diff --git a/.github/workflows/db-migration.yml b/.github/workflows/db-migration.yml
index 72c87b47..565b930a 100644
--- a/.github/workflows/db-migration.yml
+++ b/.github/workflows/db-migration.yml
@@ -12,7 +12,7 @@ jobs:
     name: Migration Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/setup-node
 
       - name: Lint migrations
@@ -22,7 +22,7 @@ jobs:
     name: Migration Dry-Run
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/setup-node
 
       - name: Dry-run migrations (no DB changes)
@@ -52,7 +52,7 @@ jobs:
     env:
       DATABASE_URL: postgresql://subtrackr:testpassword@localhost:5432/subtrackr_test
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/setup-node
 
       - name: Apply migrations (up)
@@ -71,7 +71,7 @@ jobs:
     name: Schema Drift Detection
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/setup-node
 
       - name: Detect schema drift
@@ -81,7 +81,7 @@ jobs:
     name: Expand-Migrate-Contract Validation
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/setup-node
 
       - name: Validate EMC state file exists (if migrations present)
diff --git a/.github/workflows/disaster-recovery.yml b/.github/workflows/disaster-recovery.yml
index 97a1da37..9f2989cc 100644
--- a/.github/workflows/disaster-recovery.yml
+++ b/.github/workflows/disaster-recovery.yml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/e2e-detox.yml b/.github/workflows/e2e-detox.yml
index 6fa32008..49ec31ca 100644
--- a/.github/workflows/e2e-detox.yml
+++ b/.github/workflows/e2e-detox.yml
@@ -11,7 +11,7 @@ jobs:
     name: Detox iOS
     runs-on: macos-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v4
         with:
           node-version: '20'
@@ -68,7 +68,7 @@ jobs:
     name: Detox Android
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v4
         with:
           node-version: '20'
diff --git a/.github/workflows/fuzz-test.yml b/.github/workflows/fuzz-test.yml
index a3cf6ca1..ce4a7a92 100644
--- a/.github/workflows/fuzz-test.yml
+++ b/.github/workflows/fuzz-test.yml
@@ -49,7 +49,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Install Rust
         uses: dtolnay/rust-toolchain@nightly
diff --git a/.github/workflows/i18n.yml b/.github/workflows/i18n.yml
index fee9070e..941b12ee 100644
--- a/.github/workflows/i18n.yml
+++ b/.github/workflows/i18n.yml
@@ -30,7 +30,7 @@ jobs:
     name: Detect missing / unused translation keys
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-node@v4
         with:
@@ -48,7 +48,7 @@ jobs:
     name: Lint locale files (placeholders, plurals, stubs)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-node@v4
         with:
diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
index 399c18fe..80e3979e 100644
--- a/.github/workflows/integration-tests.yml
+++ b/.github/workflows/integration-tests.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v2
diff --git a/.github/workflows/invariant-tests.yml b/.github/workflows/invariant-tests.yml
index 732ed5b9..948ed541 100644
--- a/.github/workflows/invariant-tests.yml
+++ b/.github/workflows/invariant-tests.yml
@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@master
@@ -74,7 +74,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@master
diff --git a/.github/workflows/lighthouse.yml b/.github/workflows/lighthouse.yml
index c1bd3d51..df473406 100644
--- a/.github/workflows/lighthouse.yml
+++ b/.github/workflows/lighthouse.yml
@@ -10,7 +10,7 @@ jobs:
     name: Lighthouse Audit (developer portal)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/setup-node
 
       # Install Lighthouse CI CLI
@@ -76,7 +76,7 @@ jobs:
     name: Lighthouse Audit (mobile WebView)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/setup-node
 
       - name: Install @lhci/cli
diff --git a/.github/workflows/notification-service.yml b/.github/workflows/notification-service.yml
index 94f79e53..e7269a68 100644
--- a/.github/workflows/notification-service.yml
+++ b/.github/workflows/notification-service.yml
@@ -10,7 +10,7 @@ jobs:
         working-directory: services/notification
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
diff --git a/.github/workflows/performance-ci.yml b/.github/workflows/performance-ci.yml
index 376ef3f1..4ee3e8f8 100644
--- a/.github/workflows/performance-ci.yml
+++ b/.github/workflows/performance-ci.yml
@@ -15,7 +15,7 @@ jobs:
     name: Frontend Performance Budget
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/setup-node
 
       - name: Run performance budget check
@@ -38,7 +38,7 @@ jobs:
     name: Gas Benchmarks (Soroban)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install Rust stable toolchain
         uses: actions-rust-lang/setup-rust-toolchain@v1
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7d2206ba..de9fcfa7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -45,7 +45,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -70,7 +70,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
diff --git a/.github/workflows/sdk-generate.yml b/.github/workflows/sdk-generate.yml
index 203c6a02..49fbae54 100644
--- a/.github/workflows/sdk-generate.yml
+++ b/.github/workflows/sdk-generate.yml
@@ -6,7 +6,7 @@ jobs:
   validate-spec:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Validate OpenAPI spec
         uses: mbowman100/swagger-validator-action@v1
         with:
@@ -24,7 +24,7 @@ jobs:
       matrix:
         language: [javascript, python, go]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v4
         with:
           node-version: '20'
diff --git a/.github/workflows/sdk-publish.yml b/.github/workflows/sdk-publish.yml
index 9b8698b4..104ee285 100644
--- a/.github/workflows/sdk-publish.yml
+++ b/.github/workflows/sdk-publish.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Validate OpenAPI 3.1 Spec
         run: |
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index 41bdb0ea..b7cfd975 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Python for Semgrep
         uses: actions/setup-python@v5
@@ -84,7 +84,7 @@ jobs:
       SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -142,7 +142,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Build API security image
         run: docker build -f Dockerfile -t subtrackr-api:${{ github.sha }} .
@@ -187,7 +187,7 @@ jobs:
       ZAP_TARGET_URL: ${{ vars.DAST_TARGET_URL }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node.js for local sandbox fallback
         if: env.ZAP_TARGET_URL == ''
@@ -241,7 +241,7 @@ jobs:
     environment: security-review
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Download security artifacts
         uses: actions/download-artifact@v4
diff --git a/.github/workflows/test-actions.yml b/.github/workflows/test-actions.yml
index 0f9d30da..11abd989 100644
--- a/.github/workflows/test-actions.yml
+++ b/.github/workflows/test-actions.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Edge case: to pin to a semantic version tag use: Smartdevs17/SubTrackr/.github/actions/setup-node@v1.2.3
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Test setup-node
         uses: ./.github/actions/setup-node
       - name: Test build-contracts