ci: bump actions/checkout from 6 to 7

.github/workflows/ci.yml

@@ -22,7 +22,7 @@ jobs:
     name: Lint (eslint, prettier, solhint)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup toolchain
         uses: ./.github/actions/setup-node-pnpm
@@ -42,7 +42,7 @@ jobs:
     name: Contracts (foundry + hardhat)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup toolchain
         uses: ./.github/actions/setup-node-pnpm
@@ -73,7 +73,7 @@ jobs:
     name: Worker (typecheck, test, docker build)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup toolchain
         uses: ./.github/actions/setup-node-pnpm

.github/workflows/codeql.yml

@@ -21,7 +21,7 @@ jobs:
       contents: read
       security-events: write # upload results to the Security tab
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4

.github/workflows/publish.yml

@@ -29,7 +29,7 @@ jobs:
     outputs:
       digest: ${{ steps.build.outputs.digest }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
@@ -77,7 +77,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0 # full history so release notes can diff against the prior tag
 

.github/workflows/slither.yml

@@ -22,7 +22,7 @@ jobs:
       contents: read
       security-events: write # upload SARIF to the Security tab
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       # Slither builds via `forge build`, which needs the remapped deps in node_modules.
       - name: Setup toolchain