From 5b54f8fa0c7f17fff32d9bda2edb83f5656123bb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 25 Jun 2026 13:18:16 +0000
Subject: [PATCH] chore(deps): Bump actions/checkout from 6 to 7

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/agent-image-relock.yaml |  2 +-
 .github/workflows/agent-image-smoke.yaml  |  2 +-
 .github/workflows/agent-image.yaml        |  2 +-
 .github/workflows/build.yaml              |  2 +-
 .github/workflows/ci.yaml                 |  8 ++++----
 .github/workflows/conformance.yaml        | 10 +++++-----
 .github/workflows/e2e.yaml                |  2 +-
 .github/workflows/helm-rbac.yaml          |  4 ++--
 .github/workflows/operatorhub-submit.yaml |  4 ++--
 .github/workflows/reconcile-guard.yaml    |  2 +-
 .github/workflows/release.yaml            |  4 ++--
 .github/workflows/scorecard.yaml          |  2 +-
 .github/workflows/verify-signing.yaml     |  2 +-
 13 files changed, 23 insertions(+), 23 deletions(-)

diff --git a/.github/workflows/agent-image-relock.yaml b/.github/workflows/agent-image-relock.yaml
index 2d2eb2a..1848e84 100644
--- a/.github/workflows/agent-image-relock.yaml
+++ b/.github/workflows/agent-image-relock.yaml
@@ -30,7 +30,7 @@ jobs:
   relock:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-python@v5
         with:
diff --git a/.github/workflows/agent-image-smoke.yaml b/.github/workflows/agent-image-smoke.yaml
index efa9c84..125ce6c 100644
--- a/.github/workflows/agent-image-smoke.yaml
+++ b/.github/workflows/agent-image-smoke.yaml
@@ -20,7 +20,7 @@ jobs:
   smoke:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Buildx
         uses: docker/setup-buildx-action@v4
diff --git a/.github/workflows/agent-image.yaml b/.github/workflows/agent-image.yaml
index 796af57..b638b0c 100644
--- a/.github/workflows/agent-image.yaml
+++ b/.github/workflows/agent-image.yaml
@@ -30,7 +30,7 @@ jobs:
   build:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Resolve HERMES_VERSION
         id: ver
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index f5f6102..b04833a 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -12,7 +12,7 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: docker/setup-buildx-action@v4
       # Multi-arch builds for releases happen in release.yaml via
       # docker/build-push-action (uses Go cross-compile under
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index fade0df..0617978 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -8,7 +8,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with: { go-version: "1.26" }
       - uses: golangci/golangci-lint-action@v9
@@ -20,7 +20,7 @@ jobs:
       matrix:
         k8s: ["1.28", "1.29", "1.30", "1.31", "1.32"]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with: { go-version: "1.26" }
       - name: Run tests (k8s ${{ matrix.k8s }})
@@ -32,7 +32,7 @@ jobs:
     name: Docs Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v5
         with:
           python-version: "3.12"
@@ -54,7 +54,7 @@ jobs:
     name: API Docs Sync
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with: { go-version: "1.26" }
       - name: Regenerate api-reference-generated.md
diff --git a/.github/workflows/conformance.yaml b/.github/workflows/conformance.yaml
index c097b52..cff6ef1 100644
--- a/.github/workflows/conformance.yaml
+++ b/.github/workflows/conformance.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with: { go-version-file: go.mod }
       - uses: helm/kind-action@v1
@@ -44,7 +44,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 65
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with: { go-version-file: go.mod }
       - uses: helm/kind-action@v1
@@ -66,7 +66,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 90
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with: { go-version-file: go.mod }
       - uses: azure/setup-helm@v5
@@ -89,7 +89,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with: { go-version-file: go.mod }
       - run: make conformance-gitops
@@ -99,7 +99,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with: { go-version-file: go.mod }
       - run: make conformance-failure
diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml
index faa1d4e..d32772c 100644
--- a/.github/workflows/e2e.yaml
+++ b/.github/workflows/e2e.yaml
@@ -11,7 +11,7 @@ jobs:
   e2e:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with: { go-version: "1.26" }
       - uses: helm/kind-action@v1
diff --git a/.github/workflows/helm-rbac.yaml b/.github/workflows/helm-rbac.yaml
index 2573287..5e8440c 100644
--- a/.github/workflows/helm-rbac.yaml
+++ b/.github/workflows/helm-rbac.yaml
@@ -7,7 +7,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with: { go-version: "1.26" }
       - uses: azure/setup-helm@v5
@@ -17,6 +17,6 @@ jobs:
     name: Bundle RBAC Sync
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - run: sudo snap install yq
       - run: make sync-bundle-rbac-check
diff --git a/.github/workflows/operatorhub-submit.yaml b/.github/workflows/operatorhub-submit.yaml
index d15fd3e..6e7582c 100644
--- a/.github/workflows/operatorhub-submit.yaml
+++ b/.github/workflows/operatorhub-submit.yaml
@@ -22,7 +22,7 @@ jobs:
           echo "version=$VERSION" >> "$GITHUB_OUTPUT"
           echo "tag=$TAG" >> "$GITHUB_OUTPUT"
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ steps.version.outputs.tag }}
 
@@ -137,7 +137,7 @@ jobs:
           echo "version=$VERSION" >> "$GITHUB_OUTPUT"
           echo "tag=$TAG" >> "$GITHUB_OUTPUT"
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ steps.version.outputs.tag }}
 
diff --git a/.github/workflows/reconcile-guard.yaml b/.github/workflows/reconcile-guard.yaml
index 7b3e337..1a74c1d 100644
--- a/.github/workflows/reconcile-guard.yaml
+++ b/.github/workflows/reconcile-guard.yaml
@@ -7,5 +7,5 @@ jobs:
   guard:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - run: bash hack/reconcile-guard.sh
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 0052dcb..ba6d15c 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -26,7 +26,7 @@ jobs:
           private-key: ${{ secrets.RELEASE_BOT_PRIVATE_KEY }}
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -143,7 +143,7 @@ jobs:
     needs: release
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Log in to GitHub Container Registry
         uses: docker/login-action@v4
diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml
index b8ec4bb..d6e9034 100644
--- a/.github/workflows/scorecard.yaml
+++ b/.github/workflows/scorecard.yaml
@@ -19,7 +19,7 @@ jobs:
       contents: read
       actions: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           persist-credentials: false
       - uses: ossf/scorecard-action@v2.4.3
diff --git a/.github/workflows/verify-signing.yaml b/.github/workflows/verify-signing.yaml
index 57ac865..e333b24 100644
--- a/.github/workflows/verify-signing.yaml
+++ b/.github/workflows/verify-signing.yaml
@@ -13,7 +13,7 @@ jobs:
       contents: read
       issues: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install Cosign
         uses: sigstore/cosign-installer@v3