ci: bump actions/checkout to v7 and track actions with dependabot

actions/checkout was the only action behind a major; the other ten are
already on their latest. v7's one breaking change blocks checking out fork
PRs for pull_request_target and workflow_run, neither of which is used here.

Actions drifted because dependabot only watched gomod. Add the
github-actions ecosystem so this stays automatic. It needs a directory per
composite action: "/" alone covers .github/workflows and a root action.yml,
which would have missed golangci-lint-action and the five docker actions.

Signed-off-by: Date Huang <tjjh89017@hotmail.com>

Author: tjjh89017

.github/dependabot.yml

@@ -11,3 +11,12 @@ updates:
       - "/contrib/**"
     schedule:
       interval: "weekly"
+
+  # "/" only covers .github/workflows. The composite actions each need their own
+  # directory, and that is where golangci-lint-action and the docker actions live.
+  - package-ecosystem: "github-actions"
+    directories:
+      - "/"
+      - "/.github/actions/**"
+    schedule:
+      interval: "weekly"

.github/workflows/main.yml

@@ -14,7 +14,7 @@ jobs:
     name: Codegen
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with:
           go-version: ${{ env.GO_VERSION }}
@@ -30,7 +30,7 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Lint
         uses: ./.github/actions/lint
         with:
@@ -40,7 +40,7 @@ jobs:
     name: Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Test
         uses: ./.github/actions/test
         with:
@@ -71,7 +71,7 @@ jobs:
           - os: freebsd
             variant: extra-min
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Build
         uses: ./.github/actions/build
         id: build
@@ -97,7 +97,7 @@ jobs:
       - lint
       - test
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Test and build
         uses: vmactions/freebsd-vm@v1
         with:
@@ -131,7 +131,7 @@ jobs:
           - os: freebsd
             arch: mipsle
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Build All Plugins
         uses: ./.github/actions/build-all-plugins
         id: build-plugins
@@ -153,7 +153,7 @@ jobs:
       - lint
       - test
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Build and Push Docker
         uses: ./.github/actions/docker
         with:

.github/workflows/release.yml

@@ -13,7 +13,7 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Lint
         uses: ./.github/actions/lint
         with:
@@ -23,7 +23,7 @@ jobs:
     name: Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Test
         uses: ./.github/actions/test
         with:
@@ -56,7 +56,7 @@ jobs:
           - os: freebsd
             variant: extra-min
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: tag
         id: tag
         run: echo "TAG=$(git describe --tags --dirty)" >> "$GITHUB_OUTPUT"
@@ -103,7 +103,7 @@ jobs:
           - os: freebsd
             arch: mipsle
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: tag
         id: tag
         run: echo "TAG=$(git describe --tags --dirty)" >> "$GITHUB_OUTPUT"
@@ -141,7 +141,7 @@ jobs:
       - lint
       - test
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Build and Push Docker
         uses: ./.github/actions/docker
         with: