ci(deps): Bump the gh-actions group across 1 directory with 2 updates

.github/workflows/ci.yml

@@ -18,7 +18,7 @@ jobs:
     name: Build & Test (Linux)
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install apt dependencies
         run: |
@@ -61,7 +61,7 @@ jobs:
     name: clang-format
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install clang-format
         run: |
@@ -78,7 +78,7 @@ jobs:
     name: clang-tidy
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install dependencies
         run: |
@@ -121,7 +121,7 @@ jobs:
     name: coverage
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install apt dependencies
         run: |
@@ -163,7 +163,7 @@ jobs:
         # Upload ONLY the gcovr report. Without disable_search + plugins: noop
         # the action re-runs gcov over the whole build tree and pulls system
         # headers and tests into the report, which the src/ filter excludes.
-        uses: codecov/codecov-action@v6
+        uses: codecov/codecov-action@v7
         with:
           files: coverage.xml
           disable_search: true

.github/workflows/codeql.yml

@@ -31,7 +31,7 @@ jobs:
         language: [c-cpp]
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4

.github/workflows/release.yml

@@ -23,7 +23,7 @@ jobs:
     name: Build & publish (Linux x64)
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install apt dependencies
         run: |