chore(deps): bump actions/checkout from 6 to 7

[dependabot]

Bumps actions/checkout from 6 to 7.

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

• block checking out fork pr for pull_request_target and workflow_run by @​aiqiaoy in actions/checkout#2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in actions/checkout#2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in actions/checkout#2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in actions/checkout#2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in actions/checkout#2459
• upgrade module to esm and update dependencies by @​aiqiaoy in actions/checkout#2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in actions/checkout#2462
• getting ready for checkout v7 release by @​aiqiaoy in actions/checkout#2464
• update error wording by @​aiqiaoy in actions/checkout#2467

New Contributors

• @​aiqiaoy made their first contribution in actions/checkout#2454

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

• Update changelog by @​ericsciple in actions/checkout#2357
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414
• Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
• Update changelog for v6.0.3 by @​yaananth in actions/checkout#2446

New Contributors

• @​yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

• Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @​TingluoHuang in actions/checkout#2355
• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

• Update all references from v5 and v4 to v6 by @​ericsciple in actions/checkout#2314
• Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327
• Clarify v6 README by @​ericsciple in actions/checkout#2328

Full Changelog: actions/checkout@v6...v6.0.1

Commits

• 9c091bb update error wording (#2467)
• 1044a6d getting ready for checkout v7 release (#2464)
• f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)
• d914b26 upgrade module to esm and update dependencies (#2463)
• 537c7ef Bump @​actions/core and @​actions/tool-cache and Remove uuid (#2459)
• 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461)
• 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460)
• 0f9f3aa Bump actions/publish-immutable-action (#2458)
• f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Vercel preview failed for 950b8ffc43b42bbebdcd917b0941338990733f5b

See the workflow run for details.

[greptile-apps]

Greptile Summary

This is a Dependabot-generated bump of actions/checkout from v6 to v7 across all nine GitHub Actions workflow files. The key behavioral change in v7 is a security hardening that blocks checkout of fork PRs under pull_request_target and workflow_run triggers — none of the workflows in this repo use those triggers, so there is no functional impact.

• Files that were already SHA-pinned (publish-pages.yaml, release-please.yml) are updated to the correct v7.0.0 commit SHA (9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0) with updated inline comments.
• Files using floating version tags are uniformly updated from @v6 to @v7; storage-integration.yml moves from the more-specific @v6.0.2 to @v7, aligning it with the rest of the non-pinned workflows.

Confidence Score: 5/5

Safe to merge — a straightforward version bump with no functional changes to any workflow logic.

All nine workflows are updated consistently. The only behavioral change in v7 (blocking fork checkouts for pull_request_target/workflow_run triggers) does not apply here since every workflow uses push or pull_request triggers. SHA-pinned files have their commit hash and inline comments correctly updated to v7.0.0.

No files require special attention.

Important Files Changed

Filename	Overview
.github/workflows/ci.yml	Bumps actions/checkout from @v6 to @v7 (floating major tag)
.github/workflows/deploy-vercel-preview.yml	Bumps actions/checkout from @v6 to @v7; workflow uses pull_request trigger (not pull_request_target), so v7's new fork-blocking behavior has no impact
.github/workflows/deploy-vercel-staging.yml	Bumps actions/checkout from @v6 to @v7 (floating major tag)
.github/workflows/deploy-vercel.yml	Bumps actions/checkout from @v6 to @v7 (floating major tag)
.github/workflows/publish-pages.yaml	Updates SHA-pinned checkout from v6.0.2 commit to v7.0.0 commit (9c091bb); comment correctly updated to # v7.0.0
.github/workflows/release-please.yml	Updates both SHA-pinned checkout occurrences from v6.0.2 to v7.0.0 commit SHA; comments correctly reflect new version
.github/workflows/release.yml	Bumps actions/checkout from @v6 to @v7 (floating major tag)
.github/workflows/self-deploy.yml	Bumps actions/checkout from @v6 to @v7 (floating major tag)
.github/workflows/storage-integration.yml	Bumps actions/checkout from @v6.0.2 to @v7, moving from a patch-pinned tag to a floating major tag — consistent with the other non-SHA-pinned workflows in the repo

_{Reviews (1): Last reviewed commit: "chore(deps): bump actions/checkout from ..." | Re-trigger Greptile}