From 40af9a0667f398cbc835eef1c66db0f1d678edc0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 25 Sep 2026 15:50:23 +0000
Subject: [PATCH] Bump actions/checkout from 4 to 7

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v4...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/check.yml            | 2 +-
 .github/workflows/say-line-status.yml  | 2 +-
 .github/workflows/scan-and-deposit.yml | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 26eff3b..1a9b82c 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: the scanner's rules
         # No network: `plan` takes the "latest release" function as an
diff --git a/.github/workflows/say-line-status.yml b/.github/workflows/say-line-status.yml
index d93c037..55438ef 100644
--- a/.github/workflows/say-line-status.yml
+++ b/.github/workflows/say-line-status.yml
@@ -50,7 +50,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install cosign
         uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
diff --git a/.github/workflows/scan-and-deposit.yml b/.github/workflows/scan-and-deposit.yml
index 22a3178..ec7a368 100644
--- a/.github/workflows/scan-and-deposit.yml
+++ b/.github/workflows/scan-and-deposit.yml
@@ -54,7 +54,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: ask every pinned repository for its latest release, and bump what moved
         id: scan