fix(deps): update actions/checkout action to v7

.github/workflows/dockerfile.yml

@@ -34,7 +34,7 @@ jobs:
   run:
     runs-on: ${{ vars.CUSTOM_RUNNER || 'ubuntu-latest' }}
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           ref: ${{ inputs.checkout-ref }}
 

.github/workflows/gradle-library.yml

@@ -100,7 +100,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           ref: ${{ inputs.checkout-ref }}
           submodules: ${{ inputs.submodules }}

.github/workflows/gradle-service.yml

@@ -96,7 +96,7 @@ jobs:
       release-version: ${{ steps.gradle-release.outputs.release-version }}
 
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           ref: ${{ inputs.checkout-ref }}
           submodules: ${{ inputs.submodules }}

.github/workflows/mise-release.yml

@@ -57,7 +57,7 @@ jobs:
           private-key: ${{ secrets.WE_RELEASE_GITHUB_PRIVATE_KEY }}
 
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           token: ${{ steps.app-token.outputs.token }}
           # fetch-depth 0 is required to fetch all tags (and to determine the version based on tags)

.github/workflows/mise.yml

@@ -106,15 +106,15 @@ jobs:
       #
       - name: Checkout specific ref
         if: ${{ inputs.publish }}
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           ref: ${{ steps.version.outputs.ref }}
           submodules: ${{ inputs.submodules }}
           # provide a token in case submodules are enabled and private (secret is expected to be present)
           token: ${{ inputs.submodules != 'false' && secrets.GH_PAT || github.token }}
       - name: Checkout code
         if: ${{ !inputs.publish }}
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           submodules: ${{ inputs.submodules }}
           # provide a token in case submodules are enabled and private (secret is expected to be present)

.github/workflows/play-service.yml

@@ -49,7 +49,7 @@ jobs:
     runs-on: ${{ vars.CUSTOM_RUNNER || 'ubuntu-latest' }}
 
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:

.github/workflows/sbt-library.yml

@@ -35,7 +35,7 @@ jobs:
     runs-on: ${{ vars.CUSTOM_RUNNER || 'ubuntu-latest' }}
 
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:

.github/workflows/scan-for-secrets.yml

@@ -18,7 +18,7 @@ jobs:
       slack-webhook-set: ${{ steps.check-slack.outputs.is-set }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           # fetch-depth=0 fetches full history so gitleaks can examine all commits
           fetch-depth: 0