chore(deps): bump the actions-deps group across 1 directory with 7 updates

.github/workflows/cargo-deny-checker.yml

@@ -19,7 +19,7 @@ jobs:
           - licenses
           - sources
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: EmbarkStudios/cargo-deny-action@v2
         with:
           command: check ${{ matrix.checks }}

.github/workflows/claude-code-review.yml

@@ -32,7 +32,7 @@ jobs:
       id-token: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
       - name: Run Claude Code Review

.github/workflows/claude.yml

@@ -26,7 +26,7 @@ jobs:
       actions: read # Required for Claude to read CI results on PRs
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 

.github/workflows/cleanup-ios.yml

@@ -14,7 +14,7 @@ jobs:
   cleanup:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: superfly/flyctl-actions/setup-flyctl@master
       - name: Clean up stale apps
         env:

.github/workflows/create-release-branch.yml

@@ -50,7 +50,7 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.base-ref || github.ref_name }}
           fetch-depth: 0

.github/workflows/cross-test.yml

@@ -102,7 +102,7 @@ jobs:
       # checkout time (~75s). We only need:
       #   - release/* branches (fetched in the next step)
       #   - *-nightly.* tags (fetched in the step after that)
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 1
           fetch-tags: false

.github/workflows/deploy-docs.yml

@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -41,7 +41,7 @@ jobs:
         id: docgen
 
       - name: Upload pages artifact
-        uses: actions/upload-pages-artifact@v4
+        uses: actions/upload-pages-artifact@v5
 
   # Deployment job
   deploy:

.github/workflows/error-glossary.yml

@@ -16,7 +16,7 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/setup-rust
       - name: Generate Error Glossary
         run: dev/gen-error-glossary

.github/workflows/fh-cache.yml

@@ -20,7 +20,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/setup-nix
         with:
           github-token: ${{ github.token }}
@@ -48,7 +48,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/setup-nix
         with:
           github-token: ${{ github.token }}

.github/workflows/flaky-failure-watcher.yml

@@ -49,7 +49,7 @@ jobs:
     if: github.event.workflow_run.conclusion == 'failure'
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 

.github/workflows/ignored-tests-tracker.yml

@@ -22,7 +22,7 @@ jobs:
             feature_flag: "--features d14n"
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Cache
         uses: WarpBuilds/rust-cache@v2
@@ -65,7 +65,7 @@ jobs:
             feature_flag: "--features d14n"
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Cache
         uses: WarpBuilds/rust-cache@v2
@@ -125,7 +125,7 @@ jobs:
       issues: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Download all artifacts
         uses: actions/download-artifact@v8

.github/workflows/lint-android.yml

@@ -8,7 +8,7 @@ jobs:
     name: Lint (Android)
     runs-on: warp-ubuntu-latest-x64-16x
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/setup-nix
         with:
           github-token: ${{ github.token }}

.github/workflows/lint-config.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - uses: ./.github/actions/setup-nix
         with:
           github-token: ${{ github.token }}

.github/workflows/lint-ios.yml

@@ -8,7 +8,7 @@ jobs:
     name: Lint (iOS)
     runs-on: warp-macos-15-arm64-6x
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/setup-nix
         with:
           github-token: ${{ github.token }}

.github/workflows/lint-js.yml

@@ -10,7 +10,7 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - uses: ./.github/actions/setup-nix
         with:
           github-token: ${{ github.token }}

.github/workflows/lint-node.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: warp-ubuntu-latest-x64-16x
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - uses: ./.github/actions/setup-nix
         with:
           github-token: ${{ github.token }}

.github/workflows/lint-wasm.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: warp-ubuntu-latest-x64-16x
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - uses: ./.github/actions/setup-nix
         with:
           github-token: ${{ github.token }}

.github/workflows/lint-workspace.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: warp-ubuntu-latest-x64-16x
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - uses: ./.github/actions/setup-nix
         with:
           github-token: ${{ github.token }}

.github/workflows/lint.yml

@@ -24,7 +24,7 @@ jobs:
       android: ${{ steps.filter.outputs.android }}
       config: ${{ steps.filter.outputs.config }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: dorny/paths-filter@v4
         id: filter
         with:

.github/workflows/nightly-protos.yml

@@ -10,7 +10,7 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: bufbuild/buf-setup-action@v1.50.0
       - uses: ./.github/actions/setup-rust
       - name: Install protoc

.github/workflows/npm-publish.yml

@@ -68,7 +68,7 @@ jobs:
       version: ${{ inputs.version }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Download build artifacts
         if: ${{ inputs.artifact-pattern != '' }}

.github/workflows/push-keepalive-probe.yml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Capture commit metadata
         id: vars

.github/workflows/push-xdbg.yml

@@ -32,7 +32,7 @@ jobs:
     name: Lint shell scripts
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ludeeus/action-shellcheck@2.0.0
         with:
           scandir: './apps/xmtp_debug/docker'
@@ -47,7 +47,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Capture commit metadata
         id: vars
@@ -94,7 +94,7 @@ jobs:
         environment: [testnet]
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Deploy to ${{ matrix.environment }}
         uses: xmtp-labs/terraform-deployer@v1

.github/workflows/release-android.yml

@@ -32,7 +32,7 @@ jobs:
     outputs:
       version: ${{ steps.version.outputs.version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}
       - uses: ./.github/actions/setup-release-tools

.github/workflows/release-browser-sdk.yml

@@ -42,7 +42,7 @@ jobs:
     outputs:
       version: ${{ steps.version.outputs.version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}
       - uses: ./.github/actions/setup-release-tools
@@ -88,7 +88,7 @@ jobs:
       NIX_DEVSHELL: js
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}
 

.github/workflows/release-gate-plan.yml

@@ -30,7 +30,7 @@ jobs:
       sha: ${{ steps.sha.outputs.sha }}
       gate-skip: ${{ steps.gate.outputs.gate-skip }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}
           fetch-depth: 1
@@ -78,7 +78,7 @@ jobs:
       # legitimate "nothing to release" nightly that downstream jobs skip.
       nothing-pending: ${{ steps.pending.outputs.nothing-pending }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}
           fetch-depth: 0

.github/workflows/release-ios.yml

@@ -40,7 +40,7 @@ jobs:
       dynamic-artifact-url: ${{ steps.release.outputs.dynamic-artifact-url }}
       dynamic-checksum: ${{ steps.checksum.outputs.dynamic-checksum }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}
       - uses: ./.github/actions/setup-release-tools
@@ -122,7 +122,7 @@ jobs:
     outputs:
       version: ${{ needs.build-and-package.outputs.version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}
           fetch-depth: 0

.github/workflows/release-kotlin-bindings-nix.yml

@@ -23,7 +23,7 @@ jobs:
             output_target: arm64-v8a
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - uses: ./.github/actions/setup-nix
         with:
           github-token: ${{ github.token }}
@@ -49,7 +49,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Download artifacts
         uses: actions/download-artifact@v8
         with:
@@ -62,7 +62,7 @@ jobs:
         id: slug
         run: echo "sha7=$(echo "${GITHUB_SHA}" | cut -c1-7)" >> "$GITHUB_OUTPUT"
       - name: Create release and upload asset
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           files: ./bindings/mobile/LibXMTPKotlinFFI.zip
           tag_name: kotlin-bindings-${{ steps.slug.outputs.sha7 }}

.github/workflows/release-mls-validation-service.yml

@@ -19,7 +19,7 @@ jobs:
       IMAGE: ghcr.io/${{ github.repository_owner }}/mls-validation-service
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Install toml-cli
         run: cargo install toml-cli
@@ -89,7 +89,7 @@ jobs:
         environment: [ dev, production, testnet ]
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Deploy to ${{ matrix.environment }}
         uses: xmtp-labs/terraform-deployer@v1

.github/workflows/release-node-sdk.yml

@@ -42,7 +42,7 @@ jobs:
     outputs:
       version: ${{ steps.version.outputs.version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}
       - uses: ./.github/actions/setup-release-tools
@@ -88,7 +88,7 @@ jobs:
       NIX_DEVSHELL: js
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}