From 5bad85211c59c7cfd6af75b00fd3cdbb22b65c12 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 5 Nov 2026 19:35:17 +0000
Subject: [PATCH] chore(deps): bump actions/checkout from 6 to 7

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/cross-repo-links.yml       | 2 +-
 .github/workflows/docs-acceptance.yml        | 4 ++--
 .github/workflows/docs-check.yml             | 2 +-
 .github/workflows/engineering-governance.yml | 4 ++--
 .github/workflows/gitleaks.yml               | 4 ++--
 .github/workflows/secret-scan-tests.yml      | 2 +-
 6 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/cross-repo-links.yml b/.github/workflows/cross-repo-links.yml
index ae6bacc..b58d2b8 100644
--- a/.github/workflows/cross-repo-links.yml
+++ b/.github/workflows/cross-repo-links.yml
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 40
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/docs-acceptance.yml b/.github/workflows/docs-acceptance.yml
index c724f81..36b9391 100644
--- a/.github/workflows/docs-acceptance.yml
+++ b/.github/workflows/docs-acceptance.yml
@@ -36,13 +36,13 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Check out the repository under review
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
           path: target
 
       - name: Check out the rules
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: QuantStrategyLab/.github
           ref: ${{ inputs.policy-revision }}
diff --git a/.github/workflows/docs-check.yml b/.github/workflows/docs-check.yml
index 2ff231b..29591b8 100644
--- a/.github/workflows/docs-check.yml
+++ b/.github/workflows/docs-check.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           persist-credentials: false
       - uses: actions/setup-python@v6
diff --git a/.github/workflows/engineering-governance.yml b/.github/workflows/engineering-governance.yml
index 237252e..57716ab 100644
--- a/.github/workflows/engineering-governance.yml
+++ b/.github/workflows/engineering-governance.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           persist-credentials: false
@@ -46,7 +46,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index b9c6cb1..f70e32b 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -19,13 +19,13 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Check out the caller with full history
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           persist-credentials: false
           path: source
       - name: Check out trusted scanner and shared configuration
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: QuantStrategyLab/.github
           # Pin the helper commit; changes to helpers require an explicit pin update.
diff --git a/.github/workflows/secret-scan-tests.yml b/.github/workflows/secret-scan-tests.yml
index 6c1b6d2..0c6cb18 100644
--- a/.github/workflows/secret-scan-tests.yml
+++ b/.github/workflows/secret-scan-tests.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6