Merge pull request #29 from Coffey-Labs/dependabot/github_actions/actions-cf414a5a77

Bump the actions group across 1 directory with 3 updates

.github/workflows/license-compliance.yml

@@ -27,7 +27,7 @@ jobs:
       matrix:
         crate_dir: [agent, search]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: EmbarkStudios/cargo-deny-action@v2
         with:
           manifest-path: ${{ matrix.crate_dir }}/Cargo.toml
@@ -53,8 +53,8 @@ jobs:
           - hack/benchmark-fixture
           - hack/windows-fixture
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-go@v7
         with:
           go-version-file: ${{ matrix.module_dir }}/go.mod
       - run: go install github.com/google/go-licenses@latest
@@ -70,8 +70,8 @@ jobs:
     name: npm license check (license-checker)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
       - working-directory: web
@@ -87,5 +87,5 @@ jobs:
     name: Architectural boundary check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - run: bash hack/check-tenant-boundary.sh

.github/workflows/processing-conformance.yml

@@ -25,5 +25,5 @@ jobs:
     name: processing conformance corpus check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - run: python3 processing/conformance/validate.py

.github/workflows/security-scan.yml

@@ -25,7 +25,7 @@ jobs:
       matrix:
         crate_dir: [agent, search]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: EmbarkStudios/cargo-deny-action@v2
         with:
           manifest-path: ${{ matrix.crate_dir }}/Cargo.toml
@@ -54,8 +54,8 @@ jobs:
           - hack/benchmark-fixture
           - hack/windows-fixture
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-go@v7
         with:
           # Deliberately NOT go-version-file. Each go.mod pins an exact
           # patch, so go-version-file made CI scan against the *unpatched*
@@ -79,8 +79,8 @@ jobs:
     name: npm vulnerability check (npm audit)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
       - working-directory: web

.github/workflows/web-routes.yml

@@ -23,5 +23,5 @@ jobs:
     name: nginx route allowlist check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - run: bash hack/check-web-routes.sh