Bump actions/checkout from 4 to 7

.github/workflows/build-docs.yml

@@ -14,7 +14,7 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Create site from Readme
         run: |

.github/workflows/build-native.yml

@@ -46,7 +46,7 @@ jobs:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: shivammathur/setup-php@v2
         with:

.github/workflows/code-intelligence.yml

@@ -18,7 +18,7 @@ jobs:
           coverage: xdebug
           extensions: fileinfo, mbstring, dom, simplexml, xmlwriter
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Cache Composer packages
         id: composer-cache

.github/workflows/create-release.yml

@@ -31,7 +31,7 @@ jobs:
       version: ${{ steps.build-version.outputs.version }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ssh-key: ${{ secrets.SSH_PRIVATE_KEY }}
           ref: stable

.github/workflows/docker.yml

@@ -24,7 +24,7 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Download the published Linux executable
         env:

.github/workflows/publish-release.yml

@@ -18,7 +18,7 @@ jobs:
     name: Merge stable branch into master
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ssh-key: ${{ secrets.SSH_PRIVATE_KEY }}
           ref: master
@@ -44,7 +44,7 @@ jobs:
       attestations: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: stable
 
@@ -145,7 +145,7 @@ jobs:
       contents: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ssh-key: ${{ secrets.SSH_PRIVATE_KEY }}
           ref: stable

.github/workflows/runtime.yml

@@ -81,7 +81,7 @@ jobs:
     steps:
       # Only the acceptance script is checked out: no application sources, no vendor
       # directory, nothing the executable could accidentally lean on.
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           sparse-checkout: |
             tests/System/acceptance.sh
@@ -110,7 +110,7 @@ jobs:
     name: Linux acceptance (hyde-linux-arm64)
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           sparse-checkout: |
             tests/System/acceptance.sh
@@ -137,7 +137,7 @@ jobs:
     name: macOS acceptance (hyde-macos-arm64)
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           sparse-checkout: |
             tests/System/acceptance.sh
@@ -162,7 +162,7 @@ jobs:
     name: macOS acceptance (hyde-macos-x86_64)
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           sparse-checkout: |
             tests/System/acceptance.sh
@@ -185,7 +185,7 @@ jobs:
     name: Windows acceptance (hyde-windows-x86_64.exe)
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           sparse-checkout: |
             tests/System/acceptance.ps1
@@ -210,7 +210,7 @@ jobs:
     name: Composer project dispatch (no PHP for the CLI)
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # The *project* is allowed to have its dependencies installed: that is what makes it
       # a Composer project. The CLI still gets an environment with no PHP at all.

.github/workflows/tests.yml

@@ -28,7 +28,7 @@ jobs:
           coverage: xdebug
           extensions: fileinfo, mbstring, dom, simplexml, xmlwriter
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Cache Composer packages
         uses: actions/cache@v6
@@ -109,7 +109,7 @@ jobs:
           php-version: ${{ matrix.php }}
           extensions: fileinfo, mbstring, dom, simplexml, xmlwriter
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Validate composer.json and composer.lock
         run: composer validate --strict
@@ -154,7 +154,7 @@ jobs:
           php-version: "8.4"
           extensions: fileinfo, mbstring, dom, simplexml, xmlwriter
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # HydePHP v3 is unreleased and untagged, so `hyde/framework` and
       # `hyde/realtime-compiler` resolve from a develop@master checkout through a

.github/workflows/traffic.yml

@@ -13,7 +13,7 @@ jobs:
   sync:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: traffic