build(deps): Bump actions/checkout from 4 to 7

.github/workflows/ci.yml

@@ -22,7 +22,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, macos-latest]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Install uv
         uses: astral-sh/setup-uv@v5
       - name: Build loadable extension
@@ -34,7 +34,7 @@ jobs:
     name: amalgamation compiles
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       # regenerate the single-file amalgamation from the current sources and
       # compile it (static + loadable), so it can never drift from the tree.
       - name: Generate + compile amalgamation
@@ -44,7 +44,7 @@ jobs:
     name: bindings (node + rust)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       # rust crate: compiles the amalgamation via build.rs, register + forecast
       - name: Rust crate
         run: make rust-src && cargo test --manifest-path bindings/rust/Cargo.toml
@@ -83,15 +83,15 @@ jobs:
     name: ASan + UBSan
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Run sanitizer soak
         run: make test-asan CC=clang
 
   valgrind:
     name: valgrind
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       # Run valgrind inside a container instead of apt-installing it on the
       # runner: the host's apt contends with the runner's background
       # unattended-upgrades dpkg lock and can hang. `make test-valgrind` builds
@@ -104,7 +104,7 @@ jobs:
     name: fuzz smoke (60s)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Build + run libFuzzer
         run: make fuzz
 
@@ -115,7 +115,7 @@ jobs:
       run:
         shell: msys2 {0}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: msys2/setup-msys2@v2
         with:
           msystem: MINGW64
@@ -134,7 +134,7 @@ jobs:
     name: wasm (emscripten)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Install emscripten
         run: |
           git clone --depth 1 https://github.com/emscripten-core/emsdk.git
@@ -153,7 +153,7 @@ jobs:
     env:
       ORT_VERSION: "1.27.1"
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Install uv
         uses: astral-sh/setup-uv@v5
       - name: Fetch onnxruntime

.github/workflows/crate.yml

@@ -22,7 +22,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Resolve version
         id: v
         run: |

.github/workflows/npm.yml

@@ -39,7 +39,7 @@ jobs:
           # is public-repo-only); the binary is built, not run, on CI.
           - { pkg: sqlite-predict-linux-arm64,  runner: ubuntu-latest, os: linux,  cpu: arm64, ext: so,    apt: "gcc-aarch64-linux-gnu", cc: "CC=aarch64-linux-gnu-gcc", macarch: "" }
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v4
         with:
           node-version: "22"
@@ -73,7 +73,7 @@ jobs:
     name: sqlite-predict-windows-x64
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: msys2/setup-msys2@v2
         with:
           msystem: MINGW64
@@ -107,7 +107,7 @@ jobs:
     needs: [platform, windows]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v4
         with:
           node-version: "22"

.github/workflows/pages.yml

@@ -31,7 +31,7 @@ jobs:
       run:
         working-directory: website
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       # Reads the live Pages config and exposes the correct origin + base_path
       # for the current URL (root subdomain while private, /sqlite-predict once
       # public). We feed those into the Astro build so one build serves either.

.github/workflows/release.yml

@@ -20,7 +20,7 @@ jobs:
           - os: macos-latest
             ext: dylib
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Build loadable extension
         run: make loadable
       - name: Stage artifact
@@ -40,7 +40,7 @@ jobs:
       run:
         shell: msys2 {0}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: msys2/setup-msys2@v2
         with:
           msystem: MINGW64
@@ -62,7 +62,7 @@ jobs:
     name: amalgamation
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       # the single-file drop-in build, attached so users can grab one .c file
       - name: Generate + compile amalgamation
         run: make amalgamation-check

.github/workflows/wheels.yml

@@ -24,7 +24,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, macos-latest]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Stage amalgamation into the package
         run: make python-src
       - name: Build wheels
@@ -46,7 +46,7 @@ jobs:
     name: sdist
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Stage amalgamation into the package
         run: make python-src
       - name: Build sdist