From 11c2e89d25003316a6b485bed3369f1f8bd7d6cf Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 10 Sep 2026 16:59:19 +0000
Subject: [PATCH] Bump the actions group across 1 directory with 3 updates

Bumps the actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/setup-go](https://github.com/actions/setup-go) and [actions/setup-node](https://github.com/actions/setup-node).


Updates `actions/checkout` from 4 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v7)

Updates `actions/setup-go` from 5 to 7
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v5...v7)

Updates `actions/setup-node` from 4 to 7
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-go
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/license-compliance.yml     | 12 ++++++------
 .github/workflows/processing-conformance.yml |  2 +-
 .github/workflows/security-scan.yml          | 10 +++++-----
 .github/workflows/web-routes.yml             |  2 +-
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/license-compliance.yml b/.github/workflows/license-compliance.yml
index 205721a..b022909 100644
--- a/.github/workflows/license-compliance.yml
+++ b/.github/workflows/license-compliance.yml
@@ -27,7 +27,7 @@ jobs:
       matrix:
         crate_dir: [agent, search]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: EmbarkStudios/cargo-deny-action@v2
         with:
           manifest-path: ${{ matrix.crate_dir }}/Cargo.toml
@@ -53,8 +53,8 @@ jobs:
           - hack/benchmark-fixture
           - hack/windows-fixture
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-go@v7
         with:
           go-version-file: ${{ matrix.module_dir }}/go.mod
       - run: go install github.com/google/go-licenses@latest
@@ -70,8 +70,8 @@ jobs:
     name: npm license check (license-checker)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
       - working-directory: web
@@ -87,5 +87,5 @@ jobs:
     name: Architectural boundary check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - run: bash hack/check-tenant-boundary.sh
diff --git a/.github/workflows/processing-conformance.yml b/.github/workflows/processing-conformance.yml
index 55cbc92..4d3bf43 100644
--- a/.github/workflows/processing-conformance.yml
+++ b/.github/workflows/processing-conformance.yml
@@ -25,5 +25,5 @@ jobs:
     name: processing conformance corpus check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - run: python3 processing/conformance/validate.py
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index 6b13b52..bc3bd29 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -25,7 +25,7 @@ jobs:
       matrix:
         crate_dir: [agent, search]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: EmbarkStudios/cargo-deny-action@v2
         with:
           manifest-path: ${{ matrix.crate_dir }}/Cargo.toml
@@ -54,8 +54,8 @@ jobs:
           - hack/benchmark-fixture
           - hack/windows-fixture
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-go@v7
         with:
           # Deliberately NOT go-version-file. Each go.mod pins an exact
           # patch, so go-version-file made CI scan against the *unpatched*
@@ -79,8 +79,8 @@ jobs:
     name: npm vulnerability check (npm audit)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
       - working-directory: web
diff --git a/.github/workflows/web-routes.yml b/.github/workflows/web-routes.yml
index a341c09..57d7fc9 100644
--- a/.github/workflows/web-routes.yml
+++ b/.github/workflows/web-routes.yml
@@ -23,5 +23,5 @@ jobs:
     name: nginx route allowlist check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - run: bash hack/check-web-routes.sh