From 8015d8b7a021acf135d30e73482884fe0d6aa918 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 20 Jun 2026 13:41:42 +0000
Subject: [PATCH] chore(deps): update github actions

---
 .github/workflows/checksums-drift.yml |  4 ++--
 .github/workflows/ci.yml              | 14 +++++++-------
 .github/workflows/release-dry-run.yml |  2 +-
 .github/workflows/release.yml         |  4 ++--
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/checksums-drift.yml b/.github/workflows/checksums-drift.yml
index c02c69d..a3b91b3 100644
--- a/.github/workflows/checksums-drift.yml
+++ b/.github/workflows/checksums-drift.yml
@@ -25,14 +25,14 @@ jobs:
   refresh:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/create-github-app-token@v2
+      - uses: actions/create-github-app-token@v3
         id: app-token
         with:
           app-id: ${{ secrets.BOT_APP_ID }}
           private-key: ${{ secrets.BOT_APP_PRIVATE_KEY }}
           owner: kreuzberg-dev
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           token: ${{ steps.app-token.outputs.token }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4a2b7a4..0e1abe6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,7 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Install uv
         uses: astral-sh/setup-uv@v8.2.0
         with:
@@ -45,7 +45,7 @@ jobs:
         os: [ubuntu-latest, macos-latest]
         python-version: ["3.10", "3.14"]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Install uv
         uses: astral-sh/setup-uv@v8.1.0
         with:
@@ -63,7 +63,7 @@ jobs:
     name: coverage
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Install uv
         uses: astral-sh/setup-uv@v8.1.0
         with:
@@ -90,7 +90,7 @@ jobs:
     name: audit
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Install uv
         uses: astral-sh/setup-uv@v8.1.0
         with:
@@ -108,7 +108,7 @@ jobs:
     name: shell-syntax
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Bash syntax check
         run: |
           set -e
@@ -122,7 +122,7 @@ jobs:
     name: hooks-smoke
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Smoke-test every hook against its tests/ fixtures
         run: bash scripts/smoke_hooks.sh
 
@@ -130,7 +130,7 @@ jobs:
     name: prek-dogfood
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Install uv
         uses: astral-sh/setup-uv@v8.1.0
         with:
diff --git a/.github/workflows/release-dry-run.yml b/.github/workflows/release-dry-run.yml
index 2336731..954512d 100644
--- a/.github/workflows/release-dry-run.yml
+++ b/.github/workflows/release-dry-run.yml
@@ -21,7 +21,7 @@ jobs:
     name: fetch-checksums
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Install uv
         uses: astral-sh/setup-uv@v8.2.0
         with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 032f651..e89045f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,14 +9,14 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/create-github-app-token@v2
+      - uses: actions/create-github-app-token@v3
         id: app-token
         with:
           app-id: ${{ secrets.BOT_APP_ID }}
           private-key: ${{ secrets.BOT_APP_PRIVATE_KEY }}
           owner: kreuzberg-dev
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0