ci(github-action)!: Update action actions/checkout (v6 → v7)

[its-miso]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v6 → v7

---

Release Notes

actions/checkout (actions/checkout)

v7

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[its-saffron]

AI Automated Review

Full PR review.

Analysis engine: MiniMax-M2.7@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)

PR Review: Update actions/checkout v6 → v7

Recommendation: Approve

This is a routine GitHub Actions dependency update that has successfully passed CI validation.

Change Summary

The PR updates actions/checkout from v6 to v7 across two workflow files:

• .github/workflows/release.yml — 4 occurrences (pre-release validation, Godot export Ubuntu, Godot export Windows, macOS validation)
• .github/workflows/test.yml — 3 occurrences (headless smoke test, script test suite, macOS validation)

All instances use full commit SHAs for pinning rather than version tags, which is the correct practice.

CI Verification

All required checks passed on this PR:

• Headless smoke test: ✓
• Script test suite: ✓
• macOS validation: ✓

The macOS validation passing is particularly relevant for this repository, as noted in AGENTS.md: "macOS runtime validation has also been important in this repo because GDScript warnings are treated as errors in practice."

Release Notes Confirmation

The v7.0.0 release (published 2026-06-18) includes:

• ESM module upgrade
• Updated @​actions/core and @​actions/tool-cache dependencies
• Removal of uuid dependency
• Security improvement: block checking out fork PRs for pull_request_target and workflow_run

None of these changes affect the workflow usage patterns in this repository.

Standards Compliance

• No repository-specific conventions are relevant to GitHub Actions dependency updates
• The change follows standard Renovate Bot pattern for action version bumps
• No application code or game logic changes

Linked Issue Fit

No linked issues.

Unknowns / Needs Verification

None — the CI has already validated this change on the actual runner infrastructure.

Findings

No issues identified.