From d0c453e81d38c4e7f51e4e8ac0db5ae951c51296 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 9 Nov 2026 13:35:15 +0000
Subject: [PATCH] Bump the github-actions group with 2 updates

Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [posit-dev/setup-air](https://github.com/posit-dev/setup-air).


Updates `actions/checkout` from 5 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v7)

Updates `posit-dev/setup-air` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/posit-dev/setup-air/releases)
- [Changelog](https://github.com/posit-dev/setup-air/blob/main/CHANGELOG.md)
- [Commits](https://github.com/posit-dev/setup-air/compare/fd20dd239848b9d807848a7ab92265cf197de694...482cb5912394878ab5a63b75db0f9d19cc6df5ba)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: posit-dev/setup-air
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yaml      | 14 +++++++-------
 .github/workflows/release.yaml |  2 +-
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 430c3a3..7bda4ec 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -18,9 +18,9 @@ jobs:
     if: github.event_name == 'push' || github.event_name == 'pull_request'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
-      - uses: posit-dev/setup-air@fd20dd239848b9d807848a7ab92265cf197de694 # v1.0.2
+      - uses: posit-dev/setup-air@482cb5912394878ab5a63b75db0f9d19cc6df5ba # v1.0.3
 
       - name: Check formatting
         run: |
@@ -39,7 +39,7 @@ jobs:
     env:
       GITHUB_PAT: ${{ secrets.AT_ROvis || secrets.GITHUB_TOKEN }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       # rocker-based images run as root; mark the workspace as safe for git,
       # otherwise git operations fail with "dubious ownership"
@@ -119,7 +119,7 @@ jobs:
       GITHUB_PAT: ${{ secrets.AT_ROvis || secrets.GITHUB_TOKEN }}
       R_KEEP_PKG_SOURCE: yes
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       # rocker-based images run as root; mark the workspace as safe for git,
       # otherwise git operations fail with "dubious ownership"
@@ -147,7 +147,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Push CI badge to gh-pages
         run: |
@@ -192,7 +192,7 @@ jobs:
       GITHUB_PAT: ${{ secrets.AT_ROvis || secrets.GITHUB_TOKEN }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       # rocker-based images run as root; mark the workspace as safe for git,
       # otherwise git operations below fail with "dubious ownership"
@@ -287,7 +287,7 @@ jobs:
       GITHUB_PAT: ${{ secrets.AT_ROvis || secrets.GITHUB_TOKEN }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       # rocker-based images run as root; mark the workspace as safe for git
       - name: Fix git safe directory
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index c9f498b..2aed300 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -22,7 +22,7 @@ jobs:
       # on the dev version PR. AT_ROvis does trigger them.
       GH_TOKEN: ${{ secrets.AT_ROvis || secrets.GITHUB_TOKEN }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           token: ${{ secrets.AT_ROvis || secrets.GITHUB_TOKEN }}