build(deps): Bump actions/checkout from 7.0.0 to 7.0.1 in the actions group across 1 directory #52

	# SPDX-License-Identifier: MPL-2.0
	# SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell (hyperpolymath)
	#
	# CodeQL Security Analysis. This repo carries real JavaScript/TypeScript
	# source (cartridge adapters, tooling) alongside its Idris2/Zig/Rust core, so
	# the javascript-typescript matrix has genuine source to analyse (unlike a
	# pure-Elixir sibling repo, where the same matrix found nothing and had to be
	# repointed at `actions`). Also runs `actions`, matching the canonical
	# two-language matrix in hyperpolymath/standards — every repo's workflow
	# surface is analysable regardless of its application-language mix.
	name: CodeQL Security Analysis
	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	schedule:
	- cron: '0 6 * * 1'
	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true
	permissions:
	contents: read
	jobs:
	analyze:
	runs-on: ubuntu-latest
	timeout-minutes: 15
	permissions:
	contents: read
	security-events: write
	strategy:
	fail-fast: false
	matrix:
	include:
	- language: javascript-typescript
	build-mode: none
	- language: actions
	build-mode: none
	steps:
	- name: Checkout
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	- name: Initialize CodeQL
	uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v3.28.1
	with:
	languages: ${{ matrix.language }}
	build-mode: ${{ matrix.build-mode }}
	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v3.28.1
	with:
	category: "/language:${{ matrix.language }}"

Provide feedback