chore(deps): update https://gitea.com/actions/checkout action to v7

.gitea/workflows/ci.yml

@@ -22,7 +22,7 @@ jobs:
             slug: ${{ steps.policy.outputs.slug }}
             tag: ${{ steps.policy.outputs.tag }}
         steps:
-            - uses: https://gitea.com/actions/checkout@v4
+            - uses: https://gitea.com/actions/checkout@v7
               with:
                   fetch-depth: 0
                   persist-credentials: false
@@ -37,7 +37,7 @@ jobs:
         runs-on: ubuntu-latest
         container: node:24.21.0
         steps:
-            - uses: https://gitea.com/actions/checkout@v4
+            - uses: https://gitea.com/actions/checkout@v7
               with:
                   persist-credentials: false
             - run: npm install --global bun@1.4.2
@@ -55,7 +55,7 @@ jobs:
         env:
             NODE_OPTIONS: --max-old-space-size=2048
         steps:
-            - uses: https://gitea.com/actions/checkout@v4
+            - uses: https://gitea.com/actions/checkout@v7
               with:
                   persist-credentials: false
             - run: npm install --global bun@1.4.2
@@ -79,7 +79,7 @@ jobs:
         env:
             NODE_OPTIONS: --max-old-space-size=2048
         steps:
-            - uses: https://gitea.com/actions/checkout@v4
+            - uses: https://gitea.com/actions/checkout@v7
               with:
                   persist-credentials: false
             - run: npm install --global bun@1.4.2
@@ -93,7 +93,7 @@ jobs:
         runs-on: ubuntu-latest
         container: node:24.21.0
         steps:
-            - uses: https://gitea.com/actions/checkout@v4
+            - uses: https://gitea.com/actions/checkout@v7
               with:
                   persist-credentials: false
             - run: npm install --global bun@1.4.2
@@ -111,7 +111,7 @@ jobs:
         runs-on: ubuntu-latest
         container: node:24.21.0
         steps:
-            - uses: https://gitea.com/actions/checkout@v4
+            - uses: https://gitea.com/actions/checkout@v7
               with:
                   persist-credentials: false
             - name: Install scanners
@@ -153,13 +153,13 @@ jobs:
              (github.event_name == 'pull_request' &&
               github.event.pull_request.head.repo.full_name == github.repository))
         runs-on: ubuntu-latest
-        container: docker:29.9.1
+        container: docker:29.8.2
         concurrency:
             group: image-${{ needs.policy.outputs.tag != '' && 'stable' || needs.policy.outputs.slug }}
             cancel-in-progress: false
         services:
             docker:
-                image: docker:29.9.1-dind
+                image: docker:29.8.2-dind
                 env:
                     DOCKER_TLS_CERTDIR: ''
                 options: >-
@@ -177,7 +177,7 @@ jobs:
         steps:
             - name: Install checkout and policy runtimes
               run: apk add --no-cache nodejs git
-            - uses: https://gitea.com/actions/checkout@v4
+            - uses: https://gitea.com/actions/checkout@v7
               with:
                   fetch-depth: 0
                   persist-credentials: false