From 6bdd48ba68b7df6157d6d9f5da7e2aff3efa921b Mon Sep 17 00:00:00 2001
From: Henry Lach <henry@lach.ca>
Date: Sun, 21 Jun 2026 10:58:30 -0400
Subject: [PATCH] chore(deps): consolidate GitHub Actions version bumps

Supersedes four separate Dependabot PRs (#591, #592, #593, #608) that
each touched .github/workflows/pages.yml and would have cascade-
conflicted on sequential merge (configure-pages and upload-pages-artifact
share a diff hunk). Bumping them in one commit avoids 3-4 rounds of
@dependabot rebase and fixes a checkout version skew in the same pass.

Changes:

  pages.yml:
    actions/checkout              v4 -> v7   (#608)
    actions/configure-pages       v5 -> v6   (#592)
    actions/upload-pages-artifact v3 -> v5   (#593)
    actions/deploy-pages          v4 -> v5   (#591)

  ci.yml + release.yml:
    actions/checkout              v6 -> v7

The checkout bump in ci.yml/release.yml closes a version skew: PR #590
(merged earlier) bumped those two workflows v4 -> v6 but left pages.yml
on v4. Rather than land pages.yml on v7 while the others stayed v6,
all three are aligned to v7.

Compatibility note: upload-pages-artifact v3 -> v5 crosses the
artifact-backend change (same generation as actions/upload-artifact v4).
This is compatible only when deploy-pages moves up in lockstep, which is
exactly why the Pages trio is bumped together here rather than piecemeal.
The ci.yml 'ci' check does NOT exercise pages.yml (it only runs on push
to main touching docs/taskplane-overview/**), so this PR's green CI does
not validate the Pages deploy. That is verified separately via
workflow_dispatch after merge.

Dependabot PRs #591, #592, #593, #608 will be closed as superseded.
---
 .github/workflows/ci.yml      | 2 +-
 .github/workflows/pages.yml   | 8 ++++----
 .github/workflows/release.yml | 2 +-
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 68bdd4f9..dabc1c79 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,7 +16,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index a4bc4050..624ec49e 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -38,16 +38,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Configure Pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@v6
 
       - name: Upload Taskplane Overview artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v5
         with:
           path: docs/taskplane-overview
 
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0a8ce567..1174d0c4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -48,7 +48,7 @@ jobs:
           fi
 
       - name: Checkout tagged commit
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ steps.ref.outputs.ref }}
           fetch-depth: 0