chore(deps): bump actions/checkout from 6.0.2 to 7.0.1

[dependabot]

Dependency update

Update actions/checkout from the fully pinned v6.0.2 commit to the fully pinned v7.0.1 commit in all three repository workflows.

The branch previously carried an unrelated R package ABI workaround. That workflow logic has been removed, leaving only the checkout SHA update. #212 remains the single RcppParallel/oneTBB repair path.

The v7 line includes safer defaults for pull_request_target/workflow_run, SHA-256 repository handling inherited from later v6 releases, and dependency/security fixes. No workflow permissions or checkout inputs are expanded.

Merge only after current-head required checks, all review threads, and an independent approval.

[opencode-agent]

Pull request overview

OpenCode could not approve from deterministic current-head evidence because GitHub Checks have failed.

Findings

1. HIGH Current-head GitHub Checks - Fix failed required checks before approval

• Problem: Failed same-head checks remain for 87565b2ffc9a9d4afed9e4dcf9a5b5d27cecb0ed.
• Root cause: The model-unavailable evidence fallback is allowed only when peer GitHub Checks are complete and clean.
• Fix: Read and fix the failed check logs below, then rerun the current-head checks.
• Regression test: Keep the model-unavailable fallback gated on an empty failed-check rollup.

Failed checks:

• R CMD check/check: FAILURE (https://github.com/ContextualWisdomLab/aFIPC/actions/runs/30213864555/job/89824533862)
• check check run: failure (https://github.com/ContextualWisdomLab/aFIPC/actions/runs/30213864555/job/89824533862)

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Workflow (3 files)"]
  S1 --> I1["GitHub Actions review job"]
  I1 --> R1["Review risk: Workflow (3 files)"]
  R1 --> V1["actionlint plus required checks"]

Loading

[opencode-agent]

OpenCode Review Overview

• Head SHA: db9e3d74bdd1db03faffc0d4a1ac30d4010b3284
• Workflow run: 32056427670
• Workflow attempt: 1
• Gate result: REQUEST_CHANGES (approval step)

Pull request overview

OpenCode could not approve from deterministic current-head evidence because GitHub Checks have failed.

Findings

1. HIGH Current-head GitHub Checks - Fix failed required checks before approval

• Problem: Failed same-head checks remain for db9e3d74bdd1db03faffc0d4a1ac30d4010b3284.
• Root cause: The model-unavailable evidence fallback is allowed only when peer GitHub Checks are complete and clean.
• Fix: Read and fix the failed check logs below, then rerun the current-head checks.
• Regression test: Keep the model-unavailable fallback gated on an empty failed-check rollup.

Failed checks:

• Required Noema Review/noema-review: FAILURE (https://github.com/ContextualWisdomLab/aFIPC/actions/runs/32048848269/job/95443035751)
• Strix Security Scan/strix: FAILURE (https://github.com/ContextualWisdomLab/aFIPC/actions/runs/32048848267/job/95443035109)
• Strix Security Scan/strix: failure (https://github.com/ContextualWisdomLab/aFIPC/actions/runs/32048848267/job/95443035109)
• noema-review check run: failure (https://github.com/ContextualWisdomLab/aFIPC/actions/runs/32048848269/job/95443035751)

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Workflow (3 files)"]
  S1 --> I1["GitHub Actions review job"]
  I1 --> R1["Review risk: Workflow (3 files)"]
  R1 --> V1["actionlint plus required checks"]

Loading

[opencode-agent]

Pull request overview

OpenCode cannot approve yet because required coverage evidence did not pass.

Review outcome

1. HIGH .github/workflows/opencode-review.yml:1 - Coverage evidence did not prove required test/docstring evidence

• Problem: The required coverage-evidence job result was failure, so OpenCode cannot establish approval sufficiency for this head.

• Root cause: Automated approval is only valid when the same-head coverage-evidence job proves supported repository test suites passed and configured docstring gates passed or were advisory, or reports not applicable because no supported source files or package manifests exist. Missing, failed, skipped, unavailable, or unsupported-tooling test evidence is a blocker.

• Fix: Install or configure the repository test/docstring evidence tooling when source files or package manifests exist, rerun the current-head coverage-evidence job, and approve only after it reports success with required evidence or explicit no-source not-applicable evidence.

• Regression test: Keep the approval branch checking needs.coverage-evidence.result == success before posting APPROVE, and publish REQUEST_CHANGES when coverage-evidence blocker states such as cancelled, skipped, failed, unsupported-tooling, or below-100 evidence are present.

• Result: REQUEST_CHANGES

• Reason: coverage-evidence result was failure, so required test/docstring evidence was not proven for current head 4b9296ad4187094f75a1a10f3a876ae8cafb6186.

• Head SHA: 4b9296ad4187094f75a1a10f3a876ae8cafb6186

• Workflow run: 31640424283

• Workflow attempt: 1

Coverage evidence

Coverage evidence job did not run or did not publish coverage evidence.

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Workflow (3 files)"]
  S1 --> I1["GitHub Actions review job"]
  I1 --> R1["Review risk: Workflow (3 files)"]
  R1 --> V1["actionlint plus required checks"]

Loading

[opencode-agent]

Pull request overview

OpenCode could not approve from deterministic current-head evidence because GitHub Checks have failed.

Findings

1. HIGH Current-head GitHub Checks - Fix failed required checks before approval

• Problem: Failed same-head checks remain for 5bdae48079183edfeecdf46f420a9fe846c88c82.
• Root cause: The model-unavailable evidence fallback is allowed only when peer GitHub Checks are complete and clean.
• Fix: Read and fix the failed check logs below, then rerun the current-head checks.
• Regression test: Keep the model-unavailable fallback gated on an empty failed-check rollup.

Failed checks:

• R CMD check/check: FAILURE (https://github.com/ContextualWisdomLab/aFIPC/actions/runs/31784083807/job/94715990535)
• check check run: failure (https://github.com/ContextualWisdomLab/aFIPC/actions/runs/31784083807/job/94715990535)

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Workflow (3 files)"]
  S1 --> I1["GitHub Actions review job"]
  I1 --> R1["Review risk: Workflow (3 files)"]
  R1 --> V1["actionlint plus required checks"]

Loading

[seonghobae]

Independent review of the Dependabot actions/checkout 6.0.2 → 7.0.1 pin. Author is dependabot[bot], not the reviewer. Approval does not waive current-head required checks (noema-review and strix are still red on this head).

[opencode-agent]

Pull request overview

OpenCode could not approve from deterministic current-head evidence because GitHub Checks have failed.

Findings

1. HIGH Current-head GitHub Checks - Fix failed required checks before approval

• Problem: Failed same-head checks remain for db9e3d74bdd1db03faffc0d4a1ac30d4010b3284.
• Root cause: The model-unavailable evidence fallback is allowed only when peer GitHub Checks are complete and clean.
• Fix: Read and fix the failed check logs below, then rerun the current-head checks.
• Regression test: Keep the model-unavailable fallback gated on an empty failed-check rollup.

Failed checks:

• Required Noema Review/noema-review: FAILURE (https://github.com/ContextualWisdomLab/aFIPC/actions/runs/32048848269/job/95443035751)
• Strix Security Scan/strix: FAILURE (https://github.com/ContextualWisdomLab/aFIPC/actions/runs/32048848267/job/95443035109)
• Strix Security Scan/strix: failure (https://github.com/ContextualWisdomLab/aFIPC/actions/runs/32048848267/job/95443035109)
• noema-review check run: failure (https://github.com/ContextualWisdomLab/aFIPC/actions/runs/32048848269/job/95443035751)

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Workflow (3 files)"]
  S1 --> I1["GitHub Actions review job"]
  I1 --> R1["Review risk: Workflow (3 files)"]
  R1 --> V1["actionlint plus required checks"]

Loading

[opencode-agent]

Pull request overview

OpenCode could not approve from deterministic current-head evidence because GitHub Checks have failed.

Findings

1. HIGH Current-head GitHub Checks - Fix failed required checks before approval

• Problem: Failed same-head checks remain for db9e3d74bdd1db03faffc0d4a1ac30d4010b3284.
• Root cause: The model-unavailable evidence fallback is allowed only when peer GitHub Checks are complete and clean.
• Fix: Read and fix the failed check logs below, then rerun the current-head checks.
• Regression test: Keep the model-unavailable fallback gated on an empty failed-check rollup.

Failed checks:

• Required Noema Review/noema-review: FAILURE (https://github.com/ContextualWisdomLab/aFIPC/actions/runs/32048848269/job/95443035751)
• Strix Security Scan/strix: FAILURE (https://github.com/ContextualWisdomLab/aFIPC/actions/runs/32048848267/job/95443035109)
• Strix Security Scan/strix: failure (https://github.com/ContextualWisdomLab/aFIPC/actions/runs/32048848267/job/95443035109)
• noema-review check run: failure (https://github.com/ContextualWisdomLab/aFIPC/actions/runs/32048848269/job/95443035751)

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Workflow (3 files)"]
  S1 --> I1["GitHub Actions review job"]
  I1 --> R1["Review risk: Workflow (3 files)"]
  R1 --> V1["actionlint plus required checks"]

Loading