chore(deps): update actions/setup-python action to v7

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-python	action	major	v6 → v7

---

Release Notes

actions/setup-python (actions/setup-python)

v7.0.0

Compare Source

v7

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[anitrend]

OpenCode Dependabot Risk Review

Schema: local-stack.dependabot-risk.v1

Decision: NEUTRAL
Risk: MEDIUM
Automerge allowed: false
Update type: semver-major
Ecosystem: github-actions

Summary

Renovate PR updates actions/setup-python from v6 to v7 (major version bump). Three GitHub Actions workflow files are modified. The update is semver-major for a CI dependency, which triggers the neutral policy due to major version change in the github-actions ecosystem and workflow file modifications. No Docker images or stateful services are affected. Release notes are sparse (only compare links), so breaking changes cannot be ruled out without manual inspection of the v7.0.0 changelog.

Changed runtime artifacts

No runtime image changes detected.

Runtime impact

No runtime impact on deployed services. Affects CI/CD pipeline execution only. A major version bump may change action behavior, input parameters, or output handling in workflows.

Breaking change assessment

Release notes only contain compare links between v6.3.0 and v7.0.0; no explicit breaking change details are available in the PR body. Manual review of the actions/setup-python v7.0.0 release notes is required to assess breaking changes.

Required checks

• Review actions/setup-python v7.0.0 release notes for breaking changes
• Verify workflow syntax and action inputs are compatible with v7
• Run a manual CI trigger on a test branch to validate the update

Manual follow-up

• Inspect actual diff of .github/workflows/* files for permission changes, checkout safety, or token boundary modifications
• Confirm no workflow permissions are weakened by the action update

Sources checked

• PR body and metadata
• PR changed file list
• Release notes in PR body

[anitrend]

OpenCode risk gate: neutral. Manual review required. Risk: medium. Reason: Renovate PR updates actions/setup-python from v6 to v7 (major version bump). Three GitHub Actions workflow files are modified. The update is semver-major for a CI dependency, which triggers the neutral policy due to major version change in the github-actions ecosystem and workflow file modifications. No Docker images or stateful services are affected. Release notes are sparse (only compare links), so breaking changes cannot be ruled out without manual inspection of the v7.0.0 changelog.