[dmccoystephenson]

Summary

• actions/checkout is bumped from @v4 to @v7 and actions/setup-python from @v5 to @v7 in .github/workflows/test.yml.
• The same bump is applied to the "Use" example in README.md, which game repositories copy into their own deploy workflows.
• v7 is the latest major tag of both actions, confirmed with git ls-remote --tags against each repository.

Closes #14

Compatibility

No change to action.yml or deploy.sh; callers pinned to @v1 are unaffected.

Test plan

• Test / deploy-to-a-real-arcade is green on the PR head: both checkouts (this repo and arcade v0.6.6) and setup-python with python-version: '3.12' run on @v7, followed by every existing scenario.

Deferred

• activate and skip-existing silently treat any non-exact value as the default #10 stays deferred: it changes behaviour for @v1 callers, and the owner has not yet recorded a choice between strict true/false and case-insensitive matching.

Merge note

This PR touches .github/workflows/test.yml, which is on the loop's do-not-auto-merge list, so it is left open for owner review.

This PR description was drafted during a Gardener session (https://github.com/Stephenson-Software/gardener).

---

drafted by Claude on behalf of Daniel Stephenson

🤖 Generated with Claude Code

[dmccoystephenson]

Self-review rubric (head of feature/bump-actions-v7):

• Scope: PASS — the diff is 5 changed lines across .github/workflows/test.yml (lines 18, 19, 26) and README.md (lines 23, 24), all version pins named in Bump actions/checkout and actions/setup-python to v7 in test.yml and the README example #14.
• Tests-new: PASS (n/a) — no new input, output, or fail/status branch.
• Tests-fix: PASS (n/a) — not a bug fix.
• Sibling structure / renames: PASS (n/a) — no new files or identifiers.
• Docs: PASS — git grep -n "actions/" shows no remaining @v4/@v5 reference; the README "Use" example matches the versions CI runs. The rest of the README (Inputs, Outputs, Tests paragraph) was swept against action.yml, deploy.sh and test.yml and no drift was found.
• Issue resolution: PASS — every location named in Bump actions/checkout and actions/setup-python to v7 in test.yml and the README example #14 is changed.
• CI: PASS — run 41016478229, deploy-to-a-real-arcade green in 16s; the step list shows actions/checkout@v7 (x2) and actions/setup-python@v7 followed by all 22 scenario steps succeeding, not a skipped job.
• Input/output parity, token hygiene, failure messages, pre-network validation, compatibility: PASS (n/a) — action.yml and deploy.sh are untouched.

Observation: the README example (with: { python-version: '3.12' } on setup-python@v7) is exercised only indirectly, through the identical python-version: '3.12' usage in test.yml; a game repo's own build step is not run by CI.

Merge gate: .github/workflows/test.yml is on the do-not-auto-merge list, so the PR is left open for owner review.

This review comment was drafted during a Gardener session (https://github.com/Stephenson-Software/gardener).

---

drafted by Claude on behalf of Daniel Stephenson