feat(workflows): upgrade github actions used

- actions/checkout v6 -> v7
- actions/setup-python v6 -> v7
- astral-sh/setup-uv v7 -> v10
- labelling workflow: no need to checkout, run on submitter's repo to
  avoid exposure to security issues

.github/workflows/hacs-validate.yml

@@ -13,7 +13,7 @@ jobs:
     if: github.repository_owner == 'make-all'
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: HACS validation
         uses: hacs/action@main
         with:

.github/workflows/hassfest-validate.yml

@@ -13,5 +13,5 @@ jobs:
     if: github.repository_owner == 'make-all'
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: home-assistant/actions/hassfest@master

.github/workflows/jsontests.yml

@@ -29,14 +29,14 @@ jobs:
       UV_SYSTEM_PYTHON: 1
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v10
       - name: Translations check with pytest
         run: uv run pytest tests/test_translations.py

.github/workflows/label-pr-size.yml

@@ -1,6 +1,6 @@
 name: Label PRs based on size
 
-on: [pull_request_target]
+on: [pull_request]
 
 jobs:
   add_pr_size_label:
@@ -10,8 +10,6 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - name: Fetch code
-        uses: actions/checkout@v6
       - name: Label and comment PR
         uses: boschresearch/pr-size-labeler@v5
         # Uncomment these lines if you want to use your own custom configuration

.github/workflows/linting.yml

@@ -13,15 +13,15 @@ jobs:
       UV_SYSTEM_PYTHON: 1
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.14'
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v10
       - name: Python lint
         run: uv run ruff check --output-format=github .
       - name: Python include order

.github/workflows/tests.yml

@@ -26,15 +26,15 @@ jobs:
       UV_SYSTEM_PYTHON: 1
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v10
       - name: Install dependencies
         run: |
           sudo apt-get update

.github/workflows/yamltests.yml

@@ -27,15 +27,15 @@ jobs:
       UV_SYSTEM_PYTHON: 1
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v10
       - name: Device configs check with pytest
         run: |
           uv run pytest tests/test_device_config.py