chore(deps): bump the gha group across 1 directory with 2 updates

Bumps the gha group with 2 updates in the /.github/workflows directory: [googleapis/release-please-action](https://github.com/googleapis/release-please-action) and [actions/checkout](https://github.com/actions/checkout).


Updates `googleapis/release-please-action` from 4.1.1 to 4.1.3
- [Release notes](https://github.com/googleapis/release-please-action/releases)
- [Changelog](https://github.com/googleapis/release-please-action/blob/main/CHANGELOG.md)
- [Commits](googleapis/release-please-action@v4.1.1...v4.1.3)

Updates `actions/checkout` from 4.1.6 to 4.1.7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4.1.6...v4.1.7)

---
updated-dependencies:
- dependency-name: googleapis/release-please-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gha
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gha
...

Signed-off-by: dependabot[bot] <[email protected]>

.github/workflows/release.yml

@@ -14,6 +14,6 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Release Please
-        uses: googleapis/[email protected].1
+        uses: googleapis/[email protected].3
         with:
           token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/surf.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
         with:
           submodules: true
           fetch-depth: 0