Update actions/checkout action to v7.0.1

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v7.0.0 → v7.0.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source

• Bump github/codeql-action from 3 to 4 by @​dependabot[bot] in #​2475
• Bump actions/setup-node from 4 to 6 by @​dependabot[bot] in #​2477
• Bump docker/build-push-action from 6.5.0 to 7.2.0 by @​dependabot[bot] in #​2478
• Bump docker/login-action from 3.3.0 to 4.2.0 by @​dependabot[bot] in #​2479
• Bump actions/checkout from 6 to 7 by @​dependabot[bot] in #​2488
• Bump actions/upload-artifact from 4 to 7 by @​dependabot[bot] in #​2476
• eslint 9 by @​dependabot[bot] in #​2474
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot[bot] in #​2499
• skip running unsafe pr check if input is default by @​aiqiaoy in #​2518
• trim only ascii whitespace for branch by @​aiqiaoy in #​2521
• escape values passed to --unset by @​aiqiaoy in #​2530

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

actions/checkout (github-action) 7.0.0 -> 7.0.1

Risk: 🟢 Safe

The Deep Dive

Update Scope

Updates all eight SHA-pinned actions/checkout invocations in five workflows from v7.0.0 to v7.0.1. The repository diff changes no checkout inputs, runners, triggers, other action pins, Go/Nix/Docker configuration, or application code; the upstream action manifest and declared production dependencies remain unchanged.

Hazards & Risks

None identified. The upstream comparison preserves the action manifest, inputs, Node 24 runtime baseline, and declared production dependencies, while the repository diff changes only the pinned action SHA and version comment.

Sources

• Repository PR file diff
• actions/checkout v7.0.1 release
• actions/checkout v7.0.0 to v7.0.1 comparison
• Default-checkout guard fix
• ASCII-only ref trimming hardening
• Windows credential-cleanup fix
• Windows cleanup issue
• actions/checkout security advisories
• v7.0.1 versus main comparison
• PR CI run
• PR Renovate hash-fix run

---

🟢 Verdict: Safe

renovate:safe: v7.0.1 is a targeted corrective patch, and the PR's lint, test, and Docker checks plus Renovate hash-fix check passed. No post-merge action beyond the repository's normal workflow is needed because the configured API, trust boundaries, and runtime requirements are unchanged.