Bump actions/checkout from 5.0.1 to 7.0.1

[dependabot]

Bumps actions/checkout from 5.0.1 to 7.0.1.

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

• skip running unsafe pr check if input is default by @​aiqiaoy in actions/checkout#2518
• trim only ascii whitespace for branch by @​aiqiaoy in actions/checkout#2521
• escape values passed to --unset by @​aiqiaoy in actions/checkout#2530
• Various dependency updates

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

• block checking out fork pr for pull_request_target and workflow_run by @​aiqiaoy in actions/checkout#2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in actions/checkout#2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in actions/checkout#2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in actions/checkout#2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in actions/checkout#2459
• upgrade module to esm and update dependencies by @​aiqiaoy in actions/checkout#2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in actions/checkout#2462
• getting ready for checkout v7 release by @​aiqiaoy in actions/checkout#2464
• update error wording by @​aiqiaoy in actions/checkout#2467

New Contributors

• @​aiqiaoy made their first contribution in actions/checkout#2454

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

• [BREAKING] backport allow-unsafe-pr-checkout to v6 by @​aiqiaoy in actions/checkout#2500
• backport fixes to releases-v6 by @​aiqiaoy in actions/checkout#2527

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

• Update changelog by @​ericsciple in actions/checkout#2357
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414
• Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
• Update changelog for v6.0.3 by @​yaananth in actions/checkout#2446

New Contributors

• @​yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

• Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @​TingluoHuang in actions/checkout#2355

... (truncated)

Commits

• 3d3c42e prep v7.0.1 release (#2531)
• 2880268 escape values passed to --unset (#2530)
• 12cd223 trim only ascii whitespace for branch (#2521)
• 62661c4 skip running unsafe pr check if input is default (#2518)
• e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499)
• 631c942 eslint 9 (#2474)
• 4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476)
• ba09753 Bump actions/checkout from 6 to 7 (#2488)
• b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)
• e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)
• Additional commits viewable in compare view

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates GitHub Actions workflows to use actions/checkout v7.0.1 (mostly via pinned commit SHA) for consistency and to pick up the latest patch fixes.

Changes:

• Bump actions/checkout from v7.0.0 to v7.0.1 across multiple workflows using pinned SHAs.
• Update the DevSkim workflow’s actions/checkout reference from @v7 to @v7.0.1.

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
.github/workflows/server2019-sdntest.yml	Updates checkout action to v7.0.1 pinned SHA.
.github/workflows/server2019-sdntest-pr.yml	Updates checkout action to v7.0.1 pinned SHA for PR runs.
.github/workflows/scorecards.yml	Updates checkout action to v7.0.1 pinned SHA in scorecards job.
.github/workflows/powershell.yml	Updates checkout action to v7.0.1 pinned SHA for PowerShell CI.
.github/workflows/devskim.yml	Changes checkout from major tag to patched tag (not SHA-pinned).
.github/workflows/dependency-review.yml	Updates checkout action to v7.0.1 pinned SHA for dependency review.
.github/workflows/build-pipeline.yml	Updates checkout action to v7.0.1 pinned SHA in build pipeline.

[Copilot]

Pull request overview

Copilot reviewed 6 out of 6 changed files in this pull request and generated no new comments.

Comments suppressed due to low confidence (2)

.github/workflows/devskim.yml:27

• This workflow uses a mutable tag (@v7.0.1) while the other workflows pin actions/checkout by commit SHA. For supply-chain integrity and reproducibility, pin actions/checkout here to the same v7.0.1 commit SHA used elsewhere (and keep the version comment if desired).

        uses: actions/checkout@v7.0.1

.github/workflows/pester-tests.yml:26

• This changes actions/checkout from v5.0.1 to v7.0.1 (major-version upgrade) specifically for the Pester workflow, which can introduce behavior/runtime expectation changes compared to other jobs. If the repo intentionally standardizes on a major version per workflow, consider aligning all workflows on the same major version upgrade rationale and documenting the reason for the major bump (or upgrading any remaining older-version usages consistently).

        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1