chore(deps): update actions/checkout action to v7.0.1

[scality-renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v7.0.0 → v7.0.1

---

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source

• Skip running unsafe pr check if input is default by @​aiqiaoy in #​2518
• Trim only ascii whitespace for branch by @​aiqiaoy in #​2521
• Escape values passed to --unset by @​aiqiaoy in #​2530
• Various dependency updates

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[github-actions]

Dependency Bump Evaluation

Version change: actions/checkout v7.0.0 → v7.0.1 (patch)
Author: scality-renovate[bot]

Changes:

• Skip running unsafe PR check if input is default (refines v7.0.0 fork PR security mechanism)
• Trim only ASCII whitespace for branch names (tighter input sanitization)
• Escape values passed to --unset (fixes potential injection in git config handling)
• Various dependency updates

Breaking changes: None

Security concerns: None — all three fixes are security-positive, hardening input sanitization and escaping

Impact on codebase: Minimal. Changes are limited to updating the SHA pin and version comment across 5 checkout steps in 2 CI workflow files (build.yaml, pre-merge.yaml). No application code affected. No checkout input parameters are changed — all steps use the same configuration as before.

CI status: Build passed. Lint, test, test-e2e, and generate checks are still in progress.

Recommendation: SAFE TO MERGE (once CI is green)

Notes: Automated approval skipped because the PR author is scality-renovate[bot], not dependabot[bot]. A human should approve after CI passes.

— Claude Code