Bump actions/checkout from 7.0.0 to 7.0.1

[dependabot]

Bumps actions/checkout from 7.0.0 to 7.0.1.

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

• skip running unsafe pr check if input is default by @​aiqiaoy in actions/checkout#2518
• trim only ascii whitespace for branch by @​aiqiaoy in actions/checkout#2521
• escape values passed to --unset by @​aiqiaoy in actions/checkout#2530
• Various dependency updates

Full Changelog: actions/checkout@v7...v7.0.1

Changelog

Sourced from actions/checkout's changelog.

v7.0.1

• Skip running unsafe pr check if input is default by @​aiqiaoy in actions/checkout#2518
• Trim only ascii whitespace for branch by @​aiqiaoy in actions/checkout#2521
• Escape values passed to --unset by @​aiqiaoy in actions/checkout#2530
• Various dependency updates

Commits

• 3d3c42e prep v7.0.1 release (#2531)
• 2880268 escape values passed to --unset (#2530)
• 12cd223 trim only ascii whitespace for branch (#2521)
• 62661c4 skip running unsafe pr check if input is default (#2518)
• e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499)
• 631c942 eslint 9 (#2474)
• 4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476)
• ba09753 Bump actions/checkout from 6 to 7 (#2488)
• b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)
• e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

PR Code Review

Summary: This PR bumps actions/checkout from v7.0.1 to v7.0.1 across 17 GitHub Actions workflow files. Purely mechanical version-pin updates, consistent with a Dependabot-style bump. No application code, snippets, or documentation changed.

Code Quality

• ✅ Style conventions — All changes are single-line version bumps (v7.0.0 → v7.0.1) in existing YAML files. Formatting and indentation are unchanged and consistent across all 17 files.
• ✅ No commented-out code — None present.
• ✅ Meaningful variable names — N/A (no code variables; this is a CI action-version bump).
• ✅ DRY principle — N/A. Each workflow file necessarily pins the action version independently; this is standard GitHub Actions practice, not a DRY violation.
• ✅ Defects (bugs, logic errors, edge cases, crashes, race conditions, memory leaks, security) — No functional logic changed. actions/checkout@v7.0.1 is a patch release; no breaking changes to with: persist-credentials: false usage, which is preserved correctly in every file (e.g. .github/workflows/bearer.yaml:22, .github/workflows/black.yaml:27, .github/workflows/csharp-linux-snippets.yaml:42).
• ✅ .claude/CLAUDE.md review — Not modified by this PR. No changes to assess against local-environment-specificity concerns.

Testing

• ✅ N/A — No application/unit-testable code changed. CI workflow correctness will be implicitly validated by the workflows themselves running on this PR.

Documentation

• ✅ N/A — No README, API docs, or CHANGELOG.md impact expected for a routine CI dependency bump. No markdown files were touched in this diff.

Security

• ✅ No hardcoded credentials — None introduced.
• ✅ Input validation — N/A.
• ✅ Error handling — N/A.
• ✅ No sensitive data in logs — N/A.
• ✅ License files (.lic) / AQAAAD strings — None present in this diff.

Overall

No issues found. This is a low-risk, mechanical dependency-version bump (checkout action patch release) applied uniformly and correctly across all workflow files. Approve.

Automated code review analyzing defects and coding standards

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

PR Code Review

This PR is a routine dependency bump: actions/checkout pinned version updated from v7.0.1 → wait, actually from v7.0.0 → v7.0.1 across 17 GitHub Actions workflow files. No application code, snippets, or documentation changed.

Code Quality

• ✅ Style conventions — All changes are single-line version bumps (uses: actions/checkout@v7.0.0 → @v7.0.1), consistent with existing YAML formatting in every file (e.g. .github/workflows/bearer.yaml:22, .github/workflows/black.yaml:27, .github/workflows/csharp-linux-snippets.yaml:42).
• ✅ No commented-out code — None present.
• ✅ Meaningful variable names — N/A, no variables introduced.
• ✅ DRY principle — N/A; each workflow file independently pins the action version, which is standard/expected for GitHub Actions (no shared config mechanism exists for this).
• ✅ Defects — No logic errors possible in this change. Version bump is a patch release; persist-credentials: false is preserved unchanged in every file, so no regression to the existing credential-hygiene setting.
• ✅ CLAUDE.md consideration — Not touched by this PR; no issue to flag.

Testing

• ✅ N/A — This is an infra/CI dependency bump with no functional code change. No unit/integration tests are applicable.

Documentation

• ⚠️ CHANGELOG.md — Not updated. Minor/patch CI dependency bumps are often excluded from changelogs by convention (especially for dependabot-authored PRs), but confirm this matches this repo's existing practice (check whether prior actions/checkout bump PRs, e.g. a7bc65b, updated CHANGELOG.md — if not, this is consistent and fine).
• ✅ Markdown formatting — No .md files changed in this diff.
• ✅ Inline comments — N/A.

Security

• ✅ No hardcoded credentials — None present.
• ✅ No license files — No .lic files or AQAAAD-prefixed strings in this diff.
• ✅ Sensitive data in logs — N/A.
• ✅ Overall security impact — Positive/neutral; bumping to a newer patch release of actions/checkout is a routine supply-chain hygiene update. Confirm the pinned reference is the full commit SHA rather than a mutable tag if this repo's security policy requires SHA-pinning for third-party actions (currently pinned by version tag v7.0.1, matching the pre-existing convention of v7.0.0, so no regression — but worth a follow-up if SHA-pinning is desired repo-wide).

Summary

No blocking issues. This is a low-risk, mechanical dependabot version bump correctly applied across all 17 workflow files with no inconsistencies. Safe to merge.

Automated code review analyzing defects and coding standards