chore(deps): update actions/checkout action to v7.0.1

[scality-renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v7.0.0 → v7.0.1

---

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source

• Skip running unsafe pr check if input is default by @​aiqiaoy in #​2518
• Trim only ascii whitespace for branch by @​aiqiaoy in #​2521
• Escape values passed to --unset by @​aiqiaoy in #​2530
• Various dependency updates

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[github-actions]

Dependency Bump Evaluation

Version change: v7.0.0 → v7.0.1 (patch)
Semver bump type: patch

Changes:

• Skip running unsafe PR check if input is default (relaxes fork PR blocking from v7.0.0 to only trigger on explicit input)
• Trim only ASCII whitespace for branch names (more precise handling, avoids issues with non-ASCII characters)
• Escape values passed to --unset (security fix — mitigates potential command injection)
• Various dependency updates

Breaking changes: None

Security concerns: None — the changes are security improvements. The --unset escaping fix hardens against command injection, and the unsafe PR check adjustment is a refinement of the v7.0.0 safety feature.

Impact on codebase: The three modified workflow files (agent-ci.yaml, promote.yaml, rpm-ci.yaml) all use basic actions/checkout with default inputs — no custom ref, no pull_request_target trigger, no branch-name overrides. None of the changed behaviors in v7.0.1 affect these usages. Note: review.yaml uses pull_request_target but is not modified by this PR.

CI status: Tests passed (test, el8, el9). Image, lint, and dependency-review checks still in progress at time of evaluation.

Recommendation: SAFE TO MERGE (once remaining CI checks pass)

Notes: Pure pin-hash update across 3 workflow files. All changes in v7.0.1 are bug fixes and security hardening with no behavioral impact on this repo's checkout usage.

— Claude Code