deps(actions)(deps): bump actions/checkout from 7.0.0 to 7.0.1

[dependabot]

Bumps actions/checkout from 7.0.0 to 7.0.1.

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

• skip running unsafe pr check if input is default by @​aiqiaoy in actions/checkout#2518
• trim only ascii whitespace for branch by @​aiqiaoy in actions/checkout#2521
• escape values passed to --unset by @​aiqiaoy in actions/checkout#2530
• Various dependency updates

Full Changelog: actions/checkout@v7...v7.0.1

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Assignees

The following users could not be added as assignees: Coding-Dev-Tools/engineers. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🤖 Automated Code Review

✅ Ruff Lint — No issues

⚠️ Ruff Format — Formatting needed

unformatted: File would be reformatted
   --> src/api_contract_guardian/cli.py:1:1
    |
20  |
    -     warnings.warn(
    -         "revenueholdings-license not installed; license checks skipped", stacklevel=2
    -     )
21  +     warnings.warn("revenueholdings-license not installed; license checks skipped", stacklevel=2)
22  |     _has_rh = False
--------------------------------------------------------------------------------
53  |
    - def _validate_output_format(
    -     format_name: str, allowed: tuple[str, ...], command: str
    - ) -> str:
54  + def _validate_output_format(format_name: str, allowed: tuple[str, ...], command: str) -> str:
55  |     """Reject unsupported output formats before the command runs."""
56  |     if format_name not in allowed:
57  |         allowed_list = ", ".join(allowed)
    -         raise typer.BadParameter(
    -             f"Unsupported {command} format '{format_name}'. Choose from: {allowed_list}"
    -         )
58  +         raise typer.BadParameter(f"Unsupported {command} format '{format_name}'. Choose from: {allowed_list}")
59  |     return format_name
--------------------------------------------------------------------------------
93  |     global _require_license_strict
    -     _require_license_strict = require_license_flag or bool(
    -         os.environ.get("REVENUEHOLDINGS_REQUIRE_LICENSE")
    -     )
94  +     _require_license_strict = require_license_flag or bool(os.environ.get("REVENUEHOLDINGS_REQUIRE_LICENSE"))
95  |

✅ Secret Detection — Clean

✅ Large Files — Within limits

📊 Diff Stats — 4 file(s) changed

 .github/workflows/ci.yml             | 2 +-
 .github/workflows/cowork-auto-pr.yml | 2 +-
 .github/workflows/pages.yml          | 2 +-
 .github/workflows/publish.yml        | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

---

Verdict: ⚠️ Warnings — Lint/format issues found. Recommend fixing before merge.

Automated by Coding-Dev-Tools/.github reusable workflow.

[Coding-Dev-Tools]

✅ APPROVE — routine Dependabot bump

Reviewed: 4 workflow files, actions/checkout SHA pin updates

Assessment

• Scope: SHA pin updates for from 7.0.0 () to 7.0.1 () across ci.yml, cowork-auto-pr.yml, pages.yml, publish.yml
• CI: All checks green — 5 checks passed
• Risk: Minimal — minor version bump of official GitHub checkout action
• Security: No supply-chain concerns; official first-party action with pinned SHA

Verdict: Safe to merge.

---

Automated review by Pre-PR Code Analyzer (Hermes cron) — 2026-08-09T

[Coding-Dev-Tools]

✅ APPROVE — routine Dependabot bump

Reviewed: 4 workflow files, actions/checkout SHA pin updates

Assessment

• Scope: SHA pin updates for actions/checkout from 7.0.0 (9c091bb) to 7.0.1 (3d3c42e) across ci.yml, cowork-auto-pr.yml, pages.yml, publish.yml
• CI: All checks green — 5 checks passed
• Risk: Minimal — minor version bump of official GitHub checkout action
• Security: No supply-chain concerns; official first-party action with pinned SHA

Verdict: Safe to merge.

---

Automated review by Pre-PR Code Analyzer (Hermes cron) — 2026-08-09