chore(deps): update actions/checkout action to v7

[renovate-sh-app]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v6.1.0 → v7.0.1

---

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source

• Skip running unsafe pr check if input is default by @​aiqiaoy in #​2518
• Trim only ascii whitespace for branch by @​aiqiaoy in #​2521
• Escape values passed to --unset by @​aiqiaoy in #​2530
• Various dependency updates

v7.0.0

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • On day 1 of the month, every 3 months (* * 1 */3 *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

[github-actions]

⚠️ The workflow jobs listed below don't declare a permissions: block and may break when the organization's default GITHUB_TOKEN permissions are restricted to read-only.

Expand for findings

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/ci.yml:1:1
   |
 1 | / name: CI
 2 | |
 3 | | on:
 4 | |   push:
...  |
36 | |       - run: go install go.k6.io/xk6/cmd/xk6@latest
37 | |       - run: xk6 build --verbose --with github.com/grafana/xk6-docs=.
   | |______________________________________________________________________^ default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/ci.yml:9:3
   |
 9 | /   lint:
10 | |     runs-on: ubuntu-latest
11 | |     steps:
12 | |       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
...  |
17 | |         with:
18 | |           version: v2.10.1
   | |                          ^
   | |                          |
   | |__________________________this job
   |                            default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/ci.yml:20:3
   |
20 | /   test:
21 | |     runs-on: ubuntu-latest
22 | |     steps:
23 | |       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
...  |
26 | |           go-version-file: go.mod
27 | |       - run: go test -race -count=1 ./...
   | |                                         ^
   | |                                         |
   | |_________________________________________this job
   |                                           default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/ci.yml:29:3
   |
29 | /   build:
30 | |     runs-on: ubuntu-latest
31 | |     steps:
32 | |       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
...  |
36 | |       - run: go install go.k6.io/xk6/cmd/xk6@latest
37 | |       - run: xk6 build --verbose --with github.com/grafana/xk6-docs=.
   | |                                                                      ^
   | |                                                                      |
   | |______________________________________________________________________this job
   |                                                                        default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/sync.yml:9:3
   |
 9 | /   sync:
10 | |     runs-on: ubuntu-latest
11 | |     steps:
12 | |       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
...  |
42 | |             echo "=== Done: $BUNDLE ==="
43 | |           done
   | |               ^
   | |               |
   | |_______________this job
   |                 default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

[renovate-sh-app]

Rebase requested. Renovate is processing this repository now.