chore(deps): update actions/checkout action to v7

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v6.0.3 → v7.0.0

---

Release Notes

actions/checkout (actions/checkout)

v7.0.0

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v7

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 6d2563b7-4db8-4391-b32c-7ed8e374c692

📥 Commits

Reviewing files that changed from the base of the PR and between 0d2c9e9 and b5a8c3e.

📒 Files selected for processing (4)

• .github/workflows/autofix.yml
• .github/workflows/pr.yml
• .github/workflows/release.yml
• .github/workflows/zizmor.yml

---

📝 Walkthrough

Walkthrough

Four GitHub Actions workflow files (autofix.yml, pr.yml, release.yml, zizmor.yml) are updated to replace the pinned actions/checkout commit SHA from v6.0.3 to v7.0.0. Seven single-line changes are made; no other workflow logic is modified.

Changes

actions/checkout v7.0.0 upgrade

Layer / File(s)	Summary
Update actions/checkout pin to v7.0.0 .github/workflows/autofix.yml, .github/workflows/pr.yml, .github/workflows/release.yml, .github/workflows/zizmor.yml	All uses: actions/checkout@<SHA> lines are updated from the v6.0.3 pinned commit to the v7.0.0 pinned commit. In pr.yml, four jobs (test, preview, provenance, version-preview) are each updated individually.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐇 Hop, hop, hooray, a fresh checkout in sight,
From v6 to v7, we leap with delight!
Seven little lines, all tidy and neat,
New SHA pins secured, the workflow's complete.
A bunny approves — the CI looks right! 🌟

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The PR description is largely incomplete. While it includes release notes and configuration details from Renovate, it does not follow the repository's required template structure, missing the 'Changes' section, checklist items, and release impact assessment.	Add a 'Changes' section explaining the motivation for the update and complete the checklist. Clarify whether this is CI/dev-only or requires a changeset.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and specifically describes the main change: updating actions/checkout to v7, which matches the primary objective of the PR.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/actions-checkout-7.x

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[nx-cloud]

View your CI Pipeline Execution ↗ for commit b5a8c3e

Command	Status	Duration	Result
nx affected --targets=test:sherif,test:docs,tes...	✅ Succeeded	<1s	View ↗
nx run-many --target=build	✅ Succeeded	<1s	View ↗

---

☁️ Nx Cloud last updated this comment at 2026-06-19 11:15:54 UTC

[github-actions]

🚀 Changeset Version Preview

No changeset entries found. Merging this PR will not cause a version bump for any packages.

[pkg-pr-new]

npm i https://pkg.pr.new/@tanstack/eslint-config@393

npm i https://pkg.pr.new/@tanstack/publish-config@393

npm i https://pkg.pr.new/@tanstack/typedoc-config@393

npm i https://pkg.pr.new/@tanstack/vite-config@393

commit: b5a8c3e