meta: bump actions/checkout from 6.0.2 to 7.0.0

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6.0.2...9c091bb)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
PR-URL: #64245
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>

Author: dependabot[bot]

.github/workflows/build-tarball.yml

@@ -41,7 +41,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}
@@ -71,7 +71,7 @@ jobs:
 SCCACHE_GHA_ENABLED: ${{ github.base_ref == 'main' || github.ref_name == 'main' }}
 SCCACHE_IDLE_TIMEOUT: '0'
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
 sparse-checkout: .github/actions/install-clang

.github/workflows/codeql.yml

@@ -24,7 +24,7 @@ jobs:
 
 steps:
  - name: Checkout repository
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 
 # Initializes the CodeQL tools for scanning.
  - name: Initialize CodeQL

.github/workflows/commit-lint.yml

@@ -20,7 +20,7 @@ jobs:
 run: |
  echo "plusOne=$((${{ github.event.pull_request.commits }} + 1))" >> $GITHUB_OUTPUT
  echo "minusOne=$((${{ github.event.pull_request.commits }} - 1))" >> $GITHUB_OUTPUT
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 fetch-depth: ${{ steps.nb-of-commits.outputs.plusOne }}
 persist-credentials: false

.github/workflows/commit-queue.yml

@@ -59,7 +59,7 @@ jobs:
 if: needs.get_mergeable_prs.outputs.numbers != ''
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 # A personal token is required because pushing with GITHUB_TOKEN will
 # prevent commits from running CI after they land. It needs

.github/workflows/coverage-linux-without-intl.yml

@@ -49,7 +49,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-24.04
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/coverage-linux.yml

@@ -49,7 +49,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-24.04-arm
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/coverage-windows.yml

@@ -69,7 +69,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: windows-2025
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/create-release-proposal.yml

@@ -33,7 +33,7 @@ jobs:
 RELEASE_LINE: ${{ inputs.release-line }}
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 ref: ${{ env.STAGING_BRANCH }}
 persist-credentials: false

.github/workflows/daily-wpt-fyi.yml

@@ -63,7 +63,7 @@ jobs:
  SHORT_SHA=$(node -p 'process.version.split(/-nightly\d{8}/)[1]')
  echo "NIGHTLY_REF=$(gh api /repos/nodejs/node/commits/$SHORT_SHA --jq '.sha')" >> $GITHUB_ENV
  - name: Checkout ${{ steps.setup-node.outputs.node-version }}
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
 ref: ${{ env.NIGHTLY_REF || steps.setup-node.outputs.node-version }}
@@ -79,7 +79,7 @@ jobs:
 run: rm -rf wpt
 working-directory: test/fixtures
  - name: Checkout epochs/daily WPT
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 repository: web-platform-tests/wpt
 persist-credentials: false
@@ -110,7 +110,7 @@ jobs:
 # version-specific checkout above overwrites .github/actions/
  - name: Checkout undici WPT actions
 if: ${{ env.WPT_REPORT != '' }}
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 sparse-checkout: |
  .github/actions/undici-wpt-current

.github/workflows/daily.yml

@@ -16,7 +16,7 @@ jobs:
 if: github.repository == 'nodejs/node' || github.event_name == 'workflow_dispatch'
 runs-on: ubuntu-24.04-arm
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Use Node.js ${{ env.NODE_VERSION }}

.github/workflows/build-tarball.yml

@@ -41,7 +41,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}
@@ -71,7 +71,7 @@ jobs:
 SCCACHE_GHA_ENABLED: ${{ github.base_ref == 'main' || github.ref_name == 'main' }}
 SCCACHE_IDLE_TIMEOUT: '0'
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
 sparse-checkout: .github/actions/install-clang

.github/workflows/codeql.yml

@@ -24,7 +24,7 @@ jobs:
 
 steps:
  - name: Checkout repository
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 
 # Initializes the CodeQL tools for scanning.
  - name: Initialize CodeQL

.github/workflows/commit-lint.yml

@@ -20,7 +20,7 @@ jobs:
 run: |
  echo "plusOne=$((${{ github.event.pull_request.commits }} + 1))" >> $GITHUB_OUTPUT
  echo "minusOne=$((${{ github.event.pull_request.commits }} - 1))" >> $GITHUB_OUTPUT
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 fetch-depth: ${{ steps.nb-of-commits.outputs.plusOne }}
 persist-credentials: false

.github/workflows/commit-queue.yml

@@ -59,7 +59,7 @@ jobs:
 if: needs.get_mergeable_prs.outputs.numbers != ''
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 # A personal token is required because pushing with GITHUB_TOKEN will
 # prevent commits from running CI after they land. It needs

.github/workflows/coverage-linux-without-intl.yml

@@ -49,7 +49,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-24.04
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/coverage-linux.yml

@@ -49,7 +49,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-24.04-arm
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/coverage-windows.yml

@@ -69,7 +69,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: windows-2025
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/create-release-proposal.yml

@@ -33,7 +33,7 @@ jobs:
 RELEASE_LINE: ${{ inputs.release-line }}
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 ref: ${{ env.STAGING_BRANCH }}
 persist-credentials: false

.github/workflows/daily-wpt-fyi.yml

@@ -63,7 +63,7 @@ jobs:
  SHORT_SHA=$(node -p 'process.version.split(/-nightly\d{8}/)[1]')
  echo "NIGHTLY_REF=$(gh api /repos/nodejs/node/commits/$SHORT_SHA --jq '.sha')" >> $GITHUB_ENV
  - name: Checkout ${{ steps.setup-node.outputs.node-version }}
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
 ref: ${{ env.NIGHTLY_REF || steps.setup-node.outputs.node-version }}
@@ -79,7 +79,7 @@ jobs:
 run: rm -rf wpt
 working-directory: test/fixtures
  - name: Checkout epochs/daily WPT
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 repository: web-platform-tests/wpt
 persist-credentials: false
@@ -110,7 +110,7 @@ jobs:
 # version-specific checkout above overwrites .github/actions/
  - name: Checkout undici WPT actions
 if: ${{ env.WPT_REPORT != '' }}
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 sparse-checkout: |
  .github/actions/undici-wpt-current

.github/workflows/daily.yml

@@ -16,7 +16,7 @@ jobs:
 if: github.repository == 'nodejs/node' || github.event_name == 'workflow_dispatch'
 runs-on: ubuntu-24.04-arm
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Use Node.js ${{ env.NODE_VERSION }}

.github/workflows/build-tarball.yml

@@ -41,7 +41,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}
@@ -71,7 +71,7 @@ jobs:
 SCCACHE_GHA_ENABLED: ${{ github.base_ref == 'main' || github.ref_name == 'main' }}
 SCCACHE_IDLE_TIMEOUT: '0'
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
 sparse-checkout: .github/actions/install-clang

.github/workflows/codeql.yml

@@ -24,7 +24,7 @@ jobs:
 
 steps:
  - name: Checkout repository
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 
 # Initializes the CodeQL tools for scanning.
  - name: Initialize CodeQL

.github/workflows/commit-lint.yml

@@ -20,7 +20,7 @@ jobs:
 run: |
  echo "plusOne=$((${{ github.event.pull_request.commits }} + 1))" >> $GITHUB_OUTPUT
  echo "minusOne=$((${{ github.event.pull_request.commits }} - 1))" >> $GITHUB_OUTPUT
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 fetch-depth: ${{ steps.nb-of-commits.outputs.plusOne }}
 persist-credentials: false

.github/workflows/commit-queue.yml

@@ -59,7 +59,7 @@ jobs:
 if: needs.get_mergeable_prs.outputs.numbers != ''
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 # A personal token is required because pushing with GITHUB_TOKEN will
 # prevent commits from running CI after they land. It needs

.github/workflows/coverage-linux-without-intl.yml

@@ -49,7 +49,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-24.04
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/coverage-linux.yml

@@ -49,7 +49,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-24.04-arm
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/coverage-windows.yml

@@ -69,7 +69,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: windows-2025
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/create-release-proposal.yml

@@ -33,7 +33,7 @@ jobs:
 RELEASE_LINE: ${{ inputs.release-line }}
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 ref: ${{ env.STAGING_BRANCH }}
 persist-credentials: false

.github/workflows/daily-wpt-fyi.yml

@@ -63,7 +63,7 @@ jobs:
  SHORT_SHA=$(node -p 'process.version.split(/-nightly\d{8}/)[1]')
  echo "NIGHTLY_REF=$(gh api /repos/nodejs/node/commits/$SHORT_SHA --jq '.sha')" >> $GITHUB_ENV
  - name: Checkout ${{ steps.setup-node.outputs.node-version }}
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
 ref: ${{ env.NIGHTLY_REF || steps.setup-node.outputs.node-version }}
@@ -79,7 +79,7 @@ jobs:
 run: rm -rf wpt
 working-directory: test/fixtures
  - name: Checkout epochs/daily WPT
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 repository: web-platform-tests/wpt
 persist-credentials: false
@@ -110,7 +110,7 @@ jobs:
 # version-specific checkout above overwrites .github/actions/
  - name: Checkout undici WPT actions
 if: ${{ env.WPT_REPORT != '' }}
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 sparse-checkout: |
  .github/actions/undici-wpt-current

.github/workflows/daily.yml

@@ -16,7 +16,7 @@ jobs:
 if: github.repository == 'nodejs/node' || github.event_name == 'workflow_dispatch'
 runs-on: ubuntu-24.04-arm
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Use Node.js ${{ env.NODE_VERSION }}

.github/workflows/build-tarball.yml

@@ -41,7 +41,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}
@@ -71,7 +71,7 @@ jobs:
 SCCACHE_GHA_ENABLED: ${{ github.base_ref == 'main' || github.ref_name == 'main' }}
 SCCACHE_IDLE_TIMEOUT: '0'
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
 sparse-checkout: .github/actions/install-clang

.github/workflows/codeql.yml

@@ -24,7 +24,7 @@ jobs:
 
 steps:
  - name: Checkout repository
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 
 # Initializes the CodeQL tools for scanning.
  - name: Initialize CodeQL

.github/workflows/commit-lint.yml

@@ -20,7 +20,7 @@ jobs:
 run: |
  echo "plusOne=$((${{ github.event.pull_request.commits }} + 1))" >> $GITHUB_OUTPUT
  echo "minusOne=$((${{ github.event.pull_request.commits }} - 1))" >> $GITHUB_OUTPUT
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 fetch-depth: ${{ steps.nb-of-commits.outputs.plusOne }}
 persist-credentials: false

.github/workflows/commit-queue.yml

@@ -59,7 +59,7 @@ jobs:
 if: needs.get_mergeable_prs.outputs.numbers != ''
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 # A personal token is required because pushing with GITHUB_TOKEN will
 # prevent commits from running CI after they land. It needs

.github/workflows/coverage-linux-without-intl.yml

@@ -49,7 +49,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-24.04
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/coverage-linux.yml

@@ -49,7 +49,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-24.04-arm
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/coverage-windows.yml

@@ -69,7 +69,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: windows-2025
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/create-release-proposal.yml

@@ -33,7 +33,7 @@ jobs:
 RELEASE_LINE: ${{ inputs.release-line }}
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 ref: ${{ env.STAGING_BRANCH }}
 persist-credentials: false

.github/workflows/daily-wpt-fyi.yml

@@ -63,7 +63,7 @@ jobs:
  SHORT_SHA=$(node -p 'process.version.split(/-nightly\d{8}/)[1]')
  echo "NIGHTLY_REF=$(gh api /repos/nodejs/node/commits/$SHORT_SHA --jq '.sha')" >> $GITHUB_ENV
  - name: Checkout ${{ steps.setup-node.outputs.node-version }}
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
 ref: ${{ env.NIGHTLY_REF || steps.setup-node.outputs.node-version }}
@@ -79,7 +79,7 @@ jobs:
 run: rm -rf wpt
 working-directory: test/fixtures
  - name: Checkout epochs/daily WPT
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 repository: web-platform-tests/wpt
 persist-credentials: false
@@ -110,7 +110,7 @@ jobs:
 # version-specific checkout above overwrites .github/actions/
  - name: Checkout undici WPT actions
 if: ${{ env.WPT_REPORT != '' }}
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 sparse-checkout: |
  .github/actions/undici-wpt-current

.github/workflows/daily.yml

@@ -16,7 +16,7 @@ jobs:
 if: github.repository == 'nodejs/node' || github.event_name == 'workflow_dispatch'
 runs-on: ubuntu-24.04-arm
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Use Node.js ${{ env.NODE_VERSION }}

.github/workflows/build-tarball.yml

@@ -41,7 +41,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}
@@ -71,7 +71,7 @@ jobs:
 SCCACHE_GHA_ENABLED: ${{ github.base_ref == 'main' || github.ref_name == 'main' }}
 SCCACHE_IDLE_TIMEOUT: '0'
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
 sparse-checkout: .github/actions/install-clang

.github/workflows/codeql.yml

@@ -24,7 +24,7 @@ jobs:
 
 steps:
  - name: Checkout repository
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 
 # Initializes the CodeQL tools for scanning.
  - name: Initialize CodeQL

.github/workflows/commit-lint.yml

@@ -20,7 +20,7 @@ jobs:
 run: |
  echo "plusOne=$((${{ github.event.pull_request.commits }} + 1))" >> $GITHUB_OUTPUT
  echo "minusOne=$((${{ github.event.pull_request.commits }} - 1))" >> $GITHUB_OUTPUT
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 fetch-depth: ${{ steps.nb-of-commits.outputs.plusOne }}
 persist-credentials: false

.github/workflows/commit-queue.yml

@@ -59,7 +59,7 @@ jobs:
 if: needs.get_mergeable_prs.outputs.numbers != ''
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 # A personal token is required because pushing with GITHUB_TOKEN will
 # prevent commits from running CI after they land. It needs

.github/workflows/coverage-linux-without-intl.yml

@@ -49,7 +49,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-24.04
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/coverage-linux.yml

@@ -49,7 +49,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-24.04-arm
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/coverage-windows.yml

@@ -69,7 +69,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: windows-2025
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/create-release-proposal.yml

@@ -33,7 +33,7 @@ jobs:
 RELEASE_LINE: ${{ inputs.release-line }}
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 ref: ${{ env.STAGING_BRANCH }}
 persist-credentials: false

.github/workflows/daily-wpt-fyi.yml

@@ -63,7 +63,7 @@ jobs:
  SHORT_SHA=$(node -p 'process.version.split(/-nightly\d{8}/)[1]')
  echo "NIGHTLY_REF=$(gh api /repos/nodejs/node/commits/$SHORT_SHA --jq '.sha')" >> $GITHUB_ENV
  - name: Checkout ${{ steps.setup-node.outputs.node-version }}
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
 ref: ${{ env.NIGHTLY_REF || steps.setup-node.outputs.node-version }}
@@ -79,7 +79,7 @@ jobs:
 run: rm -rf wpt
 working-directory: test/fixtures
  - name: Checkout epochs/daily WPT
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 repository: web-platform-tests/wpt
 persist-credentials: false
@@ -110,7 +110,7 @@ jobs:
 # version-specific checkout above overwrites .github/actions/
  - name: Checkout undici WPT actions
 if: ${{ env.WPT_REPORT != '' }}
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 sparse-checkout: |
  .github/actions/undici-wpt-current

.github/workflows/daily.yml

@@ -16,7 +16,7 @@ jobs:
 if: github.repository == 'nodejs/node' || github.event_name == 'workflow_dispatch'
 runs-on: ubuntu-24.04-arm
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Use Node.js ${{ env.NODE_VERSION }}

.github/workflows/build-tarball.yml

@@ -41,7 +41,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}
@@ -71,7 +71,7 @@ jobs:
 SCCACHE_GHA_ENABLED: ${{ github.base_ref == 'main' || github.ref_name == 'main' }}
 SCCACHE_IDLE_TIMEOUT: '0'
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
 sparse-checkout: .github/actions/install-clang

.github/workflows/codeql.yml

@@ -24,7 +24,7 @@ jobs:
 
 steps:
  - name: Checkout repository
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 
 # Initializes the CodeQL tools for scanning.
  - name: Initialize CodeQL

.github/workflows/commit-lint.yml

@@ -20,7 +20,7 @@ jobs:
 run: |
  echo "plusOne=$((${{ github.event.pull_request.commits }} + 1))" >> $GITHUB_OUTPUT
  echo "minusOne=$((${{ github.event.pull_request.commits }} - 1))" >> $GITHUB_OUTPUT
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 fetch-depth: ${{ steps.nb-of-commits.outputs.plusOne }}
 persist-credentials: false

.github/workflows/commit-queue.yml

@@ -59,7 +59,7 @@ jobs:
 if: needs.get_mergeable_prs.outputs.numbers != ''
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 # A personal token is required because pushing with GITHUB_TOKEN will
 # prevent commits from running CI after they land. It needs

.github/workflows/coverage-linux-without-intl.yml

@@ -49,7 +49,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-24.04
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/coverage-linux.yml

@@ -49,7 +49,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-24.04-arm
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/coverage-windows.yml

@@ -69,7 +69,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: windows-2025
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/create-release-proposal.yml

@@ -33,7 +33,7 @@ jobs:
 RELEASE_LINE: ${{ inputs.release-line }}
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 ref: ${{ env.STAGING_BRANCH }}
 persist-credentials: false

.github/workflows/daily-wpt-fyi.yml

@@ -63,7 +63,7 @@ jobs:
  SHORT_SHA=$(node -p 'process.version.split(/-nightly\d{8}/)[1]')
  echo "NIGHTLY_REF=$(gh api /repos/nodejs/node/commits/$SHORT_SHA --jq '.sha')" >> $GITHUB_ENV
  - name: Checkout ${{ steps.setup-node.outputs.node-version }}
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
 ref: ${{ env.NIGHTLY_REF || steps.setup-node.outputs.node-version }}
@@ -79,7 +79,7 @@ jobs:
 run: rm -rf wpt
 working-directory: test/fixtures
  - name: Checkout epochs/daily WPT
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 repository: web-platform-tests/wpt
 persist-credentials: false
@@ -110,7 +110,7 @@ jobs:
 # version-specific checkout above overwrites .github/actions/
  - name: Checkout undici WPT actions
 if: ${{ env.WPT_REPORT != '' }}
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 sparse-checkout: |
  .github/actions/undici-wpt-current

.github/workflows/daily.yml

@@ -16,7 +16,7 @@ jobs:
 if: github.repository == 'nodejs/node' || github.event_name == 'workflow_dispatch'
 runs-on: ubuntu-24.04-arm
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Use Node.js ${{ env.NODE_VERSION }}

.github/workflows/build-tarball.yml

@@ -41,7 +41,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}
@@ -71,7 +71,7 @@ jobs:
 SCCACHE_GHA_ENABLED: ${{ github.base_ref == 'main' || github.ref_name == 'main' }}
 SCCACHE_IDLE_TIMEOUT: '0'
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
 sparse-checkout: .github/actions/install-clang

.github/workflows/codeql.yml

@@ -24,7 +24,7 @@ jobs:
 
 steps:
  - name: Checkout repository
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 
 # Initializes the CodeQL tools for scanning.
  - name: Initialize CodeQL

.github/workflows/commit-lint.yml

@@ -20,7 +20,7 @@ jobs:
 run: |
  echo "plusOne=$((${{ github.event.pull_request.commits }} + 1))" >> $GITHUB_OUTPUT
  echo "minusOne=$((${{ github.event.pull_request.commits }} - 1))" >> $GITHUB_OUTPUT
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 fetch-depth: ${{ steps.nb-of-commits.outputs.plusOne }}
 persist-credentials: false

.github/workflows/commit-queue.yml

@@ -59,7 +59,7 @@ jobs:
 if: needs.get_mergeable_prs.outputs.numbers != ''
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 # A personal token is required because pushing with GITHUB_TOKEN will
 # prevent commits from running CI after they land. It needs

.github/workflows/coverage-linux-without-intl.yml

@@ -49,7 +49,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-24.04
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/coverage-linux.yml

@@ -49,7 +49,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-24.04-arm
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/coverage-windows.yml

@@ -69,7 +69,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: windows-2025
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/create-release-proposal.yml

@@ -33,7 +33,7 @@ jobs:
 RELEASE_LINE: ${{ inputs.release-line }}
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 ref: ${{ env.STAGING_BRANCH }}
 persist-credentials: false

.github/workflows/daily-wpt-fyi.yml

@@ -63,7 +63,7 @@ jobs:
  SHORT_SHA=$(node -p 'process.version.split(/-nightly\d{8}/)[1]')
  echo "NIGHTLY_REF=$(gh api /repos/nodejs/node/commits/$SHORT_SHA --jq '.sha')" >> $GITHUB_ENV
  - name: Checkout ${{ steps.setup-node.outputs.node-version }}
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
 ref: ${{ env.NIGHTLY_REF || steps.setup-node.outputs.node-version }}
@@ -79,7 +79,7 @@ jobs:
 run: rm -rf wpt
 working-directory: test/fixtures
  - name: Checkout epochs/daily WPT
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 repository: web-platform-tests/wpt
 persist-credentials: false
@@ -110,7 +110,7 @@ jobs:
 # version-specific checkout above overwrites .github/actions/
  - name: Checkout undici WPT actions
 if: ${{ env.WPT_REPORT != '' }}
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 sparse-checkout: |
  .github/actions/undici-wpt-current

.github/workflows/daily.yml

@@ -16,7 +16,7 @@ jobs:
 if: github.repository == 'nodejs/node' || github.event_name == 'workflow_dispatch'
 runs-on: ubuntu-24.04-arm
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Use Node.js ${{ env.NODE_VERSION }}

.github/workflows/build-tarball.yml

@@ -41,7 +41,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}
@@ -71,7 +71,7 @@ jobs:
 SCCACHE_GHA_ENABLED: ${{ github.base_ref == 'main' || github.ref_name == 'main' }}
 SCCACHE_IDLE_TIMEOUT: '0'
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
 sparse-checkout: .github/actions/install-clang

.github/workflows/codeql.yml

@@ -24,7 +24,7 @@ jobs:
 
 steps:
  - name: Checkout repository
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 
 # Initializes the CodeQL tools for scanning.
  - name: Initialize CodeQL

.github/workflows/commit-lint.yml

@@ -20,7 +20,7 @@ jobs:
 run: |
  echo "plusOne=$((${{ github.event.pull_request.commits }} + 1))" >> $GITHUB_OUTPUT
  echo "minusOne=$((${{ github.event.pull_request.commits }} - 1))" >> $GITHUB_OUTPUT
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 fetch-depth: ${{ steps.nb-of-commits.outputs.plusOne }}
 persist-credentials: false

.github/workflows/commit-queue.yml

@@ -59,7 +59,7 @@ jobs:
 if: needs.get_mergeable_prs.outputs.numbers != ''
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 # A personal token is required because pushing with GITHUB_TOKEN will
 # prevent commits from running CI after they land. It needs

.github/workflows/coverage-linux-without-intl.yml

@@ -49,7 +49,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-24.04
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/coverage-linux.yml

@@ -49,7 +49,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: ubuntu-24.04-arm
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/coverage-windows.yml

@@ -69,7 +69,7 @@ jobs:
 if: github.event.pull_request.draft == false
 runs-on: windows-2025
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Set up Python ${{ env.PYTHON_VERSION }}

.github/workflows/create-release-proposal.yml

@@ -33,7 +33,7 @@ jobs:
 RELEASE_LINE: ${{ inputs.release-line }}
 runs-on: ubuntu-slim
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 ref: ${{ env.STAGING_BRANCH }}
 persist-credentials: false

.github/workflows/daily-wpt-fyi.yml

@@ -63,7 +63,7 @@ jobs:
  SHORT_SHA=$(node -p 'process.version.split(/-nightly\d{8}/)[1]')
  echo "NIGHTLY_REF=$(gh api /repos/nodejs/node/commits/$SHORT_SHA --jq '.sha')" >> $GITHUB_ENV
  - name: Checkout ${{ steps.setup-node.outputs.node-version }}
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
 ref: ${{ env.NIGHTLY_REF || steps.setup-node.outputs.node-version }}
@@ -79,7 +79,7 @@ jobs:
 run: rm -rf wpt
 working-directory: test/fixtures
  - name: Checkout epochs/daily WPT
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 repository: web-platform-tests/wpt
 persist-credentials: false
@@ -110,7 +110,7 @@ jobs:
 # version-specific checkout above overwrites .github/actions/
  - name: Checkout undici WPT actions
 if: ${{ env.WPT_REPORT != '' }}
-uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 sparse-checkout: |
  .github/actions/undici-wpt-current

.github/workflows/daily.yml

@@ -16,7 +16,7 @@ jobs:
 if: github.repository == 'nodejs/node' || github.event_name == 'workflow_dispatch'
 runs-on: ubuntu-24.04-arm
 steps:
- - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10#v6.0.3
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0#v7.0.0
 with:
 persist-credentials: false
  - name: Use Node.js ${{ env.NODE_VERSION }}