Update shared checkout action to v7

[pxLi]

Description

Update the shared checkout wrapper from actions/checkout@v6 to actions/checkout@v7, following the existing major-version reference convention. The v7 tag currently resolves to the latest stable release, v7.0.1.

Preserve all existing wrapper inputs, defaults, and forwarding. No workflow triggers, permissions, repository policies, or other shared actions are changed.

Checkout v7 adds protection against checking out fork pull request code in pull_request_target and workflow_run workflows. Keep that protection enabled; this change does not expose or enable the unsafe-checkout override. The existing privileged callers checked use trusted base/default-branch refs, and the shared signoff action explicitly checks out NVIDIA/spark-rapids-common at main.

References

• Latest stable checkout release: v7.0.1
• Checkout v7.0.0 release notes and privileged-checkout protection
• GitHub Actions Node 20 deprecation announcement. Both checkout v6 and v7 already use Node 24; this PR updates the shared dependency to the latest stable major version, rather than fixing a remaining Node 20 runtime in the wrapper.

Validation

• YAML parsing and structural comparison passed: the checkout action version is the only semantic change.
• Verified all 20 forwarded inputs remain supported by checkout v7 and the unsafe-checkout override remains disabled by default.
• Verified the v7 tag matches the latest stable v7.0.1 release.
• Inspected current default-branch workflow callers across the seven active Spark repositories and the shared signoff action for compatibility with the privileged-checkout guard.
• git diff --check passed.
• Live checkout execution remains to be validated in GitHub Actions; existing repository workflows reference the published common action at main, not this PR branch.

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge because the dependency-only update preserves the wrapper contract and no incompatible repository caller was identified.

Summary

Updates the shared checkout composite action from actions/checkout@v6 to actions/checkout@v7.

• Preserves the wrapper's existing inputs, defaults, and forwarding.
• Leaves workflow triggers, permissions, and other action dependencies unchanged.
• Adds a final newline to the action metadata file.

_{Reviews (1) · Last reviewed commit: "Update shared checkout action to v7"}