ci: bump actions/checkout from 4.2.2 to 7.0.1

[dependabot]

Bumps actions/checkout from 4.2.2 to 7.0.1.

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

• skip running unsafe pr check if input is default by @​aiqiaoy in actions/checkout#2518
• trim only ascii whitespace for branch by @​aiqiaoy in actions/checkout#2521
• escape values passed to --unset by @​aiqiaoy in actions/checkout#2530
• Various dependency updates

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

• block checking out fork pr for pull_request_target and workflow_run by @​aiqiaoy in actions/checkout#2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in actions/checkout#2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in actions/checkout#2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in actions/checkout#2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in actions/checkout#2459
• upgrade module to esm and update dependencies by @​aiqiaoy in actions/checkout#2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in actions/checkout#2462
• getting ready for checkout v7 release by @​aiqiaoy in actions/checkout#2464
• update error wording by @​aiqiaoy in actions/checkout#2467

New Contributors

• @​aiqiaoy made their first contribution in actions/checkout#2454

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

• [BREAKING] backport allow-unsafe-pr-checkout to v6 by @​aiqiaoy in actions/checkout#2500
• backport fixes to releases-v6 by @​aiqiaoy in actions/checkout#2527

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

• Update changelog by @​ericsciple in actions/checkout#2357
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414
• Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
• Update changelog for v6.0.3 by @​yaananth in actions/checkout#2446

New Contributors

• @​yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

• Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @​TingluoHuang in actions/checkout#2355

... (truncated)

Commits

• 3d3c42e prep v7.0.1 release (#2531)
• 2880268 escape values passed to --unset (#2530)
• 12cd223 trim only ascii whitespace for branch (#2521)
• 62661c4 skip running unsafe pr check if input is default (#2518)
• e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499)
• 631c942 eslint 9 (#2474)
• 4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476)
• ba09753 Bump actions/checkout from 6 to 7 (#2488)
• b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)
• e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🔍 CodeQL Report

Language: c-cpp
Errors: 0 | Warnings: 50 | Notes: 0

⚠️ Warnings (50)

Rule	Location	Message
cpp/integer-multiplication-cast-to-long	ThirdParty/AI/recastnavigation/Recast/Source/RecastMesh.cpp:1137	Multiplication result may overflow 'int' before it is converted to 'unsigned long'.
cpp/integer-multiplication-cast-to-long	ThirdParty/AI/recastnavigation/Recast/Source/RecastMesh.cpp:878	Multiplication result may overflow 'int' before it is converted to 'unsigned long'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/audio/SDL_audiocvt.c:260	Multiplication result may overflow 'int' before it is converted to 'unsigned long'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/render/SDL_yuv_sw.c:126	Multiplication result may overflow 'int' before it is converted to 'unsigned long'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/render/SDL_yuv_sw.c:190	Multiplication result may overflow 'int' before it is converted to 'unsigned long'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/render/SDL_render.c:2410	Multiplication result may overflow 'float' before it is converted to 'double'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/render/SDL_render.c:2412	Multiplication result may overflow 'float' before it is converted to 'double'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/render/SDL_render.c:2429	Multiplication result may overflow 'float' before it is converted to 'double'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/render/SDL_render.c:2436	Multiplication result may overflow 'float' before it is converted to 'double'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/render/SDL_render.c:2448	Multiplication result may overflow 'float' before it is converted to 'double'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/render/SDL_render.c:2455	Multiplication result may overflow 'float' before it is converted to 'double'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/render/opengl/SDL_render_gl.c:486	Multiplication result may overflow 'int' before it is converted to 'unsigned long'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/render/opengl/SDL_render_gl.c:491	Multiplication result may overflow 'int' before it is converted to 'unsigned long'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/render/opengles/SDL_render_gles.c:913	Multiplication result may overflow 'int' before it is converted to 'size_t'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/render/opengles/SDL_render_gles.c:604	Multiplication result may overflow 'int' before it is converted to 'unsigned long'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/render/opengles/SDL_render_gles.c:426	Multiplication result may overflow 'int' before it is converted to 'size_t'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/render/opengles/SDL_render_gles.c:341	Multiplication result may overflow 'int' before it is converted to 'size_t'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/render/opengles2/SDL_render_gles2.c:1486	Multiplication result may overflow 'int' before it is converted to 'unsigned long'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/render/opengles2/SDL_render_gles2.c:1489	Multiplication result may overflow 'int' before it is converted to 'unsigned long'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/video/SDL_stretch.c:419	Multiplication result may overflow 'int' before it is converted to 'long'.
cpp/integer-multiplication-cast-to-long	ThirdParty/SDL2/src/video/SDL_stretch.c:294	Multiplication result may overflow 'int' before it is converted to 'long'.
cpp/integer-multiplication-cast-to-long	ThirdParty/Utils/stb/stb_image.h:177	Multiplication result may overflow 'int' before it is converted to 'size_t'.
cpp/integer-multiplication-cast-to-long	ThirdParty/Utils/json/nlohmann_json.h:629	Multiplication result may overflow 'int' before it is converted to 'size_type'.
cpp/integer-multiplication-cast-to-long	ThirdParty/Utils/json/nlohmann_json.h:630	Multiplication result may overflow 'int' before it is converted to 'size_type'.
cpp/integer-multiplication-cast-to-long	ThirdParty/Physics/JoltPhysics/Jolt/Physics/Collision/Shape/HeightFieldShape.cpp:209	Multiplication result may overflow 'unsigned int' before it is converted to 'unsigned long'.
cpp/integer-multiplication-cast-to-long	ThirdParty/Physics/JoltPhysics/Jolt/Physics/Collision/Shape/HeightFieldShape.cpp:1026	Multiplication result may overflow 'unsigned int' before it is converted to 'unsigned long'.
cpp/integer-multiplication-cast-to-long	ThirdParty/Physics/JoltPhysics/Jolt/Physics/Collision/Shape/HeightFieldShape.cpp:1162	Multiplication result may overflow 'unsigned int' before it is converted to 'unsigned long'.
cpp/integer-multiplication-cast-to-long	ThirdParty/Physics/JoltPhysics/Jolt/Physics/Collision/Shape/HeightFieldShape.cpp:1615	Multiplication result may overflow 'unsigned int' before it is converted to 'size_type'.
cpp/integer-multiplication-cast-to-long	ThirdParty/Physics/JoltPhysics/Jolt/Physics/Collision/Shape/HeightFieldShape.cpp:531	Multiplication result may overflow 'unsigned int' before it is converted to 'size_type'.
cpp/integer-multiplication-cast-to-long	ThirdParty/Physics/JoltPhysics/Jolt/Physics/Collision/Shape/HeightFieldShape.cpp:589	Multiplication result may overflow 'unsigned int' before it is converted to 'size_type'.
...	...	20 more findings omitted

Updated: 2026-07-27T04:26:36Z — this comment is updated in-place, not duplicated.

[github-actions]

Code Coverage (GCC + lcov)

Utils/StringUtils.h                            |18.1%   116| 0.0%  21|    -    0
Utils/Telemetry.h                              |20.6%   136| 0.0%  23|    -    0
Utils/ThreadDebugger.h                         |11.6%   199| 0.0%  23|    -    0
Utils/ThreadSafeQueue.h                        |27.5%    40| 0.0%  11|    -    0
Utils/Timer.cpp                                |19.4%    36| 0.0%   7|    -    0
Utils/Timer.h                                  | 100%     2| 0.0%   2|    -    0
Utils/TimerManager.h                           |18.6%   102| 0.0%  19|    -    0
Utils/Tween.h                                  |26.3%    38| 0.0%   6|    -    0
Utils/UUID.h                                   |43.2%    37| 0.0%  16|    -    0
Utils/Validate.h                               |    -     0|    -   0|    -    0
Utils/WineDetection.cpp                        |23.1%    39| 0.0%   9|    -    0

[/home/runner/work/SparkEngine/SparkEngine/SparkSDK/Include/Spark/]
IEngineContext.h                               |7300%     1| 0.0%   1|    -    0
IModule.h                                      | 800%     1| 0.0%   1|    -    0
ServiceInterfaces.h                            | 200%     3| 0.0%   3|    -    0
Version.h                                      |    -     0|    -   0|    -    0

[/home/runner/work/SparkEngine/SparkEngine/Templates/EmptyProject/Source/]
GameModule.h                                   |38.9%    18| 0.0%   6|    -    0

[/home/runner/work/SparkEngine/SparkEngine/Templates/FPSStarter/Source/]
GameModule.h                                   |36.0%    25| 0.0%   7|    -    0

[/home/runner/work/SparkEngine/SparkEngine/Templates/MultiplayerArena/Source/]
GameModule.h                                   |34.6%    26| 0.0%   7|    -    0

[/home/runner/work/SparkEngine/SparkEngine/Templates/PlatformerKit/Source/]
GameModule.h                                   |25.0%    32| 0.0%   7|    -    0

[/home/runner/work/SparkEngine/SparkEngine/Templates/RPGStarter/Source/]
GameModule.h                                   |37.5%    24| 0.0%   8|    -    0
================================================================================
                                         Total:|28.3% 39935| 0.0%  6k|    -    0

Per-Subsystem Coverage

Subsystem	Lines	Hit	Coverage	Threshold	Status
AI	3805	1083	28.5%	35%	❌
Animation	1581	538	34%	35%	❌
Audio	0	0	0%	30%	✅
Camera	0	0	0%	40%	✅
Core	5070	3111	61.4%	40%	✅
ECS	750	345	46%	40%	✅
Editor	7598	3084	40.6%	25%	✅
GameModules	8007	4415	55.1%	30%	✅
Graphics	17712	9182	51.8%	30%	✅
Networking	3828	2715	70.9%	35%	✅
Physics	0	0	0%	35%	✅
Scripting	1053	362	34.4%	30%	✅
Utils	10495	6637	63.2%	60%	✅

Total: 52.5% (31472/59899 lines)