[Sync] Update project files from source repository (1d213f1)

[mrz1836]

What Changed

• Updated actions/checkout action from commit df4cb1c069e1874edd31b4311f1884172cec0e10 (v6.0.3) to commit 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 (v7.0.0) across all GitHub Actions workflows and composite actions
• Updated references in 20 files including workflow files (fortress-benchmarks.yml, fortress-release.yml, codeql-analysis.yml, fortress-security-scans.yml, fortress-code-quality.yml, fortress-coverage.yml, fortress-completion-report.yml, fortress-setup-config.yml, fortress-test-fuzz.yml, fortress-pre-commit.yml, fortress-test-suite.yml, fortress-warm-cache.yml, fortress-test-matrix.yml, auto-merge-on-approval.yml, dependabot-auto-merge.yml, pull-request-management.yml, scorecard.yml, stale-check.yml, sync-labels.yml) and the warm-cache composite action
• All checkout action invocations maintain their existing configuration parameters (persist-credentials: false, fetch-depth settings, token parameters)

Why It Was Necessary

• Upgrading to the latest major version of actions/checkout ensures access to the newest features, performance improvements, and bug fixes
• Keeping GitHub Actions dependencies up-to-date reduces security vulnerabilities and ensures compatibility with the latest GitHub Actions platform features
• Standardizing on v7.0.0 across all workflows maintains consistency and simplifies future maintenance

Testing Performed

• Verified that all workflow files contain valid YAML syntax after the version update
• Confirmed that the checkout action configuration parameters (persist-credentials, fetch-depth, token) remain unchanged and compatible with v7.0.0
• CI workflows will execute with the updated action version to validate functionality across all affected workflows

Impact / Risk

• Risk Level: Low - This is a major version upgrade of a well-tested GitHub action with backwards compatibility maintained for standard use cases
• Breaking Changes: None expected - all existing configuration parameters used in the workflows are supported in v7.0.0
• CI Impact: Workflows may experience slight performance changes (typically improvements) due to action optimizations in the new version

[Copilot]

Pull request overview

This PR syncs CI configuration from the upstream template by upgrading all GitHub Actions workflow/composite-action checkouts to actions/checkout v7 (pinned by commit SHA) to keep the automation stack current and consistent across the repository.

Changes:

• Updated all actions/checkout invocations from v6.0.3 (pinned SHA) to v7.0.0 (pinned SHA).
• Applied the same checkout pin update inside the warm-cache composite action.
• Preserved existing checkout configuration (persist-credentials, fetch-depth, tokens, sparse checkout settings).

Reviewed changes

Copilot reviewed 20 out of 20 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
.github/actions/warm-cache/action.yml	Bumps pinned actions/checkout SHA to v7.0.0 within the warm-cache composite action.
.github/workflows/auto-merge-on-approval.yml	Bumps pinned actions/checkout SHA to v7.0.0.
.github/workflows/codeql-analysis.yml	Bumps pinned actions/checkout SHA to v7.0.0 for CodeQL workflow.
.github/workflows/dependabot-auto-merge.yml	Bumps pinned actions/checkout SHA to v7.0.0.
.github/workflows/fortress-benchmarks.yml	Bumps pinned actions/checkout SHA to v7.0.0.
.github/workflows/fortress-code-quality.yml	Bumps pinned actions/checkout SHA(s) to v7.0.0.
.github/workflows/fortress-completion-report.yml	Bumps pinned actions/checkout SHA to v7.0.0.
.github/workflows/fortress-coverage.yml	Bumps pinned actions/checkout SHA(s) to v7.0.0.
.github/workflows/fortress-pre-commit.yml	Bumps pinned actions/checkout SHA to v7.0.0.
.github/workflows/fortress-release.yml	Bumps pinned actions/checkout SHA to v7.0.0.
.github/workflows/fortress-security-scans.yml	Bumps pinned actions/checkout SHA to v7.0.0.
.github/workflows/fortress-setup-config.yml	Bumps pinned actions/checkout SHA(s) to v7.0.0.
.github/workflows/fortress-test-fuzz.yml	Bumps pinned actions/checkout SHA to v7.0.0.
.github/workflows/fortress-test-matrix.yml	Bumps pinned actions/checkout SHA to v7.0.0.
.github/workflows/fortress-test-suite.yml	Bumps pinned actions/checkout SHA to v7.0.0.
.github/workflows/fortress-warm-cache.yml	Bumps pinned actions/checkout SHA(s) to v7.0.0.
.github/workflows/pull-request-management.yml	Bumps pinned actions/checkout SHA(s) to v7.0.0 for security-critical base-ref checkouts.
.github/workflows/scorecard.yml	Bumps pinned actions/checkout SHA to v7.0.0 for Scorecard workflow.
.github/workflows/stale-check.yml	Bumps pinned actions/checkout SHA to v7.0.0.
.github/workflows/sync-labels.yml	Bumps pinned actions/checkout SHA(s) to v7.0.0.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[mrz1836]

LGTM!

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud