fix: add repository parameter to checkout steps for fork PR compatibility

When using pull_request_target trigger, the checkout step needs to
explicitly specify the repository to check out from the fork repo.
Otherwise, PRs from forks fail at checkout because the head SHA
doesn't exist in the base repository.

Also upgrade actions/checkout from v5 to v7.

Author: hudeng-go

.github/workflows/auto-tag.yml

@@ -16,9 +16,10 @@ jobs:
   auto_tag:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
           persist-credentials: false
       - name: get changelog version
         id: get-version

.github/workflows/build-distribution.yml

@@ -22,11 +22,12 @@ jobs:
     outputs:
       result: ${{ steps.result.outputs.RESULT }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         if: ${{ github.event.pull_request.head.sha }}
         with:
           ref: ${{ github.event.pull_request.head.sha }}
-      - uses: actions/checkout@v5
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+      - uses: actions/checkout@v7
         if: ${{ github.event_name == 'push' }}
         with:
           fetch-depth: 0
@@ -62,11 +63,12 @@ jobs:
           ssh-private-key: ${{ secrets.BUILD_SSH_PRIVATE_KEY }}
       - run: git config --global user.email "ci@deepin.org"
       - run: git config --global user.name "deepin-ci"
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         if: ${{ github.event.pull_request.head.sha }}
         with:
           ref: ${{ github.event.pull_request.head.sha }}
-      - uses: actions/checkout@v5
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+      - uses: actions/checkout@v7
         if: ${{ github.event_name == 'push' }}
         with:
           fetch-depth: 0
@@ -157,11 +159,12 @@ jobs:
     needs: [debian-setup]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         if: ${{ github.event.pull_request.head.sha }}
         with:
           ref: ${{ github.event.pull_request.head.sha }}
-      - uses: actions/checkout@v5
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+      - uses: actions/checkout@v7
         if: ${{ github.event_name == 'push' }}
         with:
           fetch-depth: 0
@@ -361,11 +364,12 @@ jobs:
     continue-on-error: true
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         if: ${{ github.event.pull_request.head.sha }}
         with:
           ref: ${{ github.event.pull_request.head.sha }}
-      - uses: actions/checkout@v5
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+      - uses: actions/checkout@v7
         if: ${{ github.event_name == 'push' }}
         with:
           fetch-depth: 0

.github/workflows/commitlint.yml

@@ -7,9 +7,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Fetch code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
           fetch-depth: 0
 
       - name: check PR description for AI co-author pattern

.github/workflows/doc-check.yml

@@ -57,9 +57,10 @@ jobs:
           echo "Init failed after $retries attempts. Giving up."
           exit 1
 
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
           persist-credentials: false
 
       - uses: linuxdeepin/action-doxygencheck@master

.github/workflows/dtk-unittest.yml

@@ -20,11 +20,12 @@ jobs:
         - /sys/fs/cgroup:/sys/fs/cgroup
         - /etc/machine-id:/etc/machine-id
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         if: ${{ github.event.pull_request.head.sha }}
         with:
           ref: ${{ github.event.pull_request.head.sha }}
-      - uses: actions/checkout@v5
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+      - uses: actions/checkout@v7
         if: ${{ github.event_name == 'push' }}
 
       - name: Install Dependences

.github/workflows/license-check.yml

@@ -5,11 +5,12 @@ jobs:
   Check-License:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           # fetch-depth: 0 必不可少，否则 git diff 找不到对比基准
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha }}
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
 
       - name: Setup Python
         id: python
@@ -113,9 +114,10 @@ jobs:
   Check-README:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
       - name: Install zsh
         run: |
           sudo sed -i 's/azure.archive.ubuntu.com/mirrors.layeronline.com/g' /etc/apt/sources.list
@@ -143,10 +145,11 @@ jobs:
   Check-SPDX-Copyright:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha }}
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
       - uses: zccrs/github-actions-spdx-checker@main
         with:
           include: '*.py,*.js,*.jsx,*.tsx,*.java,*.cpp,*.c,*.h,*.hpp,*.go,*.rs,*.rb,*.php,*.sh,*.xml,*.yaml,*.yml,*.qml,CMakeLists.txt,Makefile'