fix: use branch ref instead of SHA for actions/checkout@v7

Using bare SHA as ref parameter in actions/checkout@v7 causes
getRefSpec to only fetch the specific commit instead of the full
branch. This breaks when git commit --amend is used on a PR branch,
because testRef() always returns true for SHA refs, never triggering
the second targeted fetch.

Fix all affected workflows to use refs/heads/<branch> instead of
the bare SHA, consistent with the upstream fix guidance.

Affected workflows:
- license-check.yml (3 occurrences)
- build-distribution.yml (4 occurrences)
- auto-tag.yml
- commitlint.yml
- doc-check.yml
- dtk-unittest.yml
- workflow-templates/cppcheck.yml

Log: 修复 actions/checkout@v7 在 git commit --amend 后无法正确获取
      PR 分支最新 commit 的问题

Author: hudeng-go

.github/workflows/auto-tag.yml

@@ -18,7 +18,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
         with:
-          ref: ${{ github.event.pull_request.head.sha }}
+          ref: refs/heads/${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           allow-unsafe-pr-checkout: true
           persist-credentials: false

.github/workflows/build-distribution.yml

@@ -25,7 +25,7 @@ jobs:
       - uses: actions/checkout@v7
         if: ${{ github.event.pull_request.head.sha }}
         with:
-          ref: ${{ github.event.pull_request.head.sha }}
+          ref: refs/heads/${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           allow-unsafe-pr-checkout: true
       - uses: actions/checkout@v7
@@ -67,7 +67,7 @@ jobs:
       - uses: actions/checkout@v7
         if: ${{ github.event.pull_request.head.sha }}
         with:
-          ref: ${{ github.event.pull_request.head.sha }}
+          ref: refs/heads/${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           allow-unsafe-pr-checkout: true
       - uses: actions/checkout@v7
@@ -164,7 +164,7 @@ jobs:
       - uses: actions/checkout@v7
         if: ${{ github.event.pull_request.head.sha }}
         with:
-          ref: ${{ github.event.pull_request.head.sha }}
+          ref: refs/heads/${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           allow-unsafe-pr-checkout: true
       - uses: actions/checkout@v7
@@ -370,7 +370,7 @@ jobs:
       - uses: actions/checkout@v7
         if: ${{ github.event.pull_request.head.sha }}
         with:
-          ref: ${{ github.event.pull_request.head.sha }}
+          ref: refs/heads/${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           allow-unsafe-pr-checkout: true
       - uses: actions/checkout@v7

.github/workflows/commitlint.yml

@@ -9,7 +9,7 @@ jobs:
       - name: Fetch code
         uses: actions/checkout@v7
         with:
-          ref: ${{ github.event.pull_request.head.sha }}
+          ref: refs/heads/${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           allow-unsafe-pr-checkout: true
           fetch-depth: 0

.github/workflows/doc-check.yml

@@ -59,7 +59,7 @@ jobs:
 
       - uses: actions/checkout@v7
         with:
-          ref: ${{ github.event.pull_request.head.sha }}
+          ref: refs/heads/${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           allow-unsafe-pr-checkout: true
           persist-credentials: false

.github/workflows/dtk-unittest.yml

@@ -23,7 +23,7 @@ jobs:
       - uses: actions/checkout@v7
         if: ${{ github.event.pull_request.head.sha }}
         with:
-          ref: ${{ github.event.pull_request.head.sha }}
+          ref: refs/heads/${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           allow-unsafe-pr-checkout: true
       - uses: actions/checkout@v7

.github/workflows/license-check.yml

@@ -9,7 +9,7 @@ jobs:
         with:
           # fetch-depth: 0 必不可少，否则 git diff 找不到对比基准
           fetch-depth: 0
-          ref: ${{ github.event.pull_request.head.sha }}
+          ref: refs/heads/${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           allow-unsafe-pr-checkout: true
 
@@ -117,7 +117,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
         with:
-          ref: ${{ github.event.pull_request.head.sha }}
+          ref: refs/heads/${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           allow-unsafe-pr-checkout: true
       - name: Install zsh
@@ -150,7 +150,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           fetch-depth: 0
-          ref: ${{ github.event.pull_request.head.sha }}
+          ref: refs/heads/${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           allow-unsafe-pr-checkout: true
       - name: Fetch base ref and test refs

workflow-templates/cppcheck.yml

@@ -16,7 +16,7 @@ jobs:
       - run: export
       - uses: actions/checkout@v7
         with:
-          ref: ${{ github.event.pull_request.head.sha }}
+          ref: refs/heads/${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           allow-unsafe-pr-checkout: true
           persist-credentials: false