Bump actions/checkout from 1 to 2

[dependabot]

Bumps actions/checkout from 1 to 2.

Release notes

Sourced from actions/checkout's releases.

v2.0.0

• Improved fetch performance
  • The default behavior now fetches only the commit being checked-out
• Script authenticated git commands
  • Persists the input token in the local git config
  • Enables your scripts to run authenticated git commands
  • Post-job cleanup removes the token
  • Opt out by setting the input persist-credentials: false
• Creates a local branch
  • No longer detached HEAD when checking out a branch
  • A local branch is created with the corresponding upstream branch set
• Improved layout
  • The input path is always relative to $GITHUB_WORKSPACE
  • Aligns better with container actions, where $GITHUB_WORKSPACE gets mapped in
• Fallback to REST API download
  • When Git 2.18 or higher is not in the PATH, the REST API will be used to download the files
• Removed input submodules

v2 beta

• Improved fetch performance
  • The default behavior now fetches only the SHA being checked-out
• Script authenticated git commands
  • Persists with.token in the local git config
  • Enables your scripts to run authenticated git commands
  • Post-job cleanup removes the token.
• Creates a local branch
  • No longer detached HEAD when checking out a branch
  • A local branch is created with the corresponding upstream branch set
• Improved layout
  • with.path is always relative to github.workspace
  • Aligns better with container actions, where github.workspace gets mapped in
• Removed input submodules

Changelog

Sourced from actions/checkout's changelog.

v2 (beta)

• Improved fetch performance
  • The default behavior now fetches only the SHA being checked-out
• Script authenticated git commands
  • Persists with.token in the local git config
  • Enables your scripts to run authenticated git commands
  • Post-job cleanup removes the token
  • Coming soon: Opt out by setting with.persist-credentials to false
• Creates a local branch
  • No longer detached HEAD when checking out a branch
  • A local branch is created with the corresponding upstream branch set
• Improved layout
  • with.path is always relative to github.workspace
  • Aligns better with container actions, where github.workspace gets mapped in
• Removed input submodules

Commits

• ee0669b Add new public key for known_hosts (#1237) (#1238)
• dc323e6 Add backports to v2 branch (#1040)
• e2f20e6 Update CHANGELOG.md
• b2eb13b Update @​actions/core to 1.10.0 (#962)
• 7884fca Prepare changelog for v2.4.2. (#778)
• f67ee5d Add set-safe-directory input to allow customers to take control. (#770) (#776)
• f25a3a9 Safe Directory v2 update (#764)
• 230611d Change secret name for PAT to not start with GITHUB_ (#623)
• ec3a7ce set insteadOf url for org-id (#621)
• fd47087 codeql should analyze lib not dist (#620)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #692.