Is v7.0.1 a security update? #2539

Hi,

It seems that dependabot is skipping the cooldown config to update that action.
Is it a security update?

If yes:

• Why? escape values passed to --unset #2530?
• Is there a flag indicated it's a security update?

If no, why dependabot is updating it with a cooldown of 7 days.

Thx