chore(deps): update actions/checkout action to v5.1.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v5.0.1 → v5.1.0

---

Release Notes

actions/checkout (actions/checkout)

v5.1.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: abebf90

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[cursor]

Risk: low. Approved — Renovate bumps actions/checkout v5.0.1→v5.1.0 in one workflow with a pinned SHA only. Cursor Bugbot was not present on this PR; no reviewers assigned.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}

[greptile-apps]

PR author is in the excluded authors list.

[devin-ai-integration]

Devin Review found 1 potential issue.

[devin-ai-integration]

🔍 Pinned SHA bump should be verified against the upstream v5.1.0 tag

This is a single-line pin bump for actions/checkout inside the security gate workflow. The whole point of the SHA pin (documented in the header comment at .github/workflows/public-repo-guard.yml:9-14) is that the gate cannot be reprogrammed out-of-band, so the new commit SHA fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 should be confirmed to actually be the commit tagged v5.1.0 in actions/checkout before merging (the comment is only a comment and is not enforced). Nothing else in the workflow changed; the gitleaks version/checksum pinning and content-policy invocation are untouched.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[macroscopeapp]

Approvability

Verdict: Needs human review

This dependency version bump is owned by wave-av/core-team, not the PR author. There's also an unresolved comment requesting verification that the new SHA corresponds to the upstream v5.1.0 tag before merging this security-gate workflow change.

No code changes detected at 46c8e42. Prior analysis still applies.

^{You can customize Macroscope's approvability policy. Learn more.}

[wave-bugbot]

🟢 WAVE BugBot — clear

No confident findings on the changed lines.

_{Local review · $0 inference · wave-dispatch}