chore(deps): update actions/checkout action to v4.4.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v4.3.1 → v4.4.0

---

Release Notes

actions/checkout (actions/checkout)

v4.4.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Note

Update actions/checkout to v4.4.0 in CI workflows

Updates the actions/checkout step from v4.3.1 to v4.4.0 across all three jobs in _checks.yml: checks, skill-validate, and verify-routes.

^{Macroscope summarized ab4aa3d.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: 6e9630d

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[cursor]

Risk: low. Approved — Cursor Bugbot was not present on this PR; remaining signals support approval for this pinned actions/checkout v4.3.1→v4.4.0 bump in CI workflows. No reviewers assigned.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}

[greptile-apps]

PR author is in the excluded authors list.

[devin-ai-integration]

Devin Review found 2 potential issues.

[devin-ai-integration]

🔍 Checkout pin bump is consistent within this workflow but diverges from the other workflow

All three jobs in .github/workflows/_checks.yml were updated consistently to the same commit SHA, so no partial migration inside this file. Note that .github/workflows/public-repo-guard.yml:45 still pins actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1, i.e. the repo now uses two different major versions of the action. Worth confirming whether the intent was to standardize on v5 rather than bumping the v4 line.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[devin-ai-integration]

🔍 SHA/tag comment pairing cannot be verified offline

The pinned SHA 11d5960a326750d5838078e36cf38b85af677262 is annotated as v4.4.0. Since pinned-by-SHA actions rely on the comment being accurate for future audits, it is worth confirming the SHA actually corresponds to the tag in the upstream actions/checkout repo (e.g. via git ls-remote --tags), as this cannot be validated from within this repository.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[macroscopeapp]

Approvability

Verdict: Approved b1a8c2a

Minor version bump of actions/checkout (v4.3.1 → v4.4.0) in CI workflow - a mechanical dependency update that doesn't affect runtime behavior. Review comments are informational observations about version consistency across workflows, not blocking issues.

No code changes detected at ab4aa3d. Prior analysis still applies.

^{You can customize Macroscope's approvability policy. Learn more.}