chore(deps): update actions/checkout action to v4.4.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v4.3.1 → v4.4.0

---

Release Notes

actions/checkout (actions/checkout)

v4.4.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Note

Update actions/checkout to v4.4.0 in CI workflows

Updates the actions/checkout step from v4.3.1 to v4.4.0 across all three jobs in _checks.yml: checks, skill-validate, and verify-routes.

^{Macroscope summarized ec047f9.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: f03cfb2

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[cursor]

Risk: low. Cursor Bugbot was not present on this PR, so that signal was skipped. Approved this low-risk actions/checkout minor bump with pinned SHA updates only; no reviewers assigned.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}

[greptile-apps]

PR author is in the excluded authors list.

[devin-ai-integration]

Devin Review found 1 potential issue.

[devin-ai-integration]

🔍 Repo pins several different major versions of actions/checkout

All three pins inside .github/workflows/_checks.yml were updated consistently to the same SHA, so this file is internally coherent. However, the repo overall now uses three different major versions of the same action: v4.4.0 here, v6.0.3 in .github/workflows/go-lint.yml:16 and .github/workflows/governance-enforce.yml:27, and v5.0.1 in .github/workflows/public-repo-guard.yml:45. This pre-dates the PR (Renovate appears to have separate update streams), but it's worth checking why _checks.yml is held on the v4 line rather than being brought forward with the rest.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[macroscopeapp]

Approvability

Verdict: Needs human review

Unable to check for correctness in c4193fe. This is a minor version bump of actions/checkout (v4.3.1 → v4.4.0) in CI configuration. However, the changed file is owned by wave-av/streaming-team per CODEOWNERS, and the designated owners should review changes to their workflow files.

No code changes detected at ec047f9. Prior analysis still applies.

^{You can customize Macroscope's approvability policy. Learn more.}

[devin-ai-integration]

Devin Review found 1 new potential issue.

[devin-ai-integration]

🔍 File-size gate globs do not cover this repo's Go sources

Pre-existing, but relevant while this file is being touched: the file-size gate enumerates only '*.ts' '*.tsx' '*.js' '*.py', yet wave-certify is a Go module (go.mod, cmd/). As written the gate iterates over zero files and always passes here, so the ~200-500 line guidance in AGENTS.md is unenforced for this repo. Since this workflow is a mirrored copy of the shared foundation gate, the fix likely belongs upstream, but it's worth noting the gate is effectively a no-op in wave-certify.

(Refers to line 44)

---

Was this helpful? React with 👍 or 👎 to provide feedback.