chore(deps): update actions/checkout action to v5.1.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v5.0.1 → v5.1.0

---

Release Notes

actions/checkout (actions/checkout)

v5.1.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Note

Update actions/checkout to v5.1.0 in public-repo-guard workflow

Bumps the pinned actions/checkout commit hash in public-repo-guard.yml from v5.0.1 to v5.1.0.

^{Macroscope summarized 05ed411.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: 8083897

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[greptile-apps]

PR author is in the excluded authors list.

[devin-ai-integration]

Devin Review found 2 potential issues.

[devin-ai-integration]

🔍 actions/checkout pins are inconsistent across workflows

This workflow now pins actions/checkout at v5.1.0, while other workflows in the repo pin different major versions: .github/workflows/_checks.yml:23,54,114 use v4.3.1 and .github/workflows/go-lint.yml:16 / .github/workflows/governance-enforce.yml:27 use v6.0.3. If Renovate is expected to keep pins uniform, this update is partial — the guard workflow will now sit on an older major than the other workflows. Worth checking the Renovate config for per-file grouping / pinned constraints.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[devin-ai-integration]

🔍 Commit SHA for the new tag cannot be verified offline

The pin fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 is the security-relevant part of this change; the comment is only advisory and nothing in CI validates that the SHA actually corresponds to the v5.1.0 tag of actions/checkout. Since this workflow is the repo's secret/content gate, a reviewer should manually confirm the SHA against the upstream tag before merging.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[macroscopeapp]

Approvability

Verdict: Needs human review

Unable to check for correctness in 8bdf074. This dependency update targets a security-sensitive workflow file (public-repo-guard.yml). An unresolved review comment requests manual verification that the new SHA corresponds to the claimed v5.1.0 tag, and the author is not a designated owner of this file.

No code changes detected at 05ed411. Prior analysis still applies.

^{You can customize Macroscope's approvability policy. Learn more.}