chore(deps): update actions/checkout action to v5.1.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v5.0.1 → v5.1.0

---

Release Notes

actions/checkout (actions/checkout)

v5.1.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 2ea71be

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[greptile-apps]

PR author is in the excluded authors list.

[devin-ai-integration]

Devin Review found 1 potential issue.

[devin-ai-integration]

🔍 Action SHA pin needs manual verification against the v5.1.0 tag

The only change is bumping the pinned commit SHA for actions/checkout from the v5.0.1 pin to fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 labeled v5.1.0. Since this workflow is the repo's security gate, and the pin is the trust anchor (the comment in the file emphasizes that the gate must be deterministic and non-reprogrammable), a reviewer should verify the SHA actually corresponds to the v5.1.0 tag in actions/checkout rather than relying on the bot-generated comment. Nothing else in the diff affects behavior: the gitleaks version/checksum, scan scope (--no-git --source .), and content-policy invocation are unchanged.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[macroscopeapp]

Approvability

Verdict: Needs human review

This dependency update changes a security-sensitive workflow file (.github/workflows/public-repo-guard.yml) that the author does not own (owned by wave-av/streaming-team). An unresolved comment also requests verification that the new SHA pin matches the v5.1.0 tag. The designated code owners should review this change.

No code changes detected at c3824f8. Prior analysis still applies.

^{You can customize Macroscope's approvability policy. Learn more.}

[codeant-ai]

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.