chore(deps): update minor updates

.github/workflows/ci.yml

@@ -20,7 +20,7 @@ on:
         required: false
         type: string
         # renovate: datasource=conda depName=conda-forge/python
-        default: "3.12.3"
+        default: "3.12.4"
       poetry-version:
         required: false
         type: string
@@ -30,7 +30,7 @@ on:
         required: false
         type: string
         # renovate: datasource=pypi depName=ruff versioning=pep440
-        default: "0.4.5"
+        default: "0.4.9"
       mypy-check-files:
         required: false
         description: extra files to check with mypy
@@ -45,7 +45,7 @@ jobs:
   lint:
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
     - name: ruff format
       uses: chartboost/ruff-action@e18ae971ccee1b2d7bbef113930f00c670b78da4 # v1
       with:
@@ -72,7 +72,7 @@ jobs:
         ports:
           - 27017:27017
     steps:
-    - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
     - name: "Set up environment"
       uses: packetcoders/action-setup-cache-python-poetry@0d0be5577b30d85f3fa2d93a4beeda149520f120 # v1.2.0
       with:
@@ -89,7 +89,7 @@ jobs:
     runs-on: ubuntu-22.04
     needs: [lint]
     steps:
-    - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
     - name: "Set up environment"
       uses: packetcoders/action-setup-cache-python-poetry@0d0be5577b30d85f3fa2d93a4beeda149520f120 # v1.2.0
       with:
@@ -122,7 +122,7 @@ jobs:
     if: ${{ fromJSON(needs.check_version.outputs.should_publish) }}
 
     steps:
-    - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
     # NB: we don't actually need to install the dependencies, but if we've
     # gotten this far they're cached anyway
     - name: "Set up environment"