The validate-checksum task fails with task v3.40.0 since v3.40.0 changes the behaviour of how undefined variables are treated in the ref attribute.

One potential fix is to use an empty list as the ref's default:

          EXCLUDE_PATHS:
            ref: "default (list) .EXCLUDE_PATHS"