checkout: use leak_pending flag