The actions actions/checkout@v4, updatecli/updatecli-action@v2.96.0, and updatecli/releasepost-action@v0.5.0 are not allowed in updatecli/website because all actions must be pinned to a full-length commit SHA.