The actions actions/checkout@v4, actions/setup-node@v4, actions/setup-python@v5, and actions/upload-artifact@v4 are not allowed in BlackRoad-OS/lucidia-math because all actions must be pinned to a full-length commit SHA.