The actions levibostian/action-hide-sensitive-inputs@v1, actions/checkout@v6, softprops/action-gh-release@v1, and actions/github-script@v6 are not allowed in ynab/ynab-sdk-ruby because all actions must be pinned to a full-length commit SHA.