The actions actions/checkout@v4, actions/setup-node@v4, and codecov/codecov-action@v4 are not allowed in organvm-i-theoria/sema-metra--alchemica-mundi because all actions must be pinned to a full-length commit SHA.