The actions actions/checkout@v6.0.1 and tanstack/config/.github/setup@main are not allowed in TanStack/cli because all actions must be pinned to a full-length commit SHA.