The actions smorimoto/tune-github-hosted-runner-network@v1, speakeasy-api/sdk-generation-action@v15, and ravsamhq/notify-slack-action@v2 are not allowed in StackOneHQ/stackone-client-java because all actions must be pinned to a full-length commit SHA.