The actions actions/setup-go@v5, actions/checkout@v4, docker/setup-qemu-action@v3, and docker/setup-buildx-action@v3 are not allowed in stashed/elasticsearch because all actions must be pinned to a full-length commit SHA.