actions/cache@v4, actions/setup-java@v4, actions/checkout@v4, github/codeql-action/init@v3, and github/codeql-action/analyze@v3 are not allowed to be used in pulsar-sigs/pulsar. Actions in this workflow must be: within a repository owned by pulsar-sigs.