The action dessant/lock-threads@v6 is not allowed in pypa/pip because all actions must be from a repository owned by pypa, created by GitHub, or match one of the patterns: actions/*, dessant/lock-threads@v5, dorny/paths-filter@v3, lee-dohm/[email protected], pradyunsg/auto-label-merge-conflicts@v3, re-actors/alls-green@release/v1.