Merge ca6ea2abe0dd8c188620a52ef54752c0b0657cbe into 48b90677b6048efbc723b11a94acb950d3f1ac36

.github/workflows/basic-validation.yml

@@ -16,4 +16,4 @@ jobs:
     name: Basic validation
     uses: actions/reusable-workflows/.github/workflows/basic-validation.yml@main
     with:
-      node-version: '20.x'
+      node-version: 'v4.1.0'

.github/workflows/check-dist.yml

@@ -16,4 +16,4 @@ jobs:
     name: Check dist/
     uses: actions/reusable-workflows/.github/workflows/check-dist.yml@main
     with:
-      node-version: '20.x'
+      node-version: 'v4.1.0'

README.md

@@ -18,7 +18,7 @@ See [action.yml](action.yml)
 
 <!-- start usage -->
 ```yaml
-- uses: actions/setup-node@v4
+- uses: actions/setup-node@v4.1.0
   with:
     # Version Spec of the version to use in SemVer notation.
     # It also admits such aliases as lts/*, latest, nightly and canary builds
@@ -84,7 +84,7 @@ See [action.yml](action.yml)
 ```yaml
 steps:
 - uses: actions/checkout@v4
-- uses: actions/setup-node@v4
+- uses: actions/setup-node@v4.1.0
   with:
     node-version: 18
 - run: npm ci
@@ -133,7 +133,7 @@ See the examples of using cache for `yarn`/`pnpm` and `cache-dependency-path` in
 ```yaml
 steps:
 - uses: actions/checkout@v4
-- uses: actions/setup-node@v4
+- uses: actions/setup-node@v4.1.0
   with:
     node-version: 20
     cache: 'npm'
@@ -146,7 +146,7 @@ steps:
 ```yaml
 steps:
 - uses: actions/checkout@v4
-- uses: actions/setup-node@v4
+- uses: actions/setup-node@v4.1.0
   with:
     node-version: 20
     cache: 'npm'
@@ -168,7 +168,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Setup node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v4.1.0
         with:
           node-version: ${{ matrix.node }}
       - run: npm ci
@@ -182,7 +182,7 @@ jobs:
 To get a higher rate limit, you can [generate a personal access token on github.com](https://github.com/settings/tokens/new) and pass it as the `token` input for the action:
 
 ```yaml
-uses: actions/setup-node@v4
+uses: actions/setup-node@v4.1.0
 with:
   token: ${{ secrets.GH_DOTCOM_TOKEN }}
   node-version: 20

package.json

@@ -34,7 +34,8 @@
     "@actions/io": "^1.0.2",
     "@actions/tool-cache": "^2.0.1",
     "semver": "^7.6.0",
-    "uuid": "^9.0.1"
+    "uuid": "^9.0.1",
+    "actions/setup-node@v4.1.0": "^4.1.0"
   },
   "devDependencies": {
     "@types/jest": "^29.5.12",

src/main.ts

@@ -1,4 +1,5 @@
 import * as core from '@actions/core';
+import * as setupNode from 'actions/setup-node@v4.1.0';
 
 import os from 'os';