If that action itself has unpinned dependencies that doesn't accomplish much.
Don't use such actions. Or fork them and commit add the lockfile yourself, if you're cool with the implied maintenance.
alt Hacker News
Don't use such actions. Or fork them and commit add the lockfile yourself, if you're cool with the implied maintenance.