Prevent module name path traversal

.github/workflows/default.yml

@@ -13,6 +13,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
+      - name: Use Node.js 22.15.1
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
+        with:
+          node-version: 22.15.1
 
       - name: Install dependencies
         run: npm install
@@ -25,6 +29,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
+      - name: Use Node.js 22.15.1
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
+        with:
+          node-version: 22.15.1
 
       - name: Install dependencies
         run: npm install
@@ -37,6 +45,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
+      - name: Use Node.js 22.15.1
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
+        with:
+          node-version: 22.15.1
 
       - name: Install dependencies
         run: npm install
@@ -51,6 +63,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
+      - name: Use Node.js 22.15.1
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
+        with:
+          node-version: 22.15.1
 
       - name: Install dependencies
         run: npm install

.github/workflows/release.yml

@@ -11,10 +11,10 @@ jobs:
       - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
         with:
           ref: ${{ github.event.release.target_commitish }}
-      - name: Use Node.js 14
+      - name: Use Node.js 22.15.1
         uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
-          node-version: 14
+          node-version: 22.15.1
       - name: match-tag-to-package-version
         uses: geritol/match-tag-to-package-version@c653bdd54d55b1576705a162417957903cd5851e # 0.0.2
         env:

.node-version

@@ -0,0 +1 @@
+22.15.1