* Fix multiline run_install example in README.md (pnpm#167)

* Remove --frozen-lockfile from examples (pnpm#171)

* feat: support installation from custom NPM registry (pnpm#179)

copy .npmrc from GitHub workspace if it exists so that PNPM respects custom
registry configurations when self-installing

* Update README.md (pnpm#175)

fix the string run_install example

* Remove unused `@types/node-fetch` dependency (pnpm#186)

* Clarify that package_json_file is relative to GITHUB_WORKSPACE (pnpm#184)

* Clarify that package_json_file is relative to GITHUB_WORKSPACE

Clarify the description for package_json_file parameter to specify that the path must be relative to the repository root.

* Apply suggestion from @zkochan

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>

* feat: store caching (pnpm#188)

* add pnpm store caching

* style: format

* no semicolons
* no star imports
* import order

* style: no star imports

---------

Co-authored-by: khai96_ <hvksmr1996@gmail.com>

* refactor: remove star imports (pnpm#196)

* fix(ci): exclude macos (pnpm#197)

* ci: pin github actions (pnpm#199)

* fix: regenerate lockfile to match package.json overrides

* fix(security): override fast-xml-parser to >=5.3.4

Resolves GHSA-37qj-frw5-hhjh (RangeError DoS via numeric entities)
in transitive dependency @actions/cache > @azure/storage-blob >
@azure/core-xml > fast-xml-parser.

* fix: resolve lint, build, and security audit failures

- Fix prefer-const lint error in cache-restore/run.ts
- Override undici to >=6.23.0 (GHSA-g9mf-h72j-4rw9)
- Rebuild dist to match source changes

* fix(ci): exclude dist from CodeQL analysis

dist/index.js is generated by ncc bundling — CodeQL flags dependency
code as security issues. Ignore the dist directory since it's not
source code.

---------

Co-authored-by: Matthias <matthias.dailey@gmail.com>
Co-authored-by: Adrian Riedel <Eynorey@users.noreply.github.com>
Co-authored-by: Roman Usherenko <roman.usherenko@gmail.com>
Co-authored-by: silverwind <me@silverwind.io>
Co-authored-by: Chris Martin <ch.martin@gmail.com>
Co-authored-by: Zoltan Kochan <z@kochan.io>
Co-authored-by: Jeremiasz Major <jrh.mjr@gmail.com>
Co-authored-by: khai96_ <hvksmr1996@gmail.com>
Co-authored-by: Boosted-Bonobo <boostedbonobo1@outlook.com>