Bump @actions/core to 1.9.1 (#56)

Fixes CVE-2022-35954. Does not look like anything terriblity important
to me, but hey, audit is happy.

node_modules/uuid/dist/esm-node/rng.js

@@ -0,0 +1,12 @@
+import crypto from 'crypto';
+const rnds8Pool = new Uint8Array(256); // # of random values to pre-allocate
+
+let poolPtr = rnds8Pool.length;
+export default function rng() {
+  if (poolPtr > rnds8Pool.length - 16) {
+    crypto.randomFillSync(rnds8Pool);
+    poolPtr = 0;
+  }
+
+  return rnds8Pool.slice(poolPtr, poolPtr += 16);
+}