Bump @actions/core to 1.9.1 (#56)

Fixes CVE-2022-35954. Does not look like anything terriblity important
to me, but hey, audit is happy.

node_modules/uuid/dist/esm-node/sha1.js

@@ -0,0 +1,13 @@
+import crypto from 'crypto';
+
+function sha1(bytes) {
+  if (Array.isArray(bytes)) {
+    bytes = Buffer.from(bytes);
+  } else if (typeof bytes === 'string') {
+    bytes = Buffer.from(bytes, 'utf8');
+  }
+
+  return crypto.createHash('sha1').update(bytes).digest();
+}
+
+export default sha1;