gpt-6.1-sol, security and reliability fixes, working deploys

.github/actions/setup-typescript-workspace/action.yml

@@ -3,11 +3,9 @@ description: Install pnpm and Node.js dependencies for the TypeScript workspace
 
 inputs:
   node-version:
+    # Keep in step with the node:<version>-slim base of api/ and frontend/ Dockerfiles.
     description: Node.js version
-    default: "22.13.1"
-  pnpm-version:
-    description: pnpm version
-    default: "10.24.0"
+    default: "22.23.3"
   generate-prisma:
     description: Whether to run pnpm db:generate
     default: "true"
@@ -22,12 +20,13 @@ runs:
   using: composite
   steps:
     - name: Install pnpm
-      uses: pnpm/action-setup@v4
+      uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0
       with:
-        version: ${{ inputs.pnpm-version }}
+        # The version comes from packageManager, which Docker builds also use.
+        package_json_file: src/typescript/package.json
 
     - name: Setup Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version: ${{ inputs.node-version }}
         cache: pnpm