Question: `npx` commands pinned with version are supported?

On NodeJS, we want to pin the version for packages that we run with `npx` inside Github Actions (https://github.com/nodejs/node/pull/50517), but I didn't find in the docs if this kind of dependency is automatically updated.

Is this kind of dependency supported to be updated by Dependabot?

The issue concerns pinned npx commands in GitHub Actions and links nodejs/node#50517; start by reading the relevant Dependabot documentation and the linked workflow change. Done means confirming whether this dependency form is supported and documenting or reproducing the expected update behavior.

Written by the indexing model from the issue text.