Zizmor 1.25.0 brings a new error

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> workflow-templates/appstore-build-publish.yml:74:9
   |
11 | / on:
12 | |   release:
13 | |     types: [published]
   | |______________________- generally used when publishing artifacts generated at runtime
...
74 |           uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
   |           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ enables caching by default
   |
   = note: audit confidence → Low

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> workflow-templates/documentation.yml:45:9
   |
11 | / on:
12 | |   pull_request:
13 | |   release:
14 | |     types: [published]
   | |______________________- generally used when publishing artifacts generated at runtime
...
45 |           uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
   |           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ enables caching by default
   |
   = note: audit confidence → Low

Start by inspecting workflow-templates/appstore-build-publish.yml and workflow-templates/documentation.yml at the setup-node steps reported by Zizmor. Run Zizmor against these templates and confirm the cache-poisoning findings are resolved without introducing new workflow errors.