People are absolutely going to hit the situation where the main action is updated and their build will fail as we're using an older CLI version. I think what's needed is the ability to pin at the "main" action to use the same semver pattern as the proposed change to the install action. Pinning the main action version, and the CLI version seems like the only way, meaning that for the ~30 pipelines we already have, we'd need to update every one of them when a patch version comes out.