A job started failing after the software image behind ubuntu-latest changed. The workflow assumed that a particular tool version was preinstalled. Which two actions improve reproducibility? Select 2.

1. Add .nvmrc without a version-selection step and assume every runner preinstalled Node version must match it.
2. Use an explicit supported runner image label when the operating-system version must remain controlled.
3. Assume latest labels never migrate to a different operating-system release.
4. Inspect the runner image software manifest and explicitly install or select the required tool version.
5. Disable dependency lockfiles so every run installs whatever is newest.