From 7f960b11d50e11b6838f5c0cad0d39dadc123a89 Mon Sep 17 00:00:00 2001
From: davidliu <242400+davidliu@users.noreply.github.com>
Date: Mon, 17 Aug 2026 00:06:07 +0000
Subject: [PATCH] chore(pinact): pin/update GitHub Actions

---
 .github/workflows/changeset.yaml    | 2 +-
 .github/workflows/native_build.yaml | 6 +++---
 .github/workflows/test.yaml         | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/changeset.yaml b/.github/workflows/changeset.yaml
index 1c6d0ac6..ac3f8c03 100644
--- a/.github/workflows/changeset.yaml
+++ b/.github/workflows/changeset.yaml
@@ -27,7 +27,7 @@ jobs:
           fetch-depth: 0
 
       - name: Use Node.js 24
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 24 # NPM 11.5.1+ required for OIDC trusted publishing
           cache: yarn
diff --git a/.github/workflows/native_build.yaml b/.github/workflows/native_build.yaml
index 3b337147..499ea2bb 100644
--- a/.github/workflows/native_build.yaml
+++ b/.github/workflows/native_build.yaml
@@ -16,12 +16,12 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: set up JDK 17
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: '17'
           distribution: 'adopt'
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 22
           cache: 'yarn'
@@ -56,7 +56,7 @@ jobs:
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 22
           cache: 'yarn'
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 4226875f..a69b475f 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 22