From 082590cc2e877e6fc5859ba24034690be02b01de Mon Sep 17 00:00:00 2001
From: Takaaki Nakama <takaaki.nakama@plaid.co.jp>
Date: Thu, 19 Feb 2026 12:55:43 +0900
Subject: [PATCH] chore: pin actions/setup-node to commit SHA for supply chain
 security

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 action.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/action.yaml b/action.yaml
index 27e649c..0e2034b 100644
--- a/action.yaml
+++ b/action.yaml
@@ -52,7 +52,7 @@ runs:
   using: "composite"
   steps:
     - name: Install node
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
       with:
         node-version: ${{ inputs.node-version }}