diff --git a/.github/workflows/build-and-push.yml b/.github/workflows/build-and-push.yml
index 0ec18be..db53dfd 100644
--- a/.github/workflows/build-and-push.yml
+++ b/.github/workflows/build-and-push.yml
@@ -20,7 +20,7 @@ jobs:
     # so the step exits 127 silently (action still reports success but
     # `new_release_published` stays empty -> the Release step gets skipped).
     - name: Setup Node.js
-      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
+      uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
       with:
         node-version: '24'