From e3f52e410a7371de41ff20280bd97687a74aa5e2 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 19 Oct 2026 22:30:09 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 .github/workflows/audit.yml | 6 +++---
 .github/workflows/ci.yml    | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index 1eeca6a..3c3e610 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -22,10 +22,10 @@ jobs:
   audit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7
-      - uses: actions/setup-node@v7
+      - uses: actions/checkout@v7.0.1
+      - uses: actions/setup-node@v7.1.0
         with:
-          node-version: "24"
+          node-version: "24.22.0"
       - name: Audit (high severity gate)
         run: npm audit --audit-level=high
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4070747..daf7cf5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,10 +18,10 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7
-      - uses: actions/setup-node@v7
+      - uses: actions/checkout@v7.0.1
+      - uses: actions/setup-node@v7.1.0
         with:
-          node-version: "24"
+          node-version: "24.22.0"
           cache: npm
       - run: npm ci
       - name: Typecheck