From 3cf5f060d458c5e22017816d85ef9493d5febd2a Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 1 Sep 2026 04:43:31 +0000
Subject: [PATCH] Update actions/setup-node action to v7

---
 .github/workflows/validate-release-pr.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/validate-release-pr.yml b/.github/workflows/validate-release-pr.yml
index 4716bbd..2d79469 100644
--- a/.github/workflows/validate-release-pr.yml
+++ b/.github/workflows/validate-release-pr.yml
@@ -36,7 +36,7 @@ jobs:
       # rebuild toolchain to match promptfoo's release job (.nvmrc -> Node 24).
       - name: Set up Node.js
         if: ${{ startsWith(github.head_ref, 'release/code-scan-action-v') }}
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
         with:
           node-version: '24'