From 32f634ad7e6b18e3922d81e0a340d8b4ee144ba5 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 2 Aug 2026 21:17:09 +0000
Subject: [PATCH] chore(deps): update github actions

---
 .github/workflows/ci.yml                       | 12 ++++++------
 .github/workflows/fspy-benchmark.yml           |  2 +-
 .github/workflows/release-vite-task-client.yml |  2 +-
 3 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 519c91518..a74c044ce 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -128,7 +128,7 @@ jobs:
 
       # x86_64-apple-darwin runs on arm64 runner under Rosetta; install x64 Node
       # so fspy's x86_64 preload dylib can be injected into spawned node procs.
-      - uses: oxc-project/setup-node@4c588e9266bd930b6ddc34307df0659ed511d187 # v1.3.1
+      - uses: oxc-project/setup-node@3dcec485ad31d30d15b1bd177eaeddf0db86320e # v1.3.2
         with:
           architecture: ${{ matrix.target == 'x86_64-apple-darwin' && 'x64' || '' }}
 
@@ -189,7 +189,7 @@ jobs:
 
       - run: rustup target add x86_64-pc-windows-msvc
 
-      - uses: taiki-e/install-action@7572810d7dd469b651bb7793945692cf78da5dd7 # v2.85.0
+      - uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2.85.5
         with:
           tool: cargo-nextest,cargo-xwin
 
@@ -260,7 +260,7 @@ jobs:
         with:
           name: windows-test-archive
 
-      - uses: taiki-e/install-action@7572810d7dd469b651bb7793945692cf78da5dd7 # v2.85.0
+      - uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2.85.5
         with:
           tool: cargo-nextest
 
@@ -272,7 +272,7 @@ jobs:
         if: matrix.mode == 'default'
         run: cargo-nextest nextest run --archive-file windows-tests.tar.zst --workspace-remap . --partition "$PARTITION"
 
-      - uses: oxc-project/setup-node@4c588e9266bd930b6ddc34307df0659ed511d187 # v1.3.1
+      - uses: oxc-project/setup-node@3dcec485ad31d30d15b1bd177eaeddf0db86320e # v1.3.2
         if: matrix.mode == 'ignored'
 
       - name: Install runtime binaries
@@ -332,7 +332,7 @@ jobs:
       - name: Run tests
         run: cargo test
 
-      - uses: oxc-project/setup-node@4c588e9266bd930b6ddc34307df0659ed511d187 # v1.3.1
+      - uses: oxc-project/setup-node@3dcec485ad31d30d15b1bd177eaeddf0db86320e # v1.3.2
 
       - name: Run ignored tests
         run: cargo test -- --ignored
@@ -353,7 +353,7 @@ jobs:
           tools: cargo-shear@1.11.1,cargo-autoinherit@0.1.6
           components: clippy rust-docs rustfmt
 
-      - uses: oxc-project/setup-node@4c588e9266bd930b6ddc34307df0659ed511d187 # v1.3.1
+      - uses: oxc-project/setup-node@3dcec485ad31d30d15b1bd177eaeddf0db86320e # v1.3.2
       - run: pnpm exec vp fmt --check
       - run: cargo autoinherit && git diff --exit-code
       - run: cargo shear --deny-warnings
diff --git a/.github/workflows/fspy-benchmark.yml b/.github/workflows/fspy-benchmark.yml
index dca071f44..c09c7ba08 100644
--- a/.github/workflows/fspy-benchmark.yml
+++ b/.github/workflows/fspy-benchmark.yml
@@ -172,7 +172,7 @@ jobs:
           } > .benchmark-results/comment.md
 
       - name: Update PR comment
-        uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
+        uses: marocchino/sticky-pull-request-comment@5770ad5eb8f42dd2c4f34da00c94c5381e49af88 # v3.0.5
         with:
           header: fspy-benchmark
           path: .benchmark-results/comment.md
diff --git a/.github/workflows/release-vite-task-client.yml b/.github/workflows/release-vite-task-client.yml
index 4bd3a081f..7cbd4a755 100644
--- a/.github/workflows/release-vite-task-client.yml
+++ b/.github/workflows/release-vite-task-client.yml
@@ -35,7 +35,7 @@ jobs:
       id-token: write
     steps:
       - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2
-      - uses: oxc-project/setup-node@4c588e9266bd930b6ddc34307df0659ed511d187 # v1.3.1
+      - uses: oxc-project/setup-node@3dcec485ad31d30d15b1bd177eaeddf0db86320e # v1.3.2
       - run: pnpm build-vite-task-client-types
       - run: pnpm publish --provenance --access public
         working-directory: packages/vite-task-client