From 19dc80913b2ac7c685aac13d56074c31d4ee3446 Mon Sep 17 00:00:00 2001
From: Michael Bolin <mbolin@openai.com>
Date: Sun, 2 Nov 2025 11:01:09 -0800
Subject: [PATCH] fix: update actions/setup-node to use a specific commit hash

---
 action.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/action.yml b/action.yml
index dbaac21..30e192f 100644
--- a/action.yml
+++ b/action.yml
@@ -107,7 +107,9 @@ runs:
         fi
 
     - name: Ensure Node.js available
-      uses: actions/setup-node@v4
+      # Pin to a commit hash because some repositories require it:
+      # https://github.com/openai/codex-action/issues/43
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version: "20"