From ed8ddff471e730e74873fee628ceb3628815f02a Mon Sep 17 00:00:00 2001
From: nox-remediate <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 3 Jul 2026 12:16:44 +0000
Subject: [PATCH] chore(security): nox remediation (deps + actions)

---
 .github/workflows/deploy.yml  | 2 +-
 .github/workflows/release.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 17960f5..28704cd 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -25,7 +25,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: "22"
           cache: 'npm'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ac82a4a..3525dbe 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -43,7 +43,7 @@ jobs:
           test -s release-artifacts/sbom.spdx.json
 
       - name: Create Release
-        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
         with:
           generate_release_notes: true
           files: |