diff --git a/.forgejo/workflows/publish.yaml b/.forgejo/workflows/publish.yaml
index 61e1f28..a29a423 100644
--- a/.forgejo/workflows/publish.yaml
+++ b/.forgejo/workflows/publish.yaml
@@ -18,7 +18,7 @@ jobs:
       - name: Add instance URLs to known_hosts
         run: ssh-keyscan -H www.coastalcommits.com >> ~/.ssh/known_hosts
       - name: Setup Node.js
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
           node-version: 18
           cache: 'yarn'