diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 8a1cc701b2..c6eb3a888f 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -55,7 +55,7 @@ jobs:
         with:
           token: ${{ secrets.PAT_RELEASE_PUSH }} # persists the token for pushing to the repo later
 
-      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
+      - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
           cache: 'npm'
           node-version-file: '.nvmrc'