From c300a11ade38a235f0f915c83d75844a2e05920c Mon Sep 17 00:00:00 2001
From: MudassarTariq <mudassir@jfreaks.com>
Date: Fri, 12 Jun 2026 00:32:18 +0500
Subject: [PATCH] Update GitHub Actions to Node 24-compatible pins

---
 .github/workflows/mpak-release.yml  | 10 +++++-----
 .github/workflows/mpak-scan.yml     | 14 +++++++-------
 .github/workflows/mpak-validate.yml |  6 +++---
 3 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/mpak-release.yml b/.github/workflows/mpak-release.yml
index adbc7af..0c37950 100644
--- a/.github/workflows/mpak-release.yml
+++ b/.github/workflows/mpak-release.yml
@@ -22,17 +22,17 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
         with:
           path: tooling
 
       - name: Check out source ref
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
         with:
           ref: ${{ inputs.source_ref }}
           path: source
 
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: "22"
           cache: "npm"
@@ -64,7 +64,7 @@ jobs:
 
       - name: Build universal mpak bundle
         id: build_bundle
-        uses: NimbleBrainInc/mcpb-pack@bcc565454580b378121fef0f5086d2979f07ddbd
+        uses: NimbleBrainInc/mcpb-pack@e74c82722fa4b954ce7740f875d6c437ae471df6
         with:
           directory: tooling/artifacts/mpak-package
           upload: false
@@ -100,7 +100,7 @@ jobs:
 
       - name: Generate build provenance attestation
         id: attest_bundle
-        uses: actions/attest@281a49d4cbb0a72c9575a50d18f6deb515a11deb
+        uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26
         with:
           subject-path: tooling/artifacts/mpak-package/${{ steps.build_bundle.outputs.bundle-path }}
 
diff --git a/.github/workflows/mpak-scan.yml b/.github/workflows/mpak-scan.yml
index e375949..38dcbc5 100644
--- a/.github/workflows/mpak-scan.yml
+++ b/.github/workflows/mpak-scan.yml
@@ -24,27 +24,27 @@ jobs:
       SOURCE_REF: ${{ inputs.source_ref || github.event.pull_request.head.sha || github.sha }}
 
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
         with:
           path: tooling
 
       - name: Check out source ref
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
         with:
           ref: ${{ env.SOURCE_REF }}
           path: source
 
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: "22"
           cache: "npm"
           cache-dependency-path: source/package-lock.json
 
-      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
         with:
           python-version: "3.13"
 
-      - uses: astral-sh/setup-uv@38f3f104447c67c051c4a08e39b64a148898af3a
+      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39
         with:
           version: "0.11.5"
           enable-cache: false
@@ -84,7 +84,7 @@ jobs:
 
       - name: Build universal mpak bundle
         id: build_bundle
-        uses: NimbleBrainInc/mcpb-pack@bcc565454580b378121fef0f5086d2979f07ddbd
+        uses: NimbleBrainInc/mcpb-pack@e74c82722fa4b954ce7740f875d6c437ae471df6
         with:
           directory: tooling/artifacts/mpak-package
           upload: false
@@ -107,7 +107,7 @@ jobs:
         run: mpak-scanner scan "${{ steps.build_bundle.outputs.bundle-path }}" --json > scan-results.json
 
       - name: Upload scanner results
-        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: mpak-scan-results
           path: tooling/artifacts/mpak-package/scan-results.json
diff --git a/.github/workflows/mpak-validate.yml b/.github/workflows/mpak-validate.yml
index e3a5d11..40df211 100644
--- a/.github/workflows/mpak-validate.yml
+++ b/.github/workflows/mpak-validate.yml
@@ -17,9 +17,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
 
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: "22"
           cache: "npm"
@@ -38,7 +38,7 @@ jobs:
 
       - name: Validate mpak bundle build
         id: build_bundle
-        uses: NimbleBrainInc/mcpb-pack@bcc565454580b378121fef0f5086d2979f07ddbd
+        uses: NimbleBrainInc/mcpb-pack@e74c82722fa4b954ce7740f875d6c437ae471df6
         with:
           directory: artifacts/mpak-package
           upload: false