From 6f60b503f0f16b2dbf6a8fa652630c8d2ec418ce Mon Sep 17 00:00:00 2001
From: Michael Ferris <mike.ferris@hotmail.com>
Date: Mon, 28 Sep 2026 21:08:16 -0400
Subject: [PATCH] ci: run on node 22/24/26 and pin actions to commit SHAs

---
 .github/workflows/node.js.yml | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml
index 3100e39..2ce6309 100644
--- a/.github/workflows/node.js.yml
+++ b/.github/workflows/node.js.yml
@@ -10,23 +10,22 @@ on:
     branches: [ "master" ]
 
 jobs:
-  build:
-
+  ci:
     runs-on: ubuntu-latest
 
     strategy:
       matrix:
-        node-version: [14.x, 16.x, 18.x]
+        node-version: [22.x, 24.x, 26.x]
         # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
       with:
         node-version: ${{ matrix.node-version }}
         cache: 'npm'
     - run: npm install
     - run: npm run build
     - run: npm test
-    
+