diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 54317dd..c86c42d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -34,7 +34,7 @@ jobs:
       # npm 10.x in PATH → `npm publish` can't detect OIDC → ENEEDAUTH.
       # Node 24 ships npm 11.x; npm then auto-authenticates via OIDC (no token).
       - name: Setup Node + npm for trusted publishing
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9f7362e8dae4041e # v6
+        uses: actions/setup-node@v6
         with:
           node-version: "24"
           registry-url: "https://registry.npmjs.org"