From e2343bf5775b9ccf1098f92a7c7137d82ee4886b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 15 Oct 2026 05:15:56 +0000
Subject: [PATCH] ci: bump actions/setup-node from 7.0.0 to 7.1.0

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml             | 2 +-
 .github/workflows/claude-ai-zips.yml | 2 +-
 .github/workflows/coverage.yml       | 2 +-
 .github/workflows/link-check.yml     | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1024c7b..020dd4d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -46,7 +46,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false # CWK-154 (2) — this job reads, tests and compares; it pushes nothing
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: ${{ matrix.node }}
       # Zero-dependency: no install step. Run the same fail-loud gate as a local pre-push,
diff --git a/.github/workflows/claude-ai-zips.yml b/.github/workflows/claude-ai-zips.yml
index 686f200..46b78b9 100644
--- a/.github/workflows/claude-ai-zips.yml
+++ b/.github/workflows/claude-ai-zips.yml
@@ -159,7 +159,7 @@ jobs:
           path: tag-src
           fetch-depth: 0 # the heading-continuity check needs the previous stable tag (git describe)
 
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         if: steps.gate.outputs.post == 'true'
         with:
           node-version: 24
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 1caa750..dbc8665 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -58,7 +58,7 @@ jobs:
           persist-credentials: false # CWK-154 (2) — this job uploads a report; it pushes nothing
       - name: Set up Node (skips cleanly until scripts/test.mjs exists)
         if: hashFiles('scripts/test.mjs') != ''
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 24
       - name: Run tests with coverage (skips cleanly until scripts/test.mjs exists)
diff --git a/.github/workflows/link-check.yml b/.github/workflows/link-check.yml
index 8bdbeda..a932632 100644
--- a/.github/workflows/link-check.yml
+++ b/.github/workflows/link-check.yml
@@ -28,7 +28,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false # CWK-154 (2) — this job reads files and publishes nothing
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 22
       # NOT continue-on-error, unlike markdownlint.yml -- this is a real gate on a tree