From 3661d296eb3027da32d160c4645244646f0d2b4c Mon Sep 17 00:00:00 2001
From: MK <fengmk2@gmail.com>
Date: Thu, 2 Jul 2026 02:29:05 +0800
Subject: [PATCH] ci: pin setup-vp action to latest main commit

Update voidzero-dev/setup-vp from the floating @v1 tag to the pinned
latest commit on main (13e7afb), matching the repo convention of
SHA-pinning actions with a version comment.
---
 .github/workflows/nodejs.yml     | 4 ++--
 .github/workflows/pkg.pr.new.yml | 2 +-
 .github/workflows/release.yml    | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index bd8e1468..b3a70d46 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -18,7 +18,7 @@ jobs:
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: Setup Vite+
-        uses: voidzero-dev/setup-vp@v1
+        uses: voidzero-dev/setup-vp@13e7afb99c66525824db54e107d667216e795d37 # main
         with:
           node-version: '24'
           cache: true
@@ -58,7 +58,7 @@ jobs:
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: Setup Vite+
-        uses: voidzero-dev/setup-vp@v1
+        uses: voidzero-dev/setup-vp@13e7afb99c66525824db54e107d667216e795d37 # main
         with:
           node-version: ${{ matrix.node }}
           cache: true
diff --git a/.github/workflows/pkg.pr.new.yml b/.github/workflows/pkg.pr.new.yml
index a0cc8265..ab9c3d30 100644
--- a/.github/workflows/pkg.pr.new.yml
+++ b/.github/workflows/pkg.pr.new.yml
@@ -13,7 +13,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Vite+
-        uses: voidzero-dev/setup-vp@v1
+        uses: voidzero-dev/setup-vp@13e7afb99c66525824db54e107d667216e795d37 # main
         with:
           node-version: 22
           cache: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b0f596a9..dfb07d26 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -103,7 +103,7 @@ jobs:
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: Setup Vite+
-        uses: voidzero-dev/setup-vp@v1
+        uses: voidzero-dev/setup-vp@13e7afb99c66525824db54e107d667216e795d37 # main
         with:
           # Node 24 bundles npm >= 11.5.1, required for OIDC trusted publishing.
           node-version: '24'