From b91b72620e67252ef6c26ac6fcfe2058b570e0d6 Mon Sep 17 00:00:00 2001
From: joshavant <830519+joshavant@users.noreply.github.com>
Date: Wed, 21 Oct 2026 16:10:43 -0500
Subject: [PATCH] fix(ci): pin Node releases with incident key rejection

---
 .github/workflows/crabbox-hydrate.yml                | 2 +-
 .github/workflows/docs-code-ci.yml                   | 2 +-
 .github/workflows/docs-live-smoke.yml                | 4 ++--
 .github/workflows/llms-full.yml                      | 2 +-
 .github/workflows/pages.yml                          | 2 +-
 .github/workflows/r2-pages.yml                       | 2 +-
 .github/workflows/translate-finalize-reusable.yml    | 2 +-
 .github/workflows/translate-locale-reusable.yml      | 4 ++--
 .github/workflows/translate-shell-check-reusable.yml | 2 +-
 9 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/crabbox-hydrate.yml b/.github/workflows/crabbox-hydrate.yml
index f31792392a..d8a5c62a70 100644
--- a/.github/workflows/crabbox-hydrate.yml
+++ b/.github/workflows/crabbox-hydrate.yml
@@ -41,7 +41,7 @@ jobs:
 
       - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
-          node-version: 26
+          node-version: 26.12.1
 
       - name: Prepare Node workspace
         shell: bash
diff --git a/.github/workflows/docs-code-ci.yml b/.github/workflows/docs-code-ci.yml
index 41e15ba503..2faf8a3993 100644
--- a/.github/workflows/docs-code-ci.yml
+++ b/.github/workflows/docs-code-ci.yml
@@ -38,7 +38,7 @@ jobs:
       - name: Set up Node
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
-          node-version: 26
+          node-version: 26.12.1
           cache: npm
 
       - name: Install
diff --git a/.github/workflows/docs-live-smoke.yml b/.github/workflows/docs-live-smoke.yml
index 39c6320872..c867843d80 100644
--- a/.github/workflows/docs-live-smoke.yml
+++ b/.github/workflows/docs-live-smoke.yml
@@ -32,7 +32,7 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
-          node-version: 26
+          node-version: 26.12.1
 
       - name: Derive newly added routes
         id: added-routes
@@ -302,7 +302,7 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
-          node-version: 26
+          node-version: 26.12.1
 
       - name: Sample live docs routes
         env:
diff --git a/.github/workflows/llms-full.yml b/.github/workflows/llms-full.yml
index 47dba5080c..66d82124c0 100644
--- a/.github/workflows/llms-full.yml
+++ b/.github/workflows/llms-full.yml
@@ -95,7 +95,7 @@ jobs:
         if: steps.current-main.outputs.stale != 'true' && steps.live-route.outputs.available != 'false'
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
-          node-version: 26
+          node-version: 26.12.1
           cache: npm
 
       - name: Install
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 6b010e2b56..e44d20a6d1 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -40,7 +40,7 @@ jobs:
       - name: Set up Node
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
-          node-version: 26
+          node-version: 26.12.1
           cache: npm
 
       - name: Install
diff --git a/.github/workflows/r2-pages.yml b/.github/workflows/r2-pages.yml
index 82e865ede9..741999e84a 100644
--- a/.github/workflows/r2-pages.yml
+++ b/.github/workflows/r2-pages.yml
@@ -206,7 +206,7 @@ jobs:
         if: steps.current-main.outputs.stale == 'false' && (steps.artifact-scope.outputs.scope != 'none' || steps.artifact-scope.outputs.deploy_worker == '1')
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
-          node-version: 26
+          node-version: 26.12.1
           cache: npm
 
       - name: Install
diff --git a/.github/workflows/translate-finalize-reusable.yml b/.github/workflows/translate-finalize-reusable.yml
index 665012ed66..38196c93ff 100644
--- a/.github/workflows/translate-finalize-reusable.yml
+++ b/.github/workflows/translate-finalize-reusable.yml
@@ -119,7 +119,7 @@ jobs:
         if: steps.apply.outputs.changed_count != '0'
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
-          node-version: 26
+          node-version: 26.12.1
           cache: npm
 
       - name: Install
diff --git a/.github/workflows/translate-locale-reusable.yml b/.github/workflows/translate-locale-reusable.yml
index 8ddcd7efd3..d18ef03d45 100644
--- a/.github/workflows/translate-locale-reusable.yml
+++ b/.github/workflows/translate-locale-reusable.yml
@@ -140,7 +140,7 @@ jobs:
         if: steps.stale.outputs.skip != 'true'
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
-          node-version: 26
+          node-version: 26.12.1
 
       - name: Setup Go
         if: steps.stale.outputs.skip != 'true'
@@ -460,7 +460,7 @@ jobs:
         if: (inputs.artifact_role != 'canary' || needs.translate.outputs.canary_bootstrap == 'true') && steps.apply.outputs.changed_count != '0'
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
-          node-version: 26
+          node-version: 26.12.1
           cache: npm
 
       - name: Install docs dependencies
diff --git a/.github/workflows/translate-shell-check-reusable.yml b/.github/workflows/translate-shell-check-reusable.yml
index 834924c7f6..e5de2ab4f7 100644
--- a/.github/workflows/translate-shell-check-reusable.yml
+++ b/.github/workflows/translate-shell-check-reusable.yml
@@ -25,7 +25,7 @@ jobs:
       - name: Set up Node
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
-          node-version: 26
+          node-version: 26.12.1
           cache: npm
 
       - name: Check bash syntax in translation workflows