From 5c29760da989afbf1c314a9912ed27955c4e959c Mon Sep 17 00:00:00 2001
From: dc7290 <dhkh.cba0927@gmail.com>
Date: Thu, 13 Nov 2025 10:14:01 +0900
Subject: [PATCH] Update GitHub Actions to use specific versions of checkout
 and setup-node actions

---
 .github/workflows/release.yml  | 28 ++++++++++++++++++++++++++++
 .github/workflows/workflow.yml |  4 ++--
 2 files changed, 30 insertions(+), 2 deletions(-)
 create mode 100644 .github/workflows/release.yml

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
new file mode 100644
index 0000000..5827c13
--- /dev/null
+++ b/.github/workflows/release.yml
@@ -0,0 +1,28 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  id-token: write # Required for OIDC
+  contents: read
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+
+      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        with:
+          node-version: "12"
+          registry-url: "https://registry.npmjs.org"
+
+      # Ensure npm 11.5.1 or later is installed
+      - name: Update npm
+        run: npm install -g npm@latest
+      - run: npm ci
+      - run: npm test
+      - run: npm publish
diff --git a/.github/workflows/workflow.yml b/.github/workflows/workflow.yml
index f22c3e8..b8b80b6 100644
--- a/.github/workflows/workflow.yml
+++ b/.github/workflows/workflow.yml
@@ -10,9 +10,9 @@ jobs:
         node-version: [10, 12]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Run with Node v${{ matrix.node-version }}
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
           node-version: ${{ matrix.node-version }}
       - name: Versions