diff --git a/.github/workflows/abap-702.yaml b/.github/workflows/abap-702.yaml
index dd4072b2..91fbbbf5 100644
--- a/.github/workflows/abap-702.yaml
+++ b/.github/workflows/abap-702.yaml
@@ -73,7 +73,7 @@ jobs:
       run: |
         echo "abap-702 skipped the downport — $REASON" >> "$GITHUB_STEP_SUMMARY"
 
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       if: steps.scope.outputs.run == 'true'
       with:
         node-version: '22'
diff --git a/.github/workflows/abap-cloud.yaml b/.github/workflows/abap-cloud.yaml
index ab4e2398..df2c2164 100644
--- a/.github/workflows/abap-cloud.yaml
+++ b/.github/workflows/abap-cloud.yaml
@@ -20,7 +20,7 @@ jobs:
     timeout-minutes: 10
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
         cache: 'npm'
diff --git a/.github/workflows/abap-standard.yaml b/.github/workflows/abap-standard.yaml
index fff79c97..d12e92f1 100644
--- a/.github/workflows/abap-standard.yaml
+++ b/.github/workflows/abap-standard.yaml
@@ -20,7 +20,7 @@ jobs:
     timeout-minutes: 10
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
         cache: 'npm'
diff --git a/.github/workflows/auto-downport.yaml b/.github/workflows/auto-downport.yaml
index 696ac985..00fe2989 100644
--- a/.github/workflows/auto-downport.yaml
+++ b/.github/workflows/auto-downport.yaml
@@ -50,7 +50,7 @@ jobs:
 
     - name: Set up Node.js
       if: steps.scope.outputs.run == 'true'
-      uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
         cache: 'npm'
diff --git a/.github/workflows/bump-a2ui5.yaml b/.github/workflows/bump-a2ui5.yaml
index a756107a..f243e7a2 100644
--- a/.github/workflows/bump-a2ui5.yaml
+++ b/.github/workflows/bump-a2ui5.yaml
@@ -52,7 +52,7 @@ jobs:
     timeout-minutes: 90
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
         cache: 'npm'
diff --git a/.github/workflows/bump-linter.yaml b/.github/workflows/bump-linter.yaml
index 72a38e5e..9023cdd6 100644
--- a/.github/workflows/bump-linter.yaml
+++ b/.github/workflows/bump-linter.yaml
@@ -33,7 +33,7 @@ jobs:
     timeout-minutes: 45
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
         cache: 'npm'
diff --git a/.github/workflows/chain-format.yaml b/.github/workflows/chain-format.yaml
index c323158c..d214f80b 100644
--- a/.github/workflows/chain-format.yaml
+++ b/.github/workflows/chain-format.yaml
@@ -41,7 +41,7 @@ jobs:
     timeout-minutes: 10
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
     - name: The layout the whole tree is written in
diff --git a/.github/workflows/check-app-rules.yaml b/.github/workflows/check-app-rules.yaml
index e111e171..932fb235 100644
--- a/.github/workflows/check-app-rules.yaml
+++ b/.github/workflows/check-app-rules.yaml
@@ -62,7 +62,7 @@ jobs:
     timeout-minutes: 5
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
     # The report goes to RUNNER_TEMP, never into the working tree: a file
diff --git a/.github/workflows/check-atc.yaml b/.github/workflows/check-atc.yaml
index 79fed447..85293067 100644
--- a/.github/workflows/check-atc.yaml
+++ b/.github/workflows/check-atc.yaml
@@ -39,7 +39,7 @@ jobs:
     timeout-minutes: 5
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
     - run: node scripts/check-atc.mjs
diff --git a/.github/workflows/check-keywords.yaml b/.github/workflows/check-keywords.yaml
index a79d5cb4..72b4d99b 100644
--- a/.github/workflows/check-keywords.yaml
+++ b/.github/workflows/check-keywords.yaml
@@ -28,7 +28,7 @@ jobs:
     timeout-minutes: 5
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
     - run: node scripts/generate-keywords.mjs --check
diff --git a/.github/workflows/check-mcp-contract.yaml b/.github/workflows/check-mcp-contract.yaml
index a1d19990..72f937af 100644
--- a/.github/workflows/check-mcp-contract.yaml
+++ b/.github/workflows/check-mcp-contract.yaml
@@ -36,7 +36,7 @@ jobs:
     timeout-minutes: 5
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
     - run: node scripts/check-mcp-contract.mjs
diff --git a/.github/workflows/check-origin.yaml b/.github/workflows/check-origin.yaml
index 6e16f19b..c0529141 100644
--- a/.github/workflows/check-origin.yaml
+++ b/.github/workflows/check-origin.yaml
@@ -31,7 +31,7 @@ jobs:
     timeout-minutes: 5
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
     - run: node scripts/generate-origin.mjs --check
diff --git a/.github/workflows/check-pins.yaml b/.github/workflows/check-pins.yaml
index 73155404..7cd56ca9 100644
--- a/.github/workflows/check-pins.yaml
+++ b/.github/workflows/check-pins.yaml
@@ -25,7 +25,7 @@ jobs:
     timeout-minutes: 10
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
     - run: node scripts/check-pins.mjs
diff --git a/.github/workflows/check-prose-names.yaml b/.github/workflows/check-prose-names.yaml
index 8a73cf77..6cbc246e 100644
--- a/.github/workflows/check-prose-names.yaml
+++ b/.github/workflows/check-prose-names.yaml
@@ -43,7 +43,7 @@ jobs:
         fetch-depth: 1
         sparse-checkout: src
         sparse-checkout-cone-mode: false
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
     # A runner cannot check a repository out above the workspace, so the
diff --git a/.github/workflows/check-summary.yaml b/.github/workflows/check-summary.yaml
index 25632a18..b519ecae 100644
--- a/.github/workflows/check-summary.yaml
+++ b/.github/workflows/check-summary.yaml
@@ -31,7 +31,7 @@ jobs:
     timeout-minutes: 5
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
     - run: node scripts/generate-summary.mjs --check
diff --git a/.github/workflows/data-fidelity.yaml b/.github/workflows/data-fidelity.yaml
index fc5ed78b..61a09511 100644
--- a/.github/workflows/data-fidelity.yaml
+++ b/.github/workflows/data-fidelity.yaml
@@ -23,7 +23,7 @@ jobs:
     timeout-minutes: 10
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
     - run: node scripts/data-fidelity.mjs
diff --git a/.github/workflows/e2e-nightly.yaml b/.github/workflows/e2e-nightly.yaml
index 3fb619e7..4276ef36 100644
--- a/.github/workflows/e2e-nightly.yaml
+++ b/.github/workflows/e2e-nightly.yaml
@@ -59,7 +59,7 @@ jobs:
       uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
     - name: Set up Node.js
-      uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
         cache: 'npm'
diff --git a/.github/workflows/e2e-pr.yaml b/.github/workflows/e2e-pr.yaml
index 83c9d955..330e0e51 100644
--- a/.github/workflows/e2e-pr.yaml
+++ b/.github/workflows/e2e-pr.yaml
@@ -54,7 +54,7 @@ jobs:
         # the merge-base has to be reachable to diff against it
         fetch-depth: 0
 
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
         cache: 'npm'
diff --git a/.github/workflows/generate-result.yaml b/.github/workflows/generate-result.yaml
index 7dade483..4ac621e3 100644
--- a/.github/workflows/generate-result.yaml
+++ b/.github/workflows/generate-result.yaml
@@ -29,7 +29,7 @@ jobs:
       uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
     - name: Set up Node.js
-      uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
         cache: 'npm'
diff --git a/.github/workflows/meta-valid.yaml b/.github/workflows/meta-valid.yaml
index cf8e3657..75052283 100644
--- a/.github/workflows/meta-valid.yaml
+++ b/.github/workflows/meta-valid.yaml
@@ -35,7 +35,7 @@ jobs:
     timeout-minutes: 10
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
         cache: 'npm'
diff --git a/.github/workflows/pattern-lint.yaml b/.github/workflows/pattern-lint.yaml
index 97161aee..c6389a84 100644
--- a/.github/workflows/pattern-lint.yaml
+++ b/.github/workflows/pattern-lint.yaml
@@ -27,7 +27,7 @@ jobs:
     timeout-minutes: 10
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
     - run: node scripts/pattern-lint.mjs
diff --git a/.github/workflows/structural-diff.yaml b/.github/workflows/structural-diff.yaml
index 31b93601..7e9636b4 100644
--- a/.github/workflows/structural-diff.yaml
+++ b/.github/workflows/structural-diff.yaml
@@ -24,7 +24,7 @@ jobs:
     timeout-minutes: 10
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
     - run: node scripts/structural-diff.mjs --strict
diff --git a/.github/workflows/sync-shared.yaml b/.github/workflows/sync-shared.yaml
index 374c5598..90b9ab54 100644
--- a/.github/workflows/sync-shared.yaml
+++ b/.github/workflows/sync-shared.yaml
@@ -58,7 +58,7 @@ jobs:
           .github
           docs
 
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
 
diff --git a/.github/workflows/tooling-tests.yaml b/.github/workflows/tooling-tests.yaml
index 937a5695..0437fd8f 100644
--- a/.github/workflows/tooling-tests.yaml
+++ b/.github/workflows/tooling-tests.yaml
@@ -25,7 +25,7 @@ jobs:
     timeout-minutes: 10
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
     - run: npm test
diff --git a/.github/workflows/view-gates.yaml b/.github/workflows/view-gates.yaml
index d5c2a330..b2a4a1ba 100644
--- a/.github/workflows/view-gates.yaml
+++ b/.github/workflows/view-gates.yaml
@@ -33,7 +33,7 @@ jobs:
     timeout-minutes: 15
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+    - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '22'
         cache: 'npm'