zizmor flagged the pin as a hash with a mismatched version comment: it
read `# master` as a claim about a branch that has since moved on to
ed8efb33836e. 1.6 is that commit, so the comment now names a tag that
holds still, and the newer action drops the Node 20 deprecation warning.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Rz9eYTeKgfMPoBpCjGkkaW

diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index 06155e0..534b4da 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -29,7 +29,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: superfly/flyctl-actions/setup-flyctl@63da3ecc5e2793b98a3f2519b3d75d4f4c11cec2 # master
+      - uses: superfly/flyctl-actions/setup-flyctl@ed8efb33836e8b2096c7fd3ba1c8afe303ebbff1 # 1.6
 
       # Creates the app on open, redeploys it on each push, and destroys
       # it when the PR closes.