diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index cd79e35..aae1210 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -19,6 +19,14 @@ jobs:
       TB_VBDOS_REPO: /tmp/tb-vbdos
       TB_RUN_URL: ${{ gitea.server_url }}/${{ gitea.repository }}/actions/runs/${{ gitea.run_number }}
     steps:
+      # Vor checkout nötig: Die Cross-Images enthalten kein Node für JS-Actions.
+      - name: Gepinnte Actions-Laufzeit
+        run: |
+          set -eu
+          curl -fsSL https://nodejs.org/dist/v22.22.0/node-v22.22.0-linux-arm64.tar.xz -o /tmp/tb-node.tar.xz
+          echo '1bf1eb9ee63ffc4e5d324c0b9b62cf4a289f44332dfef9607cea1a0d9596ba6f  /tmp/tb-node.tar.xz' | sha256sum -c -
+          tar -xJf /tmp/tb-node.tar.xz -C /usr/local --strip-components=1
+          node --version
       - uses: https://gitea.com/actions/checkout@11d5960a326750d5838078e36cf38b85af677262
         with:
           persist-credentials: false
@@ -63,6 +71,14 @@ jobs:
       TB_BUILD_IMAGE: ${{ matrix.image }}
       TB_TARGET: ${{ matrix.target }}
     steps:
+      # Vor checkout nötig: Die Cross-Images enthalten kein Node für JS-Actions.
+      - name: Gepinnte Actions-Laufzeit
+        run: |
+          set -eu
+          curl -fsSL https://nodejs.org/dist/v22.22.0/node-v22.22.0-linux-arm64.tar.xz -o /tmp/tb-node.tar.xz
+          echo '1bf1eb9ee63ffc4e5d324c0b9b62cf4a289f44332dfef9607cea1a0d9596ba6f  /tmp/tb-node.tar.xz' | sha256sum -c -
+          tar -xJf /tmp/tb-node.tar.xz -C /usr/local --strip-components=1
+          node --version
       - uses: https://gitea.com/actions/checkout@11d5960a326750d5838078e36cf38b85af677262
         with:
           persist-credentials: false
@@ -80,6 +96,14 @@ jobs:
     runs-on: linux-arm64
     container: ghcr.io/rust-cross/cargo-zigbuild@sha256:82af75c41958c2af2787e8bedd912da7678a9438937e223e9d83d006d747b38b
     steps:
+      # Vor checkout nötig: Die Cross-Images enthalten kein Node für JS-Actions.
+      - name: Gepinnte Actions-Laufzeit
+        run: |
+          set -eu
+          curl -fsSL https://nodejs.org/dist/v22.22.0/node-v22.22.0-linux-arm64.tar.xz -o /tmp/tb-node.tar.xz
+          echo '1bf1eb9ee63ffc4e5d324c0b9b62cf4a289f44332dfef9607cea1a0d9596ba6f  /tmp/tb-node.tar.xz' | sha256sum -c -
+          tar -xJf /tmp/tb-node.tar.xz -C /usr/local --strip-components=1
+          node --version
       - uses: https://gitea.com/actions/checkout@11d5960a326750d5838078e36cf38b85af677262
         with:
           persist-credentials: false
diff --git a/.gitea/workflows/publish.yml b/.gitea/workflows/publish.yml
index 6a413a4..65e9cda 100644
--- a/.gitea/workflows/publish.yml
+++ b/.gitea/workflows/publish.yml
@@ -16,6 +16,14 @@ jobs:
     runs-on: linux-arm64
     container: ghcr.io/rust-cross/cargo-zigbuild@sha256:82af75c41958c2af2787e8bedd912da7678a9438937e223e9d83d006d747b38b
     steps:
+      # Vor checkout nötig: Die Cross-Images enthalten kein Node für JS-Actions.
+      - name: Gepinnte Actions-Laufzeit
+        run: |
+          set -eu
+          curl -fsSL https://nodejs.org/dist/v22.22.0/node-v22.22.0-linux-arm64.tar.xz -o /tmp/tb-node.tar.xz
+          echo '1bf1eb9ee63ffc4e5d324c0b9b62cf4a289f44332dfef9607cea1a0d9596ba6f  /tmp/tb-node.tar.xz' | sha256sum -c -
+          tar -xJf /tmp/tb-node.tar.xz -C /usr/local --strip-components=1
+          node --version
       - uses: https://gitea.com/actions/checkout@11d5960a326750d5838078e36cf38b85af677262
         with:
           fetch-depth: 0