Skip to content

ci: patch dbtypr Node tooling and development container - #24

Merged
sybohy merged 1 commit into
mainfrom
fix/node-brotli-security-20261024
Oct 24, 2026
Merged

sybohy merged 1 commit into
mainfrom
fix/node-brotli-security-20261024

Conversation

@sybohy

@sybohy sybohy commented Oct 24, 2026

Copy link
Copy Markdown
Member

Move local/shared CI defaults from Node 20 to patched Node 22.23.4 and replace the EOL 18/20 validation matrix with patched 22.23.4/24.22.1. Keep the published library's consumer engine range unchanged. Update the development container to the maintained Microsoft Node 22 Bookworm image, then install the exact digest-pinned official Node 22.23.4 binary into its system and inherited nvm locations; a build assertion checks the actual binary.

Validated on Node v22.23.4: clean npm install/rebuild, tests, TypeScript, and package build. Development container built successfully; system Node, interactive/login shell Node, and Node after sourcing nvm all print v22.23.4. Changed YAML/JSON parsing and formatting pass. No releases or deployments were performed. Existing CI will also validate Node 24.22.1.

Addresses the October Node security release including CVE-2026-111497. Node advisory.

@sybohy
sybohy requested a review from louis-pre as a code owner October 24, 2026 04:50
@sybohy
sybohy merged commit bb59e5c into main Oct 24, 2026
13 checks passed
@sybohy
sybohy deleted the fix/node-brotli-security-20261024 branch October 24, 2026 04:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant