Pin Node 24.22.1 (Node.js Oct 2026 security release) #1

Merged

backmeupplz merged 1 commit from node-24.22.1 into main

2026-10-21 14:53:04 +00:00

backmeupplz commented

2026-10-21 14:50:28 +00:00

(Migrated from github.com)

Pins the Docker base image to node:24.22.1, the patched release from the Node.js October 2026 security releases (CVE-2026-111497 Brotli RCE, TLS hostname-check bypasses). The floating node:24 tag was 24.21/24.22.0 in the running image.

Local docker build passes (including the in-image tests where the Dockerfile runs them) and node -v in the image prints v24.22.1.

🤖 Generated with Claude Code

Pins the Docker base image to `node:24.22.1`, the patched release from the [Node.js October 2026 security releases](https://nodejs.org/en/blog/vulnerability/october-2026-security-releases) (CVE-2026-111497 Brotli RCE, TLS hostname-check bypasses). The floating `node:24` tag was 24.21/24.22.0 in the running image. Local `docker build` passes (including the in-image tests where the Dockerfile runs them) and `node -v` in the image prints v24.22.1. 🤖 Generated with [Claude Code](https://claude.com/claude-code)