From 3584409e6390665eedc46831bba6e5bfa0e7ec1c Mon Sep 17 00:00:00 2001 From: Senthanal Sirpi Manohar Date: Wed, 28 Oct 2026 06:31:13 +0100 Subject: [PATCH] chore: roll out Node 24.22.1 / npm 11.19.1 (CVE-2026-111497) Patch the toolchain pin on release/26.4 from Node 24.20.0 / npm 11.19.0 to Node 24.22.1 / npm 11.19.1 (PFM-TASK-8698, PFM-ISSUE-35243). - node-version in all fe-*.yml shared workflows set to 24.22.1 - fe-e2e.yml container image set to cypress/browsers:24.22.1 - .nvmrc, .tool-versions and package.json engines set to 24.22.1 / 11.19.1 - package-lock.json engines block regenerated with npm 11.19.1 Co-Authored-By: Claude Opus 5.5 --- .github/workflows/fe-build.yml | 2 +- .github/workflows/fe-check-upmerge.yml | 2 +- .github/workflows/fe-cleanup-snapshots.yml | 2 +- .github/workflows/fe-code-quality.yml | 2 +- .github/workflows/fe-e2e.yml | 2 +- .github/workflows/fe-install-deps.yml | 2 +- .github/workflows/fe-licenses.yml | 2 +- .github/workflows/fe-pr-close.yml | 2 +- .github/workflows/fe-pr-snapshot.yml | 2 +- .github/workflows/fe-release.yml | 2 +- .github/workflows/fe-snapshot.yml | 2 +- .github/workflows/fe-tag.yml | 2 +- .nvmrc | 2 +- .tool-versions | 4 ++-- package-lock.json | 4 ++-- package.json | 4 ++-- 16 files changed, 19 insertions(+), 19 deletions(-) diff --git a/.github/workflows/fe-build.yml b/.github/workflows/fe-build.yml index b2ea688..6e30d86 100644 --- a/.github/workflows/fe-build.yml +++ b/.github/workflows/fe-build.yml @@ -32,7 +32,7 @@ jobs: fetch-depth: 0 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: - node-version: 24.20.0 + node-version: 24.22.1 - name: Cache Node Modules id: npm-cache uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 diff --git a/.github/workflows/fe-check-upmerge.yml b/.github/workflows/fe-check-upmerge.yml index 4689121..fd4cddd 100644 --- a/.github/workflows/fe-check-upmerge.yml +++ b/.github/workflows/fe-check-upmerge.yml @@ -22,7 +22,7 @@ jobs: - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: - node-version: 24.20.0 + node-version: 24.22.1 - name: Cache Node Modules id: npm-cache diff --git a/.github/workflows/fe-cleanup-snapshots.yml b/.github/workflows/fe-cleanup-snapshots.yml index 4c97a8a..2336b3c 100644 --- a/.github/workflows/fe-cleanup-snapshots.yml +++ b/.github/workflows/fe-cleanup-snapshots.yml @@ -24,7 +24,7 @@ jobs: - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: - node-version: 24.20.0 + node-version: 24.22.1 - name: Cache Node Modules id: npm-cache diff --git a/.github/workflows/fe-code-quality.yml b/.github/workflows/fe-code-quality.yml index 30b9766..4569964 100644 --- a/.github/workflows/fe-code-quality.yml +++ b/.github/workflows/fe-code-quality.yml @@ -46,7 +46,7 @@ jobs: - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: - node-version: 24.20.0 + node-version: 24.22.1 - name: Cache Node Modules id: npm-cache uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 diff --git a/.github/workflows/fe-e2e.yml b/.github/workflows/fe-e2e.yml index c7295ee..f96442d 100644 --- a/.github/workflows/fe-e2e.yml +++ b/.github/workflows/fe-e2e.yml @@ -17,7 +17,7 @@ jobs: e2e: runs-on: ubuntu-latest container: - image: cypress/browsers:24.20.0 + image: cypress/browsers:24.22.1 options: --user 1001 timeout-minutes: 120 strategy: diff --git a/.github/workflows/fe-install-deps.yml b/.github/workflows/fe-install-deps.yml index e8bbb84..e317fc7 100644 --- a/.github/workflows/fe-install-deps.yml +++ b/.github/workflows/fe-install-deps.yml @@ -24,7 +24,7 @@ jobs: - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: - node-version: 24.20.0 + node-version: 24.22.1 - name: Cache Node Modules id: npm-cache uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 diff --git a/.github/workflows/fe-licenses.yml b/.github/workflows/fe-licenses.yml index 99ff800..b3d2a4f 100644 --- a/.github/workflows/fe-licenses.yml +++ b/.github/workflows/fe-licenses.yml @@ -27,7 +27,7 @@ jobs: - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: - node-version: 24.20.0 + node-version: 24.22.1 - name: Cache Node Modules id: npm-cache uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 diff --git a/.github/workflows/fe-pr-close.yml b/.github/workflows/fe-pr-close.yml index 8c1d4d3..e334d66 100644 --- a/.github/workflows/fe-pr-close.yml +++ b/.github/workflows/fe-pr-close.yml @@ -27,7 +27,7 @@ jobs: - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: - node-version: 24.20.0 + node-version: 24.22.1 - name: Cache Node Modules id: npm-cache uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 diff --git a/.github/workflows/fe-pr-snapshot.yml b/.github/workflows/fe-pr-snapshot.yml index 99a21cc..f298971 100644 --- a/.github/workflows/fe-pr-snapshot.yml +++ b/.github/workflows/fe-pr-snapshot.yml @@ -30,7 +30,7 @@ jobs: - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: - node-version: 24.20.0 + node-version: 24.22.1 - name: Cache Node Modules id: npm-cache uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 diff --git a/.github/workflows/fe-release.yml b/.github/workflows/fe-release.yml index c4454d4..8a9e760 100644 --- a/.github/workflows/fe-release.yml +++ b/.github/workflows/fe-release.yml @@ -27,7 +27,7 @@ jobs: - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: - node-version: 24.20.0 + node-version: 24.22.1 - name: Cache Node Modules id: npm-cache diff --git a/.github/workflows/fe-snapshot.yml b/.github/workflows/fe-snapshot.yml index bebdbd9..f002a43 100644 --- a/.github/workflows/fe-snapshot.yml +++ b/.github/workflows/fe-snapshot.yml @@ -32,7 +32,7 @@ jobs: - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: - node-version: 24.20.0 + node-version: 24.22.1 - name: Cache Node Modules id: npm-cache uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 diff --git a/.github/workflows/fe-tag.yml b/.github/workflows/fe-tag.yml index 59d2f17..1af810a 100644 --- a/.github/workflows/fe-tag.yml +++ b/.github/workflows/fe-tag.yml @@ -34,7 +34,7 @@ jobs: token: ${{ secrets.GIT_USER_TOKEN }} - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: - node-version: 24.20.0 + node-version: 24.22.1 - name: Cache Node Modules id: npm-cache uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 diff --git a/.nvmrc b/.nvmrc index 0f60905..474d750 100644 --- a/.nvmrc +++ b/.nvmrc @@ -1 +1 @@ -v24.20.0 +v24.22.1 diff --git a/.tool-versions b/.tool-versions index 6b5ccda..fa69e28 100644 --- a/.tool-versions +++ b/.tool-versions @@ -1,2 +1,2 @@ -nodejs 24.20.0 -npm 11.19.0 +nodejs 24.22.1 +npm 11.19.1 diff --git a/package-lock.json b/package-lock.json index d375c40..bd60f29 100644 --- a/package-lock.json +++ b/package-lock.json @@ -25,8 +25,8 @@ "typescript": "5.4.5" }, "engines": { - "node": "24.20.0", - "npm": "11.19.0" + "node": "24.22.1", + "npm": "11.19.1" } }, "node_modules/@actions/core": { diff --git a/package.json b/package.json index 504fbb5..bd01f9c 100644 --- a/package.json +++ b/package.json @@ -4,8 +4,8 @@ "description": "", "main": "index.js", "engines": { - "node": "24.20.0", - "npm": "11.19.0" + "node": "24.22.1", + "npm": "11.19.1" }, "scripts": { "test": "jest --config=./jest.config.js",