From 57cf5c79683d896498823c90bfbafb916e16e0b3 Mon Sep 17 00:00:00 2001 From: ulziibay-kernel <253135130+ulziibay-kernel@users.noreply.github.com> Date: Thu, 22 Oct 2026 21:27:45 +0000 Subject: [PATCH] Bump release-please Node version to 22 Node 18 is end-of-life and receives no security fixes, including the 2026-10-21 Brotli decoder fix (CVE-2026-111497). The exact 18.20.2 pin can never be patched; use the supported 22 line, which resolves to patched releases. --- .github/workflows/release-please.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index e7ceab28..e69a7175 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -38,7 +38,7 @@ jobs: - name: Set up Node uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: - node-version: '18.20.2' + node-version: '22' - name: Set up pnpm uses: pnpm/action-setup@f40ffcd9367d9f12939873eb1018b921a783ffaa # v4