From 570022c911162c93a7489f307446c83ef45cd6dc Mon Sep 17 00:00:00 2001 From: ulziibay-kernel <253135130+ulziibay-kernel@users.noreply.github.com> Date: Thu, 22 Oct 2026 21:27:53 +0000 Subject: [PATCH] Unpin CI Node version from 22.22.2 to 22 The exact 22.22.2 pin predates the 2026-10-21 security releases (CVE-2026-111497, Brotli decoder, fixed in 22.23.4). A floating major pin resolves to patched releases automatically, matching the rest of our CI. --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 25dc2ab..ba247ba 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -13,7 +13,7 @@ jobs: - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: - node-version: 22.22.2 + node-version: 22 cache: npm - run: npm ci - run: npm run typecheck