From 430462207a444bd05c5835724209dc494a670720 Mon Sep 17 00:00:00 2001 From: hiletmis <31757771+hiletmis@users.noreply.github.com> Date: Mon, 26 Oct 2026 09:29:16 +0300 Subject: [PATCH] Update Node.js to 24.22.1 The Oct 20 Node.js security release fixes a Brotli RCE and the eMudhra CA issue. Node 20 is EOL and gets no patch, so the Docker images move from 20.20.2 to 24.22.1, matching the major version CI already uses. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/main.yml | 6 +++--- Dockerfile | 8 ++++---- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index d03d944d..30a0ee7f 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -40,7 +40,7 @@ jobs: - name: Setup Node uses: actions/setup-node@v6 with: - node-version: 24.17.0 + node-version: 24.22.1 cache: 'pnpm' - name: Install Dependencies run: pnpm install --frozen-lockfile @@ -63,7 +63,7 @@ jobs: - name: Setup Node uses: actions/setup-node@v6 with: - node-version: 24.17.0 + node-version: 24.22.1 cache: 'pnpm' - name: Install dependencies run: pnpm install --frozen-lockfile @@ -111,7 +111,7 @@ jobs: - name: Setup Node uses: actions/setup-node@v6 with: - node-version: 24.17.0 + node-version: 24.22.1 registry-url: 'https://registry.npmjs.org' cache: 'pnpm' - name: Configure Git credentials diff --git a/Dockerfile b/Dockerfile index c790c602..f2cf26af 100644 --- a/Dockerfile +++ b/Dockerfile @@ -15,14 +15,14 @@ # stages and verify that the image is correct. # Extract the pnpm version from the package.json file and store it in an environment variable. -FROM node:20.20.2-slim AS version-extract +FROM node:24.22.1-slim AS version-extract WORKDIR /app COPY package.json . RUN apt-get update && \ apt-get install -y jq && \ echo "PNPM_VERSION=$(jq -r .packageManager package.json | sed 's/pnpm@//')" >> /tmp/env-vars -FROM node:20.20.2-slim AS build +FROM node:24.22.1-slim AS build WORKDIR /app COPY --from=version-extract /tmp/env-vars /tmp/env-vars RUN . /tmp/env-vars && npm install -g pnpm@${PNPM_VERSION} @@ -46,7 +46,7 @@ LABEL application="airnode-feed" description="Airnode feed container" FROM build AS deployed-airnode-feed RUN pnpm --filter=@api3/airnode-feed --prod deploy deployed-airnode-feed -FROM node:20.20.2-slim AS airnode-feed +FROM node:24.22.1-slim AS airnode-feed WORKDIR /app # Update package lists and install wget @@ -67,7 +67,7 @@ LABEL application="signed-api" description="Signed API container" FROM build AS deployed-signed-api RUN pnpm --filter=@api3/signed-api --prod deploy deployed-signed-api -FROM node:20.20.2-slim AS signed-api +FROM node:24.22.1-slim AS signed-api WORKDIR /app # Update package lists and install wget