From f551aa33f0cf2a537ce6f6975446407f3bf71262 Mon Sep 17 00:00:00 2001 From: alexander-sei Date: Fri, 23 Oct 2026 10:52:21 +0200 Subject: [PATCH] ci: move workflows off end-of-life Node 20 regenerate-llms, link-check, and sync-skills pinned Node 20, which reached end-of-life in April 2026. Its last release bundles Brotli 1.1.0, which is affected by GHSA-9v8h-qqgm-4m35 (CVE-2026-111497) and won't be patched. Read the version from .nvmrc like seo-audit does, and set check-latest so setup-node resolves the newest Node 22 release (the patched 22.23.4) instead of the runner's cached 22.23.3. Co-authored-by: Cursor --- .github/workflows/link-check.yml | 3 ++- .github/workflows/regenerate-llms.yml | 3 ++- .github/workflows/sync-skills.yml | 3 ++- 3 files changed, 6 insertions(+), 3 deletions(-) diff --git a/.github/workflows/link-check.yml b/.github/workflows/link-check.yml index 60d8201..7410cbf 100644 --- a/.github/workflows/link-check.yml +++ b/.github/workflows/link-check.yml @@ -19,7 +19,8 @@ jobs: - name: Setup Node.js uses: actions/setup-node@v4 with: - node-version: '20' + node-version-file: '.nvmrc' + check-latest: true - name: Install Mintlify CLI run: npm install -g mint diff --git a/.github/workflows/regenerate-llms.yml b/.github/workflows/regenerate-llms.yml index 1373992..9bc1261 100644 --- a/.github/workflows/regenerate-llms.yml +++ b/.github/workflows/regenerate-llms.yml @@ -32,7 +32,8 @@ jobs: - name: Set up Node uses: actions/setup-node@v4 with: - node-version: '20' + node-version-file: '.nvmrc' + check-latest: true - name: Regenerate llms.txt and llms-full.txt run: node scripts/generate-llms.mjs diff --git a/.github/workflows/sync-skills.yml b/.github/workflows/sync-skills.yml index 0ec96e3..66b6d4e 100644 --- a/.github/workflows/sync-skills.yml +++ b/.github/workflows/sync-skills.yml @@ -50,7 +50,8 @@ jobs: - name: Set up Node uses: actions/setup-node@v4 with: - node-version: '20' + node-version-file: '.nvmrc' + check-latest: true - name: Install generator dependency run: npm install --no-save @anthropic-ai/sdk@0.129.0