From cb6015a40b0e900471f26c369a5f815be333c224 Mon Sep 17 00:00:00 2001 From: Dylan Schmittle Date: Thu, 22 Oct 2026 14:00:15 -0400 Subject: [PATCH] chore(ci): move Node/Bun CI pins to patched releases (CVE-2026-111497) Node <= 20 is end-of-life and got no fix in the Oct 2026 security release; bun <= 1.4.3 bundles the unfixed Brotli decoder. Pins CI to Node 22.23.4 / 24.22.1 and bun 1.4.4. --- .nvmrc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.nvmrc b/.nvmrc index 25bf17f..c62d2c8 100644 --- a/.nvmrc +++ b/.nvmrc @@ -1 +1 @@ -18 \ No newline at end of file +22.23.4 \ No newline at end of file