From 125f715329f251977199d9140cf00b86b804ce7d Mon Sep 17 00:00:00 2001 From: Matt Allford Date: Sat, 24 Oct 2026 13:59:46 +1100 Subject: [PATCH] Update Node.js to fix the Brotli security issue (CVE-2026-111497) --- .github/versions.env | 2 +- .nvmrc | 1 + package.json | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) create mode 100644 .nvmrc diff --git a/.github/versions.env b/.github/versions.env index 3924f5badd..bdda4ee691 100644 --- a/.github/versions.env +++ b/.github/versions.env @@ -1,2 +1,2 @@ -NODE_VERSION=22 +NODE_VERSION=22.23.4 PNPM_VERSION=10.13.1 diff --git a/.nvmrc b/.nvmrc new file mode 100644 index 0000000000..b8b23ca93c --- /dev/null +++ b/.nvmrc @@ -0,0 +1 @@ +22.23.4 diff --git a/package.json b/package.json index bf785fb0f3..a0348abf4c 100644 --- a/package.json +++ b/package.json @@ -5,7 +5,7 @@ "private": true, "packageManager": "pnpm@10.13.1", "engines": { - "node": ">=18.14.1", + "node": "^22.23.4 || ^24.22.1 || >=26.12.1", "pnpm": ">=9.10.0" }, "scripts": {