From 9c66346087962b176a7f272471e893fa3f19c50f Mon Sep 17 00:00:00 2001 From: bntvllnt <32437578+bntvllnt@users.noreply.github.com> Date: Thu, 22 Oct 2026 23:08:24 +0200 Subject: [PATCH] ci: pin Node.js 24.22.1 and test on 22.23.4 and 24.22.1 instead of end-of-life 18 (October 2026 security release) October 2026 Node.js security release: pins Node exactly instead of a floating major. --- .github/workflows/ci.yml | 4 ++-- .github/workflows/publish.yml | 6 +++--- .node-version | 1 + 3 files changed, 6 insertions(+), 5 deletions(-) create mode 100644 .node-version diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b75a54b..6d81972 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -28,7 +28,7 @@ jobs: - uses: actions/setup-node@v4 with: - node-version: 22 + node-version-file: .node-version cache: pnpm - run: pnpm install --frozen-lockfile @@ -180,7 +180,7 @@ jobs: strategy: fail-fast: false matrix: - node-version: [18, 22] + node-version: [22.23.4, 24.22.1] shard: ["1/4", "2/4", "3/4", "4/4"] steps: - uses: actions/checkout@v4 diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 64c1732..a4b444b 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -28,7 +28,7 @@ jobs: - uses: actions/setup-node@v4 with: - node-version: 22 + node-version-file: .node-version cache: pnpm - run: pnpm install --frozen-lockfile @@ -60,7 +60,7 @@ jobs: - uses: actions/setup-node@v4 with: - node-version: 22 + node-version-file: .node-version cache: pnpm registry-url: https://registry.npmjs.org @@ -97,7 +97,7 @@ jobs: - uses: actions/setup-node@v4 with: - node-version: 22 + node-version-file: .node-version cache: pnpm registry-url: https://registry.npmjs.org diff --git a/.node-version b/.node-version new file mode 100644 index 0000000..ce62013 --- /dev/null +++ b/.node-version @@ -0,0 +1 @@ +24.22.1