From c3dc2e36da90ed56d651663f5b2d761d7324f493 Mon Sep 17 00:00:00 2001 From: Taylan Pince Date: Wed, 21 Oct 2026 19:00:58 +0200 Subject: [PATCH 1/2] ci: run tests on Node 24 instead of EOL Node 23 Node.js ships its own root store, which trusted the compromised eMudhra intermediates until v26.12.1, v24.22.1 and v22.23.4. Pin a patched release. See https://emudhra.we-have-a-problem.com/ Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01Q1Vsk7Jb4cDNF21XuYhjHk --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 6bf49709..b3d8ac3a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -31,7 +31,7 @@ jobs: - name: Install node uses: actions/setup-node@v4 with: - node-version: 23 + node-version: 24 - name: Install pnpm uses: pnpm/action-setup@v4 From eee2227379ae61fde72703ac1ebdf8972ea523d5 Mon Sep 17 00:00:00 2001 From: Taylan Pince Date: Wed, 21 Oct 2026 19:05:53 +0200 Subject: [PATCH 2/2] ci: set check-latest so setup-node fetches the patched Node 24 setup-node resolves a major version from the runner's tool cache first, which can still hold a pre-24.22.1 build until the runner image refreshes. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01Q1Vsk7Jb4cDNF21XuYhjHk --- .github/workflows/ci.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b3d8ac3a..a5584812 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -32,6 +32,7 @@ jobs: uses: actions/setup-node@v4 with: node-version: 24 + check-latest: true - name: Install pnpm uses: pnpm/action-setup@v4