From 761bccc7ee73504b3868cbc546d271665457267a Mon Sep 17 00:00:00 2001
From: Paul Jankowski <8BitTitan@gmail.com>
Date: Fri, 23 Oct 2026 14:38:55 -0400
Subject: [PATCH] fix(docker): bump node to 22.23.4

Pin base image and .nvmrc/engines to latest security release.
Triggers patch release so new image is built and pushed.
---
 .nvmrc       |  2 +-
 Dockerfile   |  4 ++--
 package.json |  4 ++--
 yarn.lock    | 10 +++++-----
 4 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.nvmrc b/.nvmrc
index b8ffd707..b8b23ca9 100644
--- a/.nvmrc
+++ b/.nvmrc
@@ -1 +1 @@
-22.15.0
+22.23.4
diff --git a/Dockerfile b/Dockerfile
index fe36d01a..17849325 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 # ------------------
 # Stage 1: Build
 # ------------------
-FROM node:22-bookworm-slim AS builder
+FROM node:22.23.4-bookworm-slim AS builder
 
 WORKDIR /app
 
@@ -25,7 +25,7 @@ RUN yarn build \
 # ------------------
 # Stage 2: Production
 # ------------------
-FROM node:22-bookworm-slim
+FROM node:22.23.4-bookworm-slim
 
 ARG DEBIAN_FRONTEND=noninteractive
 ARG TZ=America/Los_Angeles
diff --git a/package.json b/package.json
index 0bab9a28..c03c3e08 100644
--- a/package.json
+++ b/package.json
@@ -35,7 +35,7 @@
     "url": "https://github.com/algolia/renderscript/issues"
   },
   "engines": {
-    "node": "22.15.0"
+    "node": "22.23.4"
   },
   "homepage": "https://github.com/algolia/renderscript#readme",
   "devDependencies": {
@@ -45,7 +45,7 @@
     "@types/csurf": "1.11.5",
     "@types/express": "4.17.21",
     "@types/jest": "29.5.8",
-    "@types/node": "22.15.3",
+    "@types/node": "22.20.5",
     "@types/uuid": "9.0.7",
     "@typescript-eslint/eslint-plugin": "6.11.0",
     "@typescript-eslint/parser": "6.11.0",
diff --git a/yarn.lock b/yarn.lock
index 44afc091..04089624 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -33,7 +33,7 @@ __metadata:
     "@types/csurf": "npm:1.11.5"
     "@types/express": "npm:4.17.21"
     "@types/jest": "npm:29.5.8"
-    "@types/node": "npm:22.15.3"
+    "@types/node": "npm:22.20.5"
     "@types/uuid": "npm:9.0.7"
     "@typescript-eslint/eslint-plugin": "npm:6.11.0"
     "@typescript-eslint/parser": "npm:6.11.0"
@@ -2058,12 +2058,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@types/node@npm:22.15.3":
-  version: 22.15.3
-  resolution: "@types/node@npm:22.15.3"
+"@types/node@npm:22.20.5":
+  version: 22.20.5
+  resolution: "@types/node@npm:22.20.5"
   dependencies:
     undici-types: "npm:~6.21.0"
-  checksum: 6b4ff03c36598432b419980f828281aa16383e2de6eb61f73275495ef8d2cbf8cb5607659b4cae5ff8b2b2ff69913ea07ffcc0be029e4280b6e8bc138dc6629b
+  checksum: a223a73e00e948b751b00144523674ecc73e7a3f14f48a0f3a6fca40745ff548a8b0ff5baca090d45ae8b61481cc56c1158db4df312970baeb6fc1b81fc511a1
   languageName: node
   linkType: hard