Repository navigation
chore(deps): bump node to 24.22.1 and mise to 2026.10.17 - #162
Open
otofu-square wants to merge 1 commit into
Open
otofu-square wants to merge 1 commit into
otofu-square wants to merge 1 commit into
Conversation
Both versions stop trusting the compromised eMudhra intermediate CA. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
何を上げたか
mise.toml:3(mise.lockは mise 2026.10.17 でmise lockを実行して作り直し。node のエントリだけが変わっています).github/actions/setup/action.yaml:15open の #160 (mise 2026.10.10 への Renovate PR) は修正版に届かないため、この PR で 2026.10.17 に上げています。
なぜ
2026-10-17 に公表された eMudhra 中間 CA の鍵漏洩 (Mozilla Bug 2083449) への対応です。開発・CI 用の版が修正版未満のため上げます。action の実行 (
runs.using: node24) はランナー同梱の Node.js を使うので、この PR の対象外です。dist/は変わりません。修正版 (2026-10-22 時点): Node.js 22.23.4 / 24.22.1 / 26.12.1、Go 1.27.3 / 1.26.10、Deno 2.9.8、uv 0.13.4、mise 2026.10.17、certifi 2026.10.19。
関連: knowledge-work/knowledgework#161038
確認したこと・しなかったこと
dist/index.jsのrejectUnauthorized: falseは@actions/http-clientのignoreSslErrorが有効なときだけの分岐で、既定では無効のため変更していません)dist/は変わらないため CI に任せます)🤖 Generated with Claude Code