From a326f948ca61c5e6655e5eac02afa188c065c405 Mon Sep 17 00:00:00 2001 From: Robert Chen Date: Wed, 21 Oct 2026 10:16:53 -0700 Subject: [PATCH 1/2] Bump Node to 26.12.1 to block the compromised eMudhra intermediates --- .nvmrc | 2 +- package-lock.json | 2 +- package.json | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.nvmrc b/.nvmrc index 3eb1386fcc08..63f87c20ef9f 100644 --- a/.nvmrc +++ b/.nvmrc @@ -1 +1 @@ -26.5.0 +26.12.1 diff --git a/package-lock.json b/package-lock.json index 9c8697e83583..9d927ba46b8f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -296,7 +296,7 @@ }, "engines": { "bun": "1.3.14", - "node": "26.5.0", + "node": "26.12.1", "npm": "11.17.0" } }, diff --git a/package.json b/package.json index 44fa0c456470..faacb64572b3 100644 --- a/package.json +++ b/package.json @@ -461,7 +461,7 @@ }, "engines": { "bun": "1.3.14", - "node": "26.5.0", + "node": "26.12.1", "npm": "11.17.0" } } From 1f5282949dce635d63d8b23db63fbdf597782c88 Mon Sep 17 00:00:00 2001 From: Robert Chen Date: Wed, 21 Oct 2026 10:38:51 -0700 Subject: [PATCH 2/2] Bump npm to 11.20.0 to match Node 26.12.1 --- package-lock.json | 2 +- package.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package-lock.json b/package-lock.json index 9d927ba46b8f..0833fcf64791 100644 --- a/package-lock.json +++ b/package-lock.json @@ -297,7 +297,7 @@ "engines": { "bun": "1.3.14", "node": "26.12.1", - "npm": "11.17.0" + "npm": "11.20.0" } }, "modules/background-task": { diff --git a/package.json b/package.json index faacb64572b3..0a6566820590 100644 --- a/package.json +++ b/package.json @@ -462,6 +462,6 @@ "engines": { "bun": "1.3.14", "node": "26.12.1", - "npm": "11.17.0" + "npm": "11.20.0" } }