From 3f9b6269ef652d609895db3e5f10914bd188855b Mon Sep 17 00:00:00 2001 From: Crash0v3rrid3 Date: Mon, 26 Oct 2026 17:54:24 +0530 Subject: [PATCH] [DEVA11Y-828] fix(security): install Node 22.23.4 instead of end-of-life Node 20 Co-Authored-By: Claude Opus 5.5 --- .github/workflows/release.yml | 4 ++-- action.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index d358bd2..e7cc10d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -31,7 +31,7 @@ jobs: - uses: actions/setup-node@v4 with: - node-version: '20' + node-version: '22.23.4' # Bundle a dist/ IF the action grows JS entrypoints (esbuild pattern). # Guarded so the stub is a no-op for the current pure-composite action. @@ -43,7 +43,7 @@ jobs: npm ci # Example bundling target for a future JS action entrypoint: # npx esbuild src/index.ts --bundle --platform=node \ - # --target=node20 --outfile=dist/index.js + # --target=node22 --outfile=dist/index.js npm run build echo "Bundled dist/ produced." else diff --git a/action.yml b/action.yml index 6e86faa..4c5b241 100644 --- a/action.yml +++ b/action.yml @@ -241,7 +241,7 @@ runs: if: steps.preflight.outputs.ready == 'true' uses: actions/setup-node@v4 with: - node-version: '20' + node-version: '22.23.4' # --------------------------------------------------------------------------- # 6. Run the pinned, published CLI in PR-scan mode. The CLI resolves the