chore: pin node 24.22.1 for the eMadhra TLS vulnerability (#236)

- Dockerfile: node:24-alpine -> node:24.22.1-alpine
- CI node 20.x -> 24.x; checkout v3/v4->v7, setup-node v4->v7, docker/login v2->v4, build-push v4->v7
- engines.node ">= 20.0.0" -> ">= 24.22.1" in package.json and package-lock.json root entry

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Dave HortonandClaude Opus 5.5 authored and GitHub committed 2026-10-23 12:54:26 -04:00
1 parent c596efc8db
commit 35a0b0323c
5 files changed
+9 -9

No files matched your search

+3 -3
View File
@@ -6,10 +6,10 @@ jobs:
build:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
- uses: actions/checkout@v7
- uses: actions/setup-node@v7
with:
node-version: 20.x
node-version: 24.x
- run: npm ci
- run: npm run jslint
- name: Install Docker Compose
+3 -3
View File
@@ -15,7 +15,7 @@ jobs:
steps:
- name: Checkout code
uses: actions/checkout@v3
uses: actions/checkout@v7
- name: prepare tag
id: prepare_tag
@@ -38,13 +38,13 @@ jobs:
echo "version=$VERSION" >> $GITHUB_OUTPUT
- name: Login to Docker Hub
uses: docker/login-action@v2
uses: docker/login-action@v4
with:
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
- name: Build and push Docker image
uses: docker/build-push-action@v4
uses: docker/build-push-action@v7
with:
context: .
push: true
+1 -1
View File
@@ -1,4 +1,4 @@
FROM --platform=linux/amd64 node:24-alpine AS base
FROM --platform=linux/amd64 node:24.22.1-alpine AS base
RUN apk --update --no-cache add --virtual .builds-deps build-base python3
+1 -1
View File
@@ -34,7 +34,7 @@
"tape": "^5.9.0"
},
"engines": {
"node": ">= 20.0.0"
"node": ">= 24.22.1"
}
},
"node_modules/@babel/code-frame": {
+1 -1
View File
@@ -3,7 +3,7 @@
"version": "0.9.14",
"main": "app.js",
"engines": {
"node": ">= 20.0.0"
"node": ">= 24.22.1"
},
"keywords": [
"sip",