From 35a0b0323c8767ebefee8bdbe53d49f31cfb90fe Mon Sep 17 00:00:00 2001
From: Dave Horton <daveh@beachdognet.com>
Date: Fri, 23 Oct 2026 12:54:26 -0400
Subject: [PATCH] chore: pin node 24.22.1 for the eMadhra TLS vulnerability
 (#236)

- Dockerfile: node:24-alpine -> node:24.22.1-alpine
- CI node 20.x -> 24.x; checkout v3/v4->v7, setup-node v4->v7, docker/login v2->v4, build-push v4->v7
- engines.node ">= 20.0.0" -> ">= 24.22.1" in package.json and package-lock.json root entry

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/workflows/build.yml          | 6 +++---
 .github/workflows/docker-publish.yml | 6 +++---
 Dockerfile                           | 2 +-
 package-lock.json                    | 2 +-
 package.json                         | 2 +-
 5 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e560431..ee92c2f 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -6,10 +6,10 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
-          node-version: 20.x
+          node-version: 24.x
       - run: npm ci
       - run: npm run jslint
       - name: Install Docker Compose
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 5cfc72a..9f3ceab 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
 
       - name: prepare tag 
         id: prepare_tag
@@ -38,13 +38,13 @@ jobs:
             echo "version=$VERSION" >> $GITHUB_OUTPUT
 
       - name: Login to Docker Hub 
-        uses: docker/login-action@v2
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v7
         with:
           context: .
           push: true
diff --git a/Dockerfile b/Dockerfile
index b2d6356..98374c6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM --platform=linux/amd64 node:24-alpine AS base
+FROM --platform=linux/amd64 node:24.22.1-alpine AS base
 
 RUN apk --update --no-cache add --virtual .builds-deps build-base python3
 
diff --git a/package-lock.json b/package-lock.json
index 8223fba..06a23ae 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -34,7 +34,7 @@
         "tape": "^5.9.0"
       },
       "engines": {
-        "node": ">= 20.0.0"
+        "node": ">= 24.22.1"
       }
     },
     "node_modules/@babel/code-frame": {
diff --git a/package.json b/package.json
index c3911e4..e36679f 100644
--- a/package.json
+++ b/package.json
@@ -3,7 +3,7 @@
   "version": "0.9.14",
   "main": "app.js",
   "engines": {
-    "node": ">= 20.0.0"
+    "node": ">= 24.22.1"
   },
   "keywords": [
     "sip",