#751

Update Node.js and npm to patched security releases

Openewjdevwants to merge intofrom

Updates local runtime selection and GitHub Actions to the October 21 Node.js security releases (22.23.4, 24.22.1, and 26.12.1), retaining supported runtime majors. This repository selects Node.js 24.22.1. CI explicitly installs npm 12.2.1 so it uses the same current CLI verified locally. Existing explicit npm package-manager pins and Node container versions are updated where present.

Validation: parsed 2 changed workflow YAML files, checked the staged diff for whitespace, and verified the selected Node runtime plus npm 12.2.1 locally. Application code and dependency versions are unchanged. Full application tests have not been run on this isolated PR branch; CI and application acceptance remain required.

Security reference: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases

The local native SDK gate could not run because Zig is not installed.

Activity

2
vercel[bot]7d ago

@ewjdev is attempting to deploy a commit to the Vercel Labs Team on Vercel.

A member of the Team first needs to authorize it.