This is an automated email from the ASF dual-hosted git repository.
klesh pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/devlake.git
The following commit(s) were added to refs/heads/main by this push:
new cd67be88a chore(config-ui): bump Volta Node pin to 24.22.1 (#9251)
cd67be88a is described below
commit cd67be88abeec3911b09c72ffadcfdcf9ebb1f38
Author: Evan Lynch <[email protected]>
AuthorDate: Mon Oct 26 11:42:45 2026 -0400
chore(config-ui): bump Volta Node pin to 24.22.1 (#9251)
24.19.0 predates the October 21, 2026 Node.js security release, which
fixes 4 High CVEs (Brotli decoder RCE, two TLS hostname-check bypasses,
dns.resolve NUL truncation). 24.22.1 is the patched 24.x LTS.
Verified in node:24.22.1-alpine3.23: yarn install --immutable and
yarn build succeed.
Co-authored-by: Evan Lynch <[email protected]>
Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]>
---
config-ui/package.json | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/config-ui/package.json b/config-ui/package.json
index bd5c33f35..481647cfa 100644
--- a/config-ui/package.json
+++ b/config-ui/package.json
@@ -83,7 +83,7 @@
"vitest": "5.0.5"
},
"volta": {
- "node": "24.19.0",
+ "node": "24.22.1",
"yarn": "4.17.0"
},
"resolutions": {
