Skip to content

[Tooling] CI: pick up Node 22 security patch - #1123

Merged
Aymericr merged 1 commit into
mainfrom
tooling/node-check-latest
Oct 21, 2026
Merged

Aymericr merged 1 commit into
mainfrom
tooling/node-check-latest

Conversation

@Aymericr

@Aymericr Aymericr commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

What does this PR do?

Adds check-latest: true to every actions/setup-node step that uses Node 22, so CI resolves the newest Node 22 release (including the October 2026 security patch, 22.23.4) instead of a possibly stale cached version on the runner.

  • .github/workflows/ci.yml: 1 step
  • .github/workflows/release.yml: 2 steps (build and publish jobs)

Nothing else changes.

How to test

  1. Let CI run on this PR.
  2. In the job log, open the actions/setup-node step and confirm it reports resolving the latest Node 22 version (22.23.4 or newer).

Screenshots / screen recording

N/A — non-visual change

Checklist

  • I've tested this locally with bun dev
  • My code follows the existing code style (run bun check to verify)
  • I've updated relevant documentation (if applicable)
  • This PR targets the main branch
Open in Web Open in Cursor 

Note

Low Risk
Workflow-only change to Node resolution in CI/release; no runtime or publish logic changes beyond which Node patch runs.

Reviewed by Cursor Bugbot for commit edea668. Bugbot is set up for automated code reviews on this repo. Configure here.

Co-authored-by: Aymeric Rabot <Aymericr@users.noreply.github.com>
@Aymericr Aymericr added the bot:tooling label Oct 21, 2026 — with Cursor
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-21T23:26:48.723910Z edea668 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@Aymericr Aymericr left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed: adds check-latest: true to all three Node 22 setup-node steps (CI plus both release jobs), so runners resolve the newest 22.x instead of a stale cached one. No other changes, CI is green, nothing visual. Merging.

@Aymericr
Aymericr merged commit 7d921da into main Oct 21, 2026
4 checks passed
@Aymericr
Aymericr deleted the tooling/node-check-latest branch October 22, 2026 15:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants