Skip to content

Require patched Node 22 for Skills tooling - #20

Merged
kvz merged 1 commit into
mainfrom
node-security
Oct 21, 2026
Merged

kvz merged 1 commit into
mainfrom
node-security

Conversation

@kvz

@kvz kvz commented Oct 21, 2026 •

Copy link
Copy Markdown
Member

Skills CI selected floating Node 22 runtimes that could reuse cached patches older than the October security fixes, including the native Brotli memory corruption fix.

Require ^22.23.4 with check-latest: true for both root tooling and the existing scenario E2E matrix. Preserve trusted/fork guards and scenario behavior.

Validation on Node 22.23.4 in a tracked-source container without environment files: immutable root install, complete TypeScript checks for scripts, starter and both scenarios, and Biome passed. YAML parsing, git diff --check, and council review passed. The original upload-local-file-through-mcp branch and its commit were restored unchanged after pushing this scoped patch. Existing scenario E2E qualification runs in PR CI with its configured test credentials.

PR CI passed root checks and both scenario E2E jobs. Setup-node logs confirm Node 22.23.4.

🤖 Claimed by kvz on framework1/skills since 2026-10-21 · resume: codex resume 01a15e32-a05f-7153-89c2-0b1273795a49

@kvz kvz self-assigned this Oct 21, 2026
@kvz
kvz requested a review from tim-kos October 21, 2026 17:45
@kvz
kvz marked this pull request as ready for review October 21, 2026 17:46
@kvz
kvz merged commit b157739 into main Oct 21, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant