Pin Node 24.22.2, the current 24 LTS patch, keeping 24.22.1 as the security floor

This commit is contained in:
Sameh Khamis committed 2026-11-02 07:39:02 -08:00
1 parent cb6a0e9008
commit d646fdbe60
6 files changed
+16 -14

No files matched your search

+1 -1
View File
@@ -4,7 +4,7 @@
# proxies (ADS-B, AIS, Overpass, OpenAI Realtime, ...) as middleware, so there
# is nothing else to containerise. See compose.yaml for the usual entry point.
# Same Node as CI (package.json engines, .github/workflows), pinned by digest.
FROM node:24.22.1-slim@sha256:be8204d4bd327363357f532187b752ff62759c31bedf98e9e18fc08c9cbd605c
FROM node:24.22.2-slim@sha256:c86ecead9e55a5210ac1727de38a4ca840bf03dcaf34dc9749addbf383b1920c
# Puppeteer is only used by the QA scripts; skip its ~150MB Chromium download.
ENV PUPPETEER_SKIP_DOWNLOAD=1