[chaliy]

What changed

Pin general CI Node jobs to 22.23.4 and release/build recipes to 24.22.1. Test those exact patched versions in the JavaScript runtime matrix and preserve CI/release matrix parity.

Why

The October 21 Node security release addresses Brotli memory corruption, DNS/TLS validation and bundled dependency/certificate issues. Old build-runtime selectors remained on unpatched versions.

Before / After

• Before: maintained build lanes could run Node22.23.3/24.22.0.
• After: maintained lanes use22.23.4/24.22.1; the current matrix includes both exact versions.
• All38checks succeeded and one API-reference check was intentionally skipped at exact head47ab411a150771fe9fdc45df3108148828037a06. Current main9fa12b955fd9c504632b993fef743cbef6a86d46 checks are also green; merge is conflict-free. Earlier pinned-Rust1.95 pre-pr validation passed7259Rust testresults and179repository-script tests.

Risk

Low: build/CI runtime recipes only. Node20 remains an EOL compatibility-only lane, not a security-supported deployment recommendation. No library/package release or tag is requested. Remaining standalone Hyperlight Tokio/audit-gate work is being validated in a separate focused change. RSA Marvin remains a documented opt-in SSH risk with no published upstream fix; the braces advisory was withdrawn upstream onOctober23 rather than code-patched.

Checklist

• Existing tests and full pre-pr run
• Backward compatibility considered
• All affected hosted checks green
• No open review feedback

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	bashkit	47ab411	Commit Preview URL Branch Preview URL	Oct 22 2026, 03:10 PM

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!