Skip to content

ci: use Node 22.23.4 for frontend and release checks - #79

Merged
zzwong merged 1 commit into
mainfrom
zzwong/MON-8237/node-security-runtime
Oct 21, 2026
Merged

zzwong merged 1 commit into
mainfrom
zzwong/MON-8237/node-security-runtime

Conversation

@zzwong

@zzwong zzwong commented Oct 21, 2026

Copy link
Copy Markdown
Contributor

Pin all five Node CI/release selectors to 22.23.4, preserving Node 22 and the existing frontend and release behavior. Application code, dependencies, and lockfiles are unchanged.

The official Node 22.23.4 security release documents the certificate refresh and rejection of blocked eMudhra public keys.

Verification on macOS ARM64 under Node 22.23.4: The release, docs, and Tauri ACL checks, frozen frontend install, 98 Node tests, 122 Vitest tests (6 skipped), frontend lint/build, actionlint, and whitespace checks passed. Native Rust and packaging matrices were not rerun for these literal selectors.

This changes subsequent CI execution; it does not claim a deployed application or hosted CI run. Revert the selector if compatibility regresses.

@monit-reviewer monit-reviewer left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated PR Review

Reviewed commit: 92e27eaaba43
Profile: pi-codex-monit-reviewer - Posting as: monit-reviewer

Summary

Reviewer Findings
automation:ci-deploy 0

Reviewer Coverage

Complete coverage details are retained in the local coverage.json artifact.

  • automation:ci-deploy — complete (broad); scope: 3 files; examples: .github/workflows/auto-release.yml, .github/workflows/ci.yml, .github/workflows/release.yml; body-inspected: 3 files; examples: .github/workflows/auto-release.yml, .github/workflows/ci.yml, .github/workflows/release.yml; skipped: none; context (not coverage): 2 files; examples: apps/desktop/package-lock.json, apps/desktop/package.json; constraints: Static review only; workflows and builds were not executed. External Node distribution availability for 22.23.4 on the runner architectures could not be independently verified with repository-only tools.

0 PR discussion threads considered. 0 summarized; 0 resolved.


Completed in 34s | $0.05 | openai-codex/gpt-6.1-sol | cr 0.10.342
Field Value
Model openai-codex/gpt-6.1-sol
Reviewers automation:ci-deploy
Engine pi_rpc · openai-codex/gpt-6.1-sol
Reviewed by cr · monit-reviewer
Duration 34s wall · 23s compute
Cost $0.05
Tokens 22.4k in / 429 out

Per-workstream usage

  • orchestrator-selection — openai-codex/gpt-6.1-sol
    • In: 4.3k
    • Out: 107
    • Cache read: 0
    • Cache create: 0
    • Cost: $0.01
    • Duration: 5s
  • automation:ci-deploy — openai-codex/gpt-6.1-sol
    • In: 17.4k
    • Out: 274
    • Cache read: 22.4k
    • Cache create: 0
    • Cost: $0.04
    • Duration: 14s
  • orchestrator-rollup — openai-codex/gpt-6.1-sol
    • In: 709
    • Out: 48
    • Cache read: 0
    • Cache create: 0
    • Cost: $0.00
    • Duration: 3s

@zzwong
zzwong marked this pull request as ready for review October 21, 2026 15:58
@zzwong
zzwong merged commit 4d13692 into main Oct 21, 2026
9 checks passed
@zzwong
zzwong deleted the zzwong/MON-8237/node-security-runtime branch October 21, 2026 16:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants