Skip to content

Harden Node tooling for the October 2026 security baseline - #118

Merged
Jackson Weber (JacksonWeber) merged 5 commits into
mainfrom
jacksonweber-node-security-baseline-dynamicproto
Oct 23, 2026
Merged

Jackson Weber (JacksonWeber) merged 5 commits into
mainfrom
jacksonweber-node-security-baseline-dynamicproto

Conversation

@JacksonWeber

@JacksonWeber Jackson Weber (JacksonWeber) commented Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • Update CI to Node 22.23.4 and 24.22.1.
  • Add an npm devEngines requirement and document the supported tooling runtimes.
  • Use managed default CodeQL scanning for JavaScript/TypeScript and GitHub Actions instead of the duplicate advanced workflow and its custom security-and-quality configuration.

These versions include the October 21 Node.js security fixes. Compression-only tooling is covered as precautionary hardening.

This changes repository tooling only. Published package requirements, APIs, dependencies, and compression behavior are unchanged.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@JacksonWeber
Jackson Weber (JacksonWeber) marked this pull request as ready for review October 23, 2026 19:26
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@JacksonWeber
Jackson Weber (JacksonWeber) merged commit 919aed1 into main Oct 23, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants