Skip to content

ci: pin Bun 1.4.4 / Node 24.22.1 (CVE-2026-111497 Brotli) - #96

Merged
roodboi merged 3 commits into
mainfrom
sec/brotli-cve-2026-111497-pins
Oct 24, 2026
Merged

roodboi merged 3 commits into
mainfrom
sec/brotli-cve-2026-111497-pins

Conversation

@roodboi

@roodboi roodboi commented Oct 24, 2026 •

Copy link
Copy Markdown
Contributor

Pins CI and Docker base images to Brotli-fixed runtimes (Bun 1.4.4, Node 24.22.1) per CVE-2026-111497. Draft: please check CI on the new versions.


View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need.

@roodboi
roodboi marked this pull request as ready for review October 24, 2026 00:57
@roodboi
roodboi merged commit 257da1a into main Oct 24, 2026
3 checks passed
@roodboi
roodboi deleted the sec/brotli-cve-2026-111497-pins branch October 24, 2026 00:57
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 24, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
🔒 Security Review ✅ Completed 2026-10-24T00:59:29.083452Z 09710f6 Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@linear-code

linear-code Bot commented Oct 24, 2026

Copy link
Copy Markdown

HACK-1403

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant