Repository navigation
chore(node): Node 24.22.1 for the docs image and route guard (LIN-3964) - #307
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Node.js shipped security releases on 2026-10-20 (Brotli decoder RCE, TLS hostname bypass, DNS truncation; bundled undici/OpenSSL/CA updates). Node 20 is EOL and gets no fix. This moves this repo to Node 24 LTS (24.22.1, latest 24.x, re-checked against nodejs.org on 2026-10-21 21:2x UTC): Dockerfiles pin the exact
node:24.22.1-<variant>tag, CI usesnode-version: 24(or the exact version where the repo already pinned one), NodeSource installs pinnodejs=24.22.1-1nodesource1. Part 3 of 3 of LIN-3964; parts 1-2 are linkrunner-backend#1447 and ops#1182.Dockerfile(runsmintlify dev)node:20-alpine(EOL)node:24.22.1-alpinedocs-route-guard.ymlTests (local, Node 24.22.1)
node scripts/check-doc-routes.mjs <origin/main>on 24.22.1:Documentation routes are valid: 133 pages, no unredirected removals.;npm run check:agentspasses.docker buildon 24.22.1, run read-only as uid 1000 with the chart's/home/node/.mintlifytmpfs:preview ready; inside the containerGET /and/introduction200 (Welcome to Linkrunner). Note (pre-existing):mintlify devbinds to localhost only, despite the Dockerfile comment.Scans
No lockfile changed, so
npm audit --omit=devis unchanged. trivy HIGH/CRITICAL, image frommain(Node 20.20.2) vs this branch: OS 0C/4H -> 0C/0H, npm 2C/65H -> 1C/47H.Review
Two independent reviewer subagents before push, across all part-3 PRs (this repo has no Claude review workflow; linkrunner-backend
.claude/rules/code-review.mdused as the named fallback): no Critical or Major finding for this repo.Rollout
Nothing deploys this image today. Merge is safe; Mintlify hosting is unaffected.
Part of LIN-3964 (Linear).