From 84cb492c1d16960200a02adc6d3965064a251f21 Mon Sep 17 00:00:00 2001 From: Zahin Mohammad Date: Wed, 21 Oct 2026 14:54:29 -0400 Subject: [PATCH 1/2] fix(express): bump Dockerfile Node base image to 22.23.4 Move all three stages (filter-packages-json, builder, and the final runtime stage, which does not inherit from builder) from node:22.22.0-bookworm-slim to node:22.23.4-bookworm-slim, pinned to the multi-arch index digest published on Docker Hub. Stays on the Node 22 major. Ticket: WCN-3321 Co-Authored-By: Claude Sonnet 5.5 --- Dockerfile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index 38020d5d540..2dc26823cfa 100644 --- a/Dockerfile +++ b/Dockerfile @@ -2,7 +2,7 @@ # An elaborated scheme to build all the dependencies of all packages first in a cached layer # https://stackoverflow.com/a/63142468/134409 # https://medium.com/@emilefugulin/building-a-sane-docker-image-for-typescript-lerna-and-prisma-2-76d8ff9926e4 -FROM node:22.22.0-bookworm-slim@sha256:f86be15afa9a8277608e141ce2a8aa55d3d9c40845921b8511f4fb7897be2554 AS filter-packages-json +FROM node:22.23.4-bookworm-slim@sha256:de170b39439eb0e5a3444ad7d60b015614a381e10fecae2e30ec9e735122f38d AS filter-packages-json LABEL maintainer="Developer Relations " COPY package.json yarn.lock lerna.json ./ @@ -12,7 +12,7 @@ COPY modules ./modules # delete all the non package.json files under `./modules/` RUN find modules \! -name "package.json" -mindepth 2 -maxdepth 2 -print | xargs rm -rf -FROM node:22.22.0-bookworm-slim@sha256:f86be15afa9a8277608e141ce2a8aa55d3d9c40845921b8511f4fb7897be2554 AS builder +FROM node:22.23.4-bookworm-slim@sha256:de170b39439eb0e5a3444ad7d60b015614a381e10fecae2e30ec9e735122f38d AS builder ARG SOCKET_SECURITY_MODE=monitor ENV SOCKET_SECURITY_MODE=${SOCKET_SECURITY_MODE} RUN apt-get update && apt-get install -y git python3 make g++ libtool autoconf automake @@ -34,7 +34,7 @@ RUN \ rm -r modules/*/src -FROM node:22.22.0-bookworm-slim@sha256:f86be15afa9a8277608e141ce2a8aa55d3d9c40845921b8511f4fb7897be2554 +FROM node:22.23.4-bookworm-slim@sha256:de170b39439eb0e5a3444ad7d60b015614a381e10fecae2e30ec9e735122f38d RUN apt-get update && apt-get install -y tini # copy the root node_modules to the bitgo-express parent node_modules COPY --from=builder /tmp/bitgo/node_modules /var/node_modules/ From 1d8485688589977cb951bdf099e6324008453c5b Mon Sep 17 00:00:00 2001 From: Zahin Mohammad Date: Wed, 21 Oct 2026 15:00:01 -0400 Subject: [PATCH 2/2] build(root): bump Node toolchain pins to patched releases Move the development .nvmrc (root and the four examples) from 24.13.0 to 24.22.1, and the uploader image to node:22.23.4-bookworm pinned by index digest (same bookworm variant as before, previously floating on node:22). flake.nix is intentionally unchanged: the newest nodejs_22 in nixpkgs is 22.23.3, below the 22.23.4 floor. Ticket: WCN-3186 Ticket: WCN-3321 Co-Authored-By: Claude Sonnet 5.5 --- .nvmrc | 2 +- examples/js/sui/custom-tx/.nvmrc | 2 +- examples/ts/proxy/.nvmrc | 2 +- examples/ts/tss-recovery/.nvmrc | 2 +- examples/ts/tss-smc/.nvmrc | 2 +- modules/bitgo/scripts/upload-tools/Dockerfile | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.nvmrc b/.nvmrc index 3fe3b1570a5..ce62013c39a 100644 --- a/.nvmrc +++ b/.nvmrc @@ -1 +1 @@ -24.13.0 +24.22.1 diff --git a/examples/js/sui/custom-tx/.nvmrc b/examples/js/sui/custom-tx/.nvmrc index 3fe3b1570a5..ce62013c39a 100644 --- a/examples/js/sui/custom-tx/.nvmrc +++ b/examples/js/sui/custom-tx/.nvmrc @@ -1 +1 @@ -24.13.0 +24.22.1 diff --git a/examples/ts/proxy/.nvmrc b/examples/ts/proxy/.nvmrc index 3fe3b1570a5..ce62013c39a 100644 --- a/examples/ts/proxy/.nvmrc +++ b/examples/ts/proxy/.nvmrc @@ -1 +1 @@ -24.13.0 +24.22.1 diff --git a/examples/ts/tss-recovery/.nvmrc b/examples/ts/tss-recovery/.nvmrc index 3fe3b1570a5..ce62013c39a 100644 --- a/examples/ts/tss-recovery/.nvmrc +++ b/examples/ts/tss-recovery/.nvmrc @@ -1 +1 @@ -24.13.0 +24.22.1 diff --git a/examples/ts/tss-smc/.nvmrc b/examples/ts/tss-smc/.nvmrc index 3fe3b1570a5..ce62013c39a 100644 --- a/examples/ts/tss-smc/.nvmrc +++ b/examples/ts/tss-smc/.nvmrc @@ -1 +1 @@ -24.13.0 +24.22.1 diff --git a/modules/bitgo/scripts/upload-tools/Dockerfile b/modules/bitgo/scripts/upload-tools/Dockerfile index 026fd0b351a..09e26a44930 100644 --- a/modules/bitgo/scripts/upload-tools/Dockerfile +++ b/modules/bitgo/scripts/upload-tools/Dockerfile @@ -1,4 +1,4 @@ -FROM node:22@sha256:2fa6c977460b56d4d8278947ab56faeb312bc4cc6c4cf78920c6de27812f51c5 +FROM node:22.23.4-bookworm@sha256:2bd396628eceb5c999a6e43731fab69d5fb98b94ba9d9d90b5f64575c5178765 RUN yarn global add codecov typedoc && \ yarn add aws-sdk