From fa12b6da4c5723f5de00de6b8d89ad77d2182c48 Mon Sep 17 00:00:00 2001 From: bitgobot Date: Wed, 21 Oct 2026 23:09:43 +0000 Subject: [PATCH] ci: pin workflow node versions to 22.23.4 Replace the floating node-version selectors (22 and '22') in audit-api-spec.yaml and release-to-ghcr.yaml with '22.23.4' so the audit and release jobs run the same Node runtime as the pinned build images, .nvmrc, and the remaining workflows. Why: WCN-3707 requires every Node selector in this service's own files to be aligned to 22.23.4, the supported floor for the 22 line containing the October 2026 security fixes. Floating selectors can drift ahead of the pinned image runtime; pinning keeps CI deterministic and consistent with the repo's supply-chain pinning pattern. Ticket: WCN-3707 Session-Id: bae37fd2-808b-4ee3-88ca-fc6327ca4ca2 Task-Id: 160382e8-626a-4317-a37e-000b0883a1ad Requested-By: Andy Fischer --- .github/workflows/audit-api-spec.yaml | 4 ++-- .github/workflows/release-to-ghcr.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/audit-api-spec.yaml b/.github/workflows/audit-api-spec.yaml index 4ca50773..d85a672e 100644 --- a/.github/workflows/audit-api-spec.yaml +++ b/.github/workflows/audit-api-spec.yaml @@ -18,7 +18,7 @@ jobs: - name: Setup Node.js uses: actions/setup-node@v6 with: - node-version: 22 + node-version: '22.23.4' - name: Cache npm dependencies id: node-modules-cache @@ -71,7 +71,7 @@ jobs: - name: Setup Node.js uses: actions/setup-node@v6 with: - node-version: 22 + node-version: '22.23.4' - name: Cache npm dependencies id: node-modules-cache diff --git a/.github/workflows/release-to-ghcr.yaml b/.github/workflows/release-to-ghcr.yaml index 55c69bac..f6ff4917 100644 --- a/.github/workflows/release-to-ghcr.yaml +++ b/.github/workflows/release-to-ghcr.yaml @@ -30,7 +30,7 @@ jobs: - name: Setup Node.js uses: actions/setup-node@v6 with: - node-version: '22' + node-version: '22.23.4' - name: Install dependencies run: npm ci @@ -66,7 +66,7 @@ jobs: - name: Setup Node.js uses: actions/setup-node@v6 with: - node-version: '22' + node-version: '22.23.4' - name: Install dependencies run: npm ci