fix(security): upgrade Go and Node.js to patched versions and align build configurations

.github/workflows/build_frontend.yml

@@ -23,7 +23,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "24.22.1"
           cache: 'pnpm'
           cache-dependency-path: frontend/pnpm-lock.yaml
 

.github/workflows/build_image.yml

@@ -29,7 +29,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: "1.26"
+          go-version-file: "go.mod"
           check-latest: true
 
       # download Go modules

.github/workflows/codeql.yml

@@ -29,6 +29,11 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4
+    - name: Set up Go
+      if: matrix.language == 'go'
+      uses: actions/setup-go@v5
+      with:
+        go-version-file: "go.mod"
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v3
       with:

.github/workflows/copilot-setup-steps.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "24.22.1"
           cache: "pnpm"
           cache-dependency-path: frontend/pnpm-lock.yaml
 
@@ -39,7 +39,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: "1.24"
+          go-version-file: "go.mod"
 
       - name: Install dependencies
         run: |

.github/workflows/eslint.yml

@@ -22,7 +22,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "24.22.1"
           cache: 'pnpm'
           cache-dependency-path: frontend/pnpm-lock.yaml
 

README.md

@@ -3,7 +3,7 @@
 🚀 Linux Do 社区 CDK (Content Distribution Kit) 快速分享平台
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Go Version](https://img.shields.io/badge/Go-1.24-blue.svg)](https://golang.org/)
+[![Go Version](https://img.shields.io/badge/Go-1.26.10-blue.svg)](https://golang.org/)
 [![Next.js](https://img.shields.io/badge/Next.js-15-black.svg)](https://nextjs.org/)
 [![React](https://img.shields.io/badge/React-19-blue.svg)](https://reactjs.org/)
 
@@ -50,7 +50,7 @@ LINUX DO CDK 是一个为 Linux Do 社区打造的内容分发工具平台，旨
 ## 🛠️ 技术栈
 
 ### 后端
-- **[Go 1.24](https://go.dev/doc)** - 主要开发语言
+- **[Go 1.26.10](https://go.dev/doc)** - 主要开发语言
 - **[Gin](https://github.com/gin-gonic/gin)** - Web 框架
 - **[GORM](https://github.com/go-gorm/gorm)** - ORM 框架
 - **[Redis](https://github.com/redis/redis)** - 缓存和会话存储
@@ -68,8 +68,8 @@ LINUX DO CDK 是一个为 Linux Do 社区打造的内容分发工具平台，旨
 
 ## 📋 环境要求
 
-- **Go** >= 1.24
-- **Node.js** >= 18.0
+- **Go** 1.26.10
+- **Node.js** 24.22.1
 - **MySQL** >= 8.0
 - **Redis** >= 6.0
 - **pnpm** >= 8.0 (推荐)

frontend/Dockerfile

@@ -1,5 +1,5 @@
 # ---- base stage ----
-FROM node:22-alpine AS base
+FROM node:24.22.1-alpine AS base
 
 ENV PNPM_HOME="/pnpm"
 ENV PATH="$PNPM_HOME:$PATH"

frontend/README.md

@@ -43,7 +43,7 @@
 
 ### 环境要求
 
-- **Node.js** >= 18.0
+- **Node.js** 24.22.1
 - **pnpm** >= 8.0 (推荐) 或 **npm** >= 9.0
 
 ### 安装与启动

frontend/package.json

@@ -3,6 +3,9 @@
   "version": "1.2.3",
   "buildDate": "2026-04-22 16:00:00",
   "private": true,
+  "engines": {
+    "node": ">=24.22.1 <25"
+  },
   "scripts": {
     "dev": "next dev --turbopack",
     "build": "next build",

go.mod

@@ -1,6 +1,6 @@
 module github.com/linux-do/cdk
 
-go 1.26.9
+go 1.26.10
 
 require (
 	github.com/ClickHouse/clickhouse-go/v2 v2.23.2

mise.toml

@@ -1,3 +1,3 @@
 [tools]
-go = "1.26.9"
-node = "24"
+go = "1.26.10"
+node = "24.22.1"