Skip to content

chore(deps): update Node.js to v24.22.1 - #1658

Merged
bfra-me[bot] merged 1 commit into
mainfrom
renovate/node-24.x
Oct 21, 2026
Merged

bfra-me[bot] merged 1 commit into
mainfrom
renovate/node-24.x

Conversation

@bfra-me

@bfra-me bfra-me Bot commented Oct 21, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change OpenSSF
node (source) patch 24.22.0 → 24.22.1 OpenSSF Scorecard

Release Notes

nodejs/node (node)

v24.22.1: 2026-10-21, Version 24.22.1 'Krypton' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell)
  • (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell)
  • (CVE-2026-105483) tls: fix ip normalization regression (James M Snell)
  • (CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina)
  • (CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS)
  • (CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan)
  • (CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel)
  • (CVE-2026-111497) deps: brotli: cherry-pick 0ed4268 (Evgenii Kliuchnikov)
  • crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
  • deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
  • deps: update timezone to 2026e (Node.js GitHub Bot)
  • deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot)
  • deps: update undici to 7.30.1 (Node.js GitHub Bot)
Commits

Configuration

📅 Schedule: (in timezone America/Phoenix)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@bfra-me bfra-me Bot added automerge Automated merge approved dependencies Dependency updates or security alerts javascript JavaScript package updates patch Patch version changes renovate Renovate bot updates labels Oct 21, 2026
@bfra-me
bfra-me Bot requested a review from a team as a code owner October 21, 2026 13:33
@bfra-me
bfra-me Bot enabled auto-merge (squash) October 21, 2026 13:34
@bfra-me
bfra-me Bot merged commit aa3454c into main Oct 21, 2026
10 checks passed
@bfra-me
bfra-me Bot deleted the renovate/node-24.x branch October 21, 2026 13:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automerge Automated merge approved dependencies Dependency updates or security alerts javascript JavaScript package updates patch Patch version changes renovate Renovate bot updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants