From 526ce350df58011c17aa50d79f1fc47191b9e2f8 Mon Sep 17 00:00:00 2001
From: Grey Newell <19847545+greynewell@users.noreply.github.com>
Date: Sat, 24 Oct 2026 17:32:57 +0000
Subject: [PATCH] Default mdm-bootstrap Node.js to patched 22.23.4

Node.js 22.23.4 fixes the Brotli decoder flaw reachable through node:zlib and
fetch(). The bootstrap installs this version on machines without Node, so
the old 22.14.0 default would ship an unpatched runtime.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
---
 scripts/mdm-bootstrap.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/mdm-bootstrap.sh b/scripts/mdm-bootstrap.sh
index 77ee6e937..ae4aa16e8 100755
--- a/scripts/mdm-bootstrap.sh
+++ b/scripts/mdm-bootstrap.sh
@@ -85,7 +85,7 @@ set -euo pipefail
 # ── configuration ────────────────────────────────────────────────────────────
 
 UG_INSTALL_SPEC="${UG_INSTALL_SPEC:-git+https://github.com/databricks/unity-gateway}"
-UG_NODE_VERSION="${UG_NODE_VERSION:-22.14.0}" # current LTS; overridable
+UG_NODE_VERSION="${UG_NODE_VERSION:-22.23.4}" # current LTS; overridable
 UG_AGENTS="${UG_AGENTS:-}"
 UG_SKIP_PROBE="${UG_SKIP_PROBE:-}"