From 0d0e606d491e6834d17066b47329d640e51986c7 Mon Sep 17 00:00:00 2001
From: "fro-bot[bot]" <109017866+fro-bot[bot]@users.noreply.github.com>
Date: Thu, 29 Oct 2026 04:07:27 +0000
Subject: [PATCH] build(deps): update Node.js to v24.22.2

---
 .node-version               | 2 +-
 deploy/gateway.Dockerfile   | 4 ++--
 deploy/workspace.Dockerfile | 6 +++---
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.node-version b/.node-version
index ce62013c39..b74495a07d 100644
--- a/.node-version
+++ b/.node-version
@@ -1 +1 @@
-24.22.1
+24.22.2
diff --git a/deploy/gateway.Dockerfile b/deploy/gateway.Dockerfile
index b0a18b4dda..389f36aad6 100644
--- a/deploy/gateway.Dockerfile
+++ b/deploy/gateway.Dockerfile
@@ -1,5 +1,5 @@
 # ── Stage 1: build ────────────────────────────────────────────────────────────
-FROM node:24.22.1-alpine3.24@sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53 AS build
+FROM node:24.22.2-alpine3.24@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85 AS build
 
 WORKDIR /workspace
 
@@ -101,7 +101,7 @@ RUN rm -rf node_modules apps/*/node_modules packages/*/node_modules \
     && bun install --production --frozen-lockfile --ignore-scripts
 
 # ── Stage 2: runtime ──────────────────────────────────────────────────────────
-FROM node:24.22.1-alpine3.24@sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53 AS runtime
+FROM node:24.22.2-alpine3.24@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85 AS runtime
 
 WORKDIR /app
 
diff --git a/deploy/workspace.Dockerfile b/deploy/workspace.Dockerfile
index 9ab015d3ff..5b8951e0ab 100644
--- a/deploy/workspace.Dockerfile
+++ b/deploy/workspace.Dockerfile
@@ -24,7 +24,7 @@
 # ── Stage 1: build-deps (full workspace, dev deps, workspace-agent build) ──────
 # Forked into `workspace-test` below BEFORE dev dependencies are pruned, then
 # continued as `build` (prune to production) for the runtime stage to copy from.
-FROM node:24.22.1-alpine3.24@sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53 AS build-deps
+FROM node:24.22.2-alpine3.24@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85 AS build-deps
 
 WORKDIR /workspace
 
@@ -166,7 +166,7 @@ RUN rm -rf node_modules apps/*/node_modules packages/*/node_modules \
 # default (a second default would drift, and the harness-release sync job rewrites
 # only the first `ARG OPENCODE_VERSION=` line). An unset value leaves /out empty;
 # the runtime stage then refuses a V2 version it finds no matching /out/VERSION for.
-FROM node:24.22.1-alpine3.24@sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53 AS opencode-v2
+FROM node:24.22.2-alpine3.24@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85 AS opencode-v2
 
 ARG OPENCODE_VERSION
 ARG TARGETARCH
@@ -221,7 +221,7 @@ RUN set -euo pipefail \
     && rm -f "/tmp/${oc_asset}" /tmp/SHA256SUMS
 
 # ── Stage 2: runtime ──────────────────────────────────────────────────────────
-FROM node:24.22.1-alpine3.24@sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53 AS runtime
+FROM node:24.22.2-alpine3.24@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85 AS runtime
 
 WORKDIR /app