Skip to content

ci: pin the toolchain to Node 22.23.4 - #13

Merged
zzwong merged 1 commit into
mainfrom
zzwong/MON-8237/node-security-runtime
Oct 21, 2026
Merged

zzwong merged 1 commit into
mainfrom
zzwong/MON-8237/node-security-runtime

Conversation

@zzwong

@zzwong zzwong commented Oct 21, 2026

Copy link
Copy Markdown
Contributor

Pin the Node runtime read by all four CI Node jobs to 22.23.4 instead of a major-only selector, avoiding selection of an older cached Node 22. Rust and UI dependencies are unchanged.

The official Node 22.23.4 security release documents the certificate refresh and rejection of blocked eMudhra public keys.

Verification on macOS ARM64 under Node 22.23.4: The workflow contract check, frozen UI install, UI typecheck, 42 UI tests, UI production build, and whitespace checks passed. Rust/native packaging lanes were not rerun for this one-line Node selector.

This changes subsequent CI execution; it does not claim a deployed application or hosted CI run. Revert the selector if compatibility regresses.

@monit-reviewer monit-reviewer left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated PR Review

Reviewed commit: b2e017f5a524
Profile: pi-codex-monit-reviewer - Posting as: monit-reviewer

Summary

Reviewer Findings
automation:ci-deploy 0

Reviewer Coverage

Complete coverage details are retained in the local coverage.json artifact.

  • automation:ci-deploy — complete (broad); scope: 1 file; examples: .nvmrc; body-inspected: 1 file; examples: .nvmrc; skipped: none; context (not coverage): 7 files; examples: .github/workflows/ci.yml, Makefile, docs/ci.md, examples/package.json, scripts/check-workflows.mjs; 2 omitted; constraints: Static review only; CI and builds were not executed. External Node release availability and Linux download artifacts could not be independently verified with the permitted repository-only tools.

0 PR discussion threads considered. 0 summarized; 0 resolved.


Completed in 25s | $0.04 | openai-codex/gpt-6.1-sol | cr 0.10.342
Field Value
Model openai-codex/gpt-6.1-sol
Reviewers automation:ci-deploy
Engine pi_rpc · openai-codex/gpt-6.1-sol
Reviewed by cr · monit-reviewer
Duration 25s wall · 20s compute
Cost $0.04
Tokens 18.8k in / 529 out

Per-workstream usage

  • orchestrator-selection — openai-codex/gpt-6.1-sol
    • In: 3.3k
    • Out: 83
    • Cache read: 0
    • Cache create: 0
    • Cost: $0.01
    • Duration: 3s
  • automation:ci-deploy — openai-codex/gpt-6.1-sol
    • In: 14.7k
    • Out: 396
    • Cache read: 15.1k
    • Cache create: 0
    • Cost: $0.03
    • Duration: 12s
  • orchestrator-rollup — openai-codex/gpt-6.1-sol
    • In: 704
    • Out: 50
    • Cache read: 0
    • Cache create: 0
    • Cost: $0.00
    • Duration: 4s

@zzwong
zzwong marked this pull request as ready for review October 21, 2026 15:58
@zzwong
zzwong merged commit d14dd84 into main Oct 21, 2026
5 checks passed
@zzwong
zzwong deleted the zzwong/MON-8237/node-security-runtime branch October 21, 2026 16:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants