[PR #6310] [CLOSED] fix(runtime): raise Node.js security floors to 22.23.4, 24.22.1 and 26.12.1 #7273

New issue

Closed

opened 2026-11-01 21:46:39 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-11-01 21:46:39 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/morluto/rea/pull/6310
Author: @ShikamaruNaaraa
Created: 10/22/2026
Status: ❌ Closed

Base: main ← Head: fix/node-security-floors

📝 Commits (1)

7bb17e0 fix(runtime): raise Node.js security floors to 22.23.4, 24.22.1 and 26.12.1

📊 Changes

15 files changed (+66 additions, -50 deletions)

View changed files

📝 .github/workflows/ci.yml (+1 -1)
📝 .nvmrc (+1 -1)
📝 README.md (+1 -1)
📝 docs/installation.md (+1 -1)
📝 docs/user-visible-errors.csv (+7 -7)
📝 docs/windows-ghidra-p0.md (+1 -1)
📝 install.sh (+7 -3)
📝 package-lock.json (+1 -1)
📝 package.json (+1 -1)
📝 src/application/Doctor.fixture.ts (+1 -1)
📝 src/application/Doctor.test.ts (+2 -1)
📝 src/application/Setup.fixture.ts (+1 -1)
📝 src/domain/runtimeVersion.test.ts (+14 -9)
📝 src/domain/runtimeVersion.ts (+2 -2)
📝 tests/boundary/filesystem/installScript.test.ts (+25 -19)

📄 Description

Fixes #6283

Summary

Raises the supported Node.js range to ^22.23.4 || ^24.22.1 || >=26.12.1 and pins .nvmrc to 24.22.1. Updates package engines and lock, the shared runtime predicate, the install.sh patch-level check, the CI pin, Doctor/Setup messages and docs.

Validation performed

vitest runtimeVersion, Doctor, Setup.recovery, setupEnvironment on Node 24.22.1 - pass (one Windows-only Hopper discovery failure also fails on main)
install.sh comparison checked in Git Bash against 19 versions - correct
installScript boundary tests updated but not run locally (need /bin/bash)

Not included: website get-started page and translated files

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/morluto/rea/pull/6310 **Author:** [@ShikamaruNaaraa](https://github.com/ShikamaruNaaraa) **Created:** 10/22/2026 **Status:** ❌ Closed **Base:** `main` ← **Head:** `fix/node-security-floors` --- ### 📝 Commits (1) - [`7bb17e0`](https://github.com/morluto/rea/commit/7bb17e0e64581732a9f7f4c25d2c13de0d4482d6) fix(runtime): raise Node.js security floors to 22.23.4, 24.22.1 and 26.12.1 ### 📊 Changes **15 files changed** (+66 additions, -50 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/ci.yml` (+1 -1) 📝 `.nvmrc` (+1 -1) 📝 `README.md` (+1 -1) 📝 `docs/installation.md` (+1 -1) 📝 `docs/user-visible-errors.csv` (+7 -7) 📝 `docs/windows-ghidra-p0.md` (+1 -1) 📝 `install.sh` (+7 -3) 📝 `package-lock.json` (+1 -1) 📝 `package.json` (+1 -1) 📝 `src/application/Doctor.fixture.ts` (+1 -1) 📝 `src/application/Doctor.test.ts` (+2 -1) 📝 `src/application/Setup.fixture.ts` (+1 -1) 📝 `src/domain/runtimeVersion.test.ts` (+14 -9) 📝 `src/domain/runtimeVersion.ts` (+2 -2) 📝 `tests/boundary/filesystem/installScript.test.ts` (+25 -19) </details> ### 📄 Description Fixes #6283 ## Summary Raises the supported Node.js range to `^22.23.4 || ^24.22.1 || >=26.12.1` and pins `.nvmrc` to 24.22.1. Updates package engines and lock, the shared runtime predicate, the install.sh patch-level check, the CI pin, Doctor/Setup messages and docs. ## Validation performed - `vitest` runtimeVersion, Doctor, Setup.recovery, setupEnvironment on Node 24.22.1 - pass (one Windows-only Hopper discovery failure also fails on main) - install.sh comparison checked in Git Bash against 19 versions - correct - installScript boundary tests updated but not run locally (need /bin/bash) Not included: website get-started page and translated files --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-11-01 21:46:39 +00:00

closed this issue
added the
pull-request
label

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

morluto/rea#7273

No description provided.

Rows
Columns