From 9e8a9775f0c93f17c9c811ca74b9402269d85fb1 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Sun, 25 Oct 2026 13:30:08 +0000 Subject: [PATCH] Require patched Node in Docker build stage and raise engines.node floor to 22.23.4 Co-authored-by: Aymeric Rabot --- Dockerfile | 5 ++++- package.json | 2 +- packages/cli/package.json | 2 +- 3 files changed, 6 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index 3510327398..deeec8654b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -9,7 +9,10 @@ WORKDIR /app # bun (/usr/local/bun-node-fallback-bin/node). Next 16's build crashes it — a # segfault on 1.3.14, a turbopack CommonJS wrapper error on 1.3.0 — on both arm64 # and amd64. CI does not hit this because GitHub runners have a real node. -RUN apk add --no-cache nodejs +# The floor is the October 2026 Node security release as packaged for this +# image's Alpine 3.24; a minimum rather than an exact pin, so Alpine's later +# rebuilds still install while an older, unpatched index fails the build. +RUN apk add --no-cache 'nodejs>=24.22.1-r0' COPY . . RUN bun install --frozen-lockfile diff --git a/package.json b/package.json index 682e900e61..f715c4e397 100644 --- a/package.json +++ b/package.json @@ -36,7 +36,7 @@ "ultracite": "^8.0.2" }, "engines": { - "node": ">=22.18" + "node": ">=22.23.4" }, "packageManager": "bun@1.4.4", "overrides": { diff --git a/packages/cli/package.json b/packages/cli/package.json index 392b77df69..a8a9d094f9 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -39,7 +39,7 @@ "@modelcontextprotocol/server": "^2.4.0" }, "engines": { - "node": ">=22.13.0" + "node": ">=22.23.4" }, "keywords": [ "pascal",