Pin Node to 24.22.1 in CI workflows by BradleyMcGill · Pull Request #323 · red-gate/flyway-actions · GitHub
Skip to content

Pin Node to 24.22.1 in CI workflows - #323

Merged
DoodleBobBuffPants merged 2 commits into
mainfrom
ca-patch-node
Oct 21, 2026
Merged

DoodleBobBuffPants merged 2 commits into
mainfrom
ca-patch-node

Conversation

@BradleyMcGill

Copy link
Copy Markdown
Contributor

Summary

  • Following the eMudhra (emSign) intermediate CA compromise, pins setup-node from '24' to '24.22.1', the first 24.x with root certs updated to NSS 3.131.1 (crypto: update root certificates to NSS 3.131.1 nodejs/node#66877), which drops emSign ECC Root CA - G3
  • '24' without check-latest can resolve to an older 24.x already in the runner's tool cache, which still trusts G3
  • Doesn't change the Flyway CLI's bundled JRE trust store, no Flyway release has that fix yet

Test plan

  • actionlint clean on the changed workflows

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@BradleyMcGill
BradleyMcGill marked this pull request as ready for review October 21, 2026 16:04
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@DoodleBobBuffPants
DoodleBobBuffPants merged commit 864fde6 into main Oct 21, 2026
66 checks passed
@DoodleBobBuffPants
DoodleBobBuffPants deleted the ca-patch-node branch October 21, 2026 16:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants