Skip to content

fix(security): update Node.js to v24.22.1 - #1943

Merged
jennifer-shehane merged 1 commit into
cypress-io:masterfrom
matthewbraddock:fix/node-24.22.1-security
Oct 23, 2026
Merged

jennifer-shehane merged 1 commit into
cypress-io:masterfrom
matthewbraddock:fix/node-24.22.1-security

Conversation

@matthewbraddock

Copy link
Copy Markdown
Contributor

Summary

Update Node.js from 24.22.0 to 24.22.1 in the GitHub Actions workflows to address security vulnerabilities, including the eMudhra Intermediate CA compromise.

Node.js 24.22.1 was released on October 21, 2026, as part of the official security updates.

Changes

  • Update Node.js to 24.22.1 in .github/workflows/check-dist.yml.
  • Update Node.js to 24.22.1 in .github/workflows/main.yml.

References

@matthewbraddock

Copy link
Copy Markdown
Contributor Author

@jennifer-shehane, it looks like Firefox timed out during the CI run. Would you be able to re-run it? I don't have the permissions, it seems, to do it myself.

Command timed out after 30000 milliseconds: /home/runner/.cache/Cypress/16.2.0/Cypress/Cypress --no-sandbox --smoke-test --ping=255
Timed out

@jennifer-shehane
jennifer-shehane merged commit bc982da into cypress-io:master Oct 23, 2026
93 of 94 checks passed
@matthewbraddock

Copy link
Copy Markdown
Contributor Author

@jennifer-shehane, I just wanted to say thank you so much for the super quick turnaround on this.

I really appreciate it! 🙇🏼

@github-actions

Copy link
Copy Markdown

🎉 This PR is included in version 7.4.7 🎉

The release is available on:

Your semantic-release bot 📦🚀

@jennifer-shehane

Copy link
Copy Markdown
Member

@matthewbraddock We've had our eye on this one in a few other threads. Thanks for the PR!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants