fix(docker): pin Node 22.23.4 for the image and CI (Node2Shell) #41
@@ -22,7 +22,7 @@ jobs:
|
||||
- name: Set up Node
|
||||
uses: actions/setup-node@v4
|
||||
with:
|
||||
node-version: '22'
|
||||
node-version: '22.23.4'
|
||||
cache: npm
|
||||
|
||||
- name: Install
|
||||
|
||||
@@ -15,7 +15,7 @@
|
||||
# ---------------------------------------------------------------------------------------
|
||||
# Stage 1 — build
|
||||
# ---------------------------------------------------------------------------------------
|
||||
FROM node:22-bookworm-slim AS build
|
||||
FROM node:22.23.4-bookworm-slim AS build
|
||||
|
||||
WORKDIR /build
|
||||
|
||||
@@ -54,7 +54,7 @@ RUN mkdir -p /split \
|
||||
# ---------------------------------------------------------------------------------------
|
||||
# Stage 2 — runtime
|
||||
# ---------------------------------------------------------------------------------------
|
||||
FROM node:22-bookworm-slim AS runtime
|
||||
FROM node:22.23.4-bookworm-slim AS runtime
|
||||
|
||||
WORKDIR /app
|
||||
|
||||
|
||||
@@ -32,7 +32,7 @@ npm run build # → dist/ (prerendered pages + the Node server entry)
|
||||
npm start # serve the built site
|
||||
```
|
||||
|
||||
Node 22 LTS or newer. Nothing else — no database, no game server, no container runtime.
|
||||
Node 22.23.4+ (or 24.22.1+); older builds carry the Node2Shell Brotli bug, CVE-2026-111497. Nothing else — no database, no game server, no container runtime.
|
||||
|
||||
## Running it in production
|
||||
|
||||
|
||||
Reference in New Issue
Block a user