Repository navigation
Move uptime monitor to Node 24 (Node 20 EOL) - #6
Merged
Merged
Conversation
1 of 2 tasks
Node 20 reached end of life and will not receive the fix for CVE-2026-111497. node:24-alpine resolves to 24.22.1 or newer, which is patched. This container is built on the droplet, not by CI, so it must be rebuilt manually after merge. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
rphovley
force-pushed
the
fix/uptime-monitor-node-24
branch
from
October 23, 2026 17:57
2dc190e to
189c2d5
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
prod/uptime/Dockerfilefromnode:20-alpinetonode:24-alpine.Context
The uptime monitor is the only Node.js process on the droplet. Node 20 is end of life and will not get the CVE-2026-111497 Brotli fix; the Node 24 line is patched from 24.22.1.
This container is built on the server by
docker compose build, and the deploy workflow only restartsebb-platform, so after merging run on the droplet:Test plan
docker compose build --pull uptime-monitorsucceeds on the dropletdocker exec <uptime container> node -vreports 24.22.1 or newer🤖 Generated with Claude Code