Run reachability e2e on Node 22 and document the new minimum

Coana CLI 15.12.11 requires Node.js 22.13 or later. The e2e-reachability
job pinned Node 20, so the engine exited 3 before producing a facts file.

Author: lelia

.github/workflows/e2e-test.yml

@@ -87,7 +87,7 @@ jobs:
       - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         if: matrix.setup-node == 'true'
         with:
-          node-version: '20'
+          node-version: '22'
 
       - name: Install CLI from local repo
         run: |

CHANGELOG.md

@@ -8,6 +8,10 @@
   `15.12.11`. See the
   [reachability analysis changelog](https://docs.socket.dev/docs/reachability-analysis-changelog)
   for engine changes.
+- Coana CLI `15.12.11` requires Node.js 22.13 or later (previously 20). On an older Node,
+  `--reach` fails with exit code 3 (with `--disable-blocking`, the scan continues without
+  reachability results). The Docker image already ships a newer Node, but if you run the CLI
+  directly (for example in CI), upgrade Node before upgrading the Socket CLI.
 
 ## 2.11.1
 

docs/cli-reference.md

@@ -359,7 +359,7 @@ If you don't want to provide the Socket API Token every time then you can use th
 **Reachability Analysis Requirements:**
 
 The Python CLI verifies the following **up front** (before invoking the analysis engine) and exits with code **3** if any are unmet:
-- `node` - Required to run the analysis engine (the Coana CLI). The engine needs Node.js 20 or later.
+- `node` - Required to run the analysis engine (the Coana CLI). The engine needs Node.js 22.13 or later.
 - `uv` - Required by the analysis engine
 - An **Enterprise** Socket organization plan (any `enterprise*` plan, including Enterprise trials)