Skip to content

build(node): Bump Node to 22.23.4 - #6954

Merged
antonis merged 1 commit into
mainfrom
vuln-3216/node-22.23.4
Oct 27, 2026
Merged

antonis merged 1 commit into
mainfrom
vuln-3216/node-22.23.4

Conversation

@sentry-junior

@sentry-junior sentry-junior Bot commented Oct 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the volta Node pin in package.json and samples/react-native/package.json from 22.22.2 to 22.23.4, which includes the fix for CVE-2026-111497 (Brotli) and the updated eMudhra root certificates. Tracked in VULN-3216.

via Geoff Goldsmith.

--

View Junior Session [Sentry]

Co-Authored-By: Geoff Goldsmith <geoff.goldsmith@sentry.io>
@sentry-junior
sentry-junior Bot requested review from a team and lucas-zimerman as code owners October 27, 2026 14:41
@linear-code

linear-code Bot commented Oct 27, 2026

Copy link
Copy Markdown

VULN-3216

@github-actions

Copy link
Copy Markdown
Contributor

Semver Impact of This PR

⚪ None (no version bump detected)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).


  • build(node): Bump Node to 22.23.4 by sentry-junior[bot] in #6954
  • fix(tracing): Support Expo Router 58 in expoRouterIntegration by alwx in #6923
  • fix(android): Persist hard-crash envelopes to disk before the process exits by alwx in #6937
  • feat(tracing): Track WebView trace-propagation feature adoption by antonis in #6938
  • build(deps): Bump body-parser to 2.4.0 to resolve DoS advisory by antonis in #6948
  • fix(android): Apply screenshot masking options to error and feedback screenshots by antonis in #6930
  • chore(deps): update Android SDK to v8.62.0 by github-actions in #6932
  • chore(deps): update Maestro to v2.12.0 by github-actions in #6945
  • chore(deps): bump getsentry/craft/.github/workflows/changelog-preview.yml from 2.35.0 to 3.0.0 by dependabot in #6944
  • chore(deps): bump the codeql-action group with 3 updates by dependabot in #6940
  • chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by dependabot in #6941
  • chore(deps): bump fast-uri from 3.1.8 to 3.1.9 by dependabot in #6946
  • chore(deps): bump undici from 6.29.0 to 6.29.1 by dependabot in #6947
  • chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 by dependabot in #6943
  • chore(deps): bump ruby/setup-ruby from 1.327.0 to 1.334.0 by dependabot in #6942
  • chore(deps): bump ip-address from 10.7.2 to 10.7.4 by dependabot in #6939
  • chore(deps): update Wizard to v9.0.0 by github-actions in #6936
  • chore(deps): update CLI to v3.8.2 by github-actions in #6933
  • ci: Move CI off end-of-life Node versions to Node 22 by antonis in #6927

🤖 This preview updates automatically when you update the PR.

@github-actions

Copy link
Copy Markdown
Contributor
Fails
🚫 Pull request is not ready for merge, please add the "ready-to-merge" label to the pull request

Generated by 🚫 dangerJS against f227435

@antonis antonis left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Thank you 🙇

@antonis
antonis merged commit f1f9f27 into main Oct 27, 2026
66 of 73 checks passed
@antonis
antonis deleted the vuln-3216/node-22.23.4 branch October 27, 2026 14:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant