Skip to content

chore(deps): update node.js to v24 - #11345

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/major-node.js
Open

renovate[bot] wants to merge 1 commit into
masterfrom
renovate/major-node.js

Conversation

@renovate

@renovate renovate Bot commented Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
cimg/node docker major 22.15 → 24.22.0
node (source) major v19.6.0 → 24.22.0
node (source) major v18.13.0 → 24.22.0
node (source) major v17.8.0 → 24.22.0
node (source) major v22.23.0 → 24.22.0
node (source) major v22.11.0 → 24.22.0
node (source) final major 21-alpine → 24.22.0-alpine

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

nodejs/node (node)

v24.22.0: 2026-10-14, Version 24.22.0 'Krypton' (LTS), @​richardlau prepared by @​aduh95

Compare Source

Notable Changes
  • [ddbf974b47] - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer) #​65627
  • [c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #​65553
  • [a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #​65484
  • [c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #​65484
  • [51aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #​63411
  • [d11c65d2f2] - doc: add araujogui to collaborators (Guilherme Araújo) #​66090
  • [acc1578179] - doc: deprecate Server.prototype._listen2 in node:net (Antoine du Hamel) #​65593
  • [a7f8de6362] - (SEMVER-MINOR) net: support sending net.BoundSocket to threads and child processes (Guy Bedford) #​64725
  • [60c3eb61bd] - (SEMVER-MINOR) perf_hooks: implement SlidingWindowHistogram (James M Snell) #​65825
  • [6b3e6f9d5c] - (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram (James M Snell) #​65806
  • [75456a3512] - (SEMVER-MINOR) perf_hooks: implement Histogram meanCI API (James M Snell) #​65606
  • [72d1b40c56] - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell) #​65434
  • [41161dda87] - (SEMVER-MINOR) sqlite: add StatementSync.prototype.close() (Guilherme Araújo) #​64232
  • [adbc757d70] - (SEMVER-MINOR) sqlite: add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #​64232
  • [241339f072] - (SEMVER-MINOR) src,lib: add util.markPromiseAsHandled (James M Snell) #​65805
  • [63b0974d9e] - (SEMVER-MINOR) util: implement util.throttle (James M Snell) #​65899
  • [a3bbb5a26f] - (SEMVER-MINOR) util: implement debounce (James M Snell) #​65899
Commits

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
    • Only on Sunday and Saturday (* * * * 0,6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested review from a team as code owners October 14, 2026 04:39
@renovate renovate Bot added dependencies Pull requests that update a dependency file renovate labels Oct 14, 2026
@wiz-inc-38d59fb8d7

wiz-inc-38d59fb8d7 Bot commented Oct 14, 2026 •

Copy link
Copy Markdown

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities -
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations 1 High
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 1 High

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

Comment thread apps/slack/lambda/Dockerfile Outdated
@@ -1,4 +1,4 @@
FROM node:21-alpine AS base
FROM node:24.21.0-alpine@sha256:ebfe2f90462722a7a4de65e91990e97fe0d401c70e0e762c5b53302f905ec1c1 AS base

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

High IaC Finding

Missing User Instruction

More Details
This rule checks whether a `USER` instruction is specified in the Dockerfile. The rule fails when the `USER` instruction is missing, causing the container to run with root privileges (UID 0). If an attacker compromises an application running as root, they gain the privileges needed to potentially escape the container and attack the host node. It also increases the blast radius of a breach, allowing full control to modify files or install malware within the container. Enforcing a non-root user is a fundamental security measure that minimizes the attack surface and contains the impact of a potential compromise.

Expected

The Dockerfile stage should contain the 'USER' instruction

Found

The Dockerfile stage does not contain any 'USER' instruction

Rule ID: b92f539f-06cf-49ba-8beb-7be068868ecb


To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason

If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).


To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate

@renovate
renovate Bot force-pushed the renovate/major-node.js branch from 2d27f2f to 2a813a2 Compare October 16, 2026 01:12
@renovate
renovate Bot force-pushed the renovate/major-node.js branch from 2a813a2 to 0c37535 Compare October 17, 2026 01:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants