From c1697862d2138d4c64febe01b34f4b18f0cb9764 Mon Sep 17 00:00:00 2001
From: bntvllnt <32437578+bntvllnt@users.noreply.github.com>
Date: Thu, 22 Oct 2026 21:07:44 +0200
Subject: [PATCH] ci: pin Node.js 24.22.1 (October 2026 security release)

October 2026 Node.js security release: pins Node exactly instead of a floating major.
---
 .github/workflows/ci.yml      | 2 +-
 .github/workflows/publish.yml | 6 +++---
 .node-version                 | 1 +
 3 files changed, 5 insertions(+), 4 deletions(-)
 create mode 100644 .node-version

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8f3c752..5b8b583 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version-file: .node-version
           cache: pnpm
 
       - run: pnpm install --frozen-lockfile
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 505f07e..8665a52 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -38,7 +38,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version-file: .node-version
           cache: pnpm
 
       - run: pnpm install --frozen-lockfile
@@ -67,7 +67,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version-file: .node-version
           cache: pnpm
           registry-url: https://registry.npmjs.org
 
@@ -105,7 +105,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version-file: .node-version
           cache: pnpm
           registry-url: https://registry.npmjs.org
 
diff --git a/.node-version b/.node-version
new file mode 100644
index 0000000..ce62013
--- /dev/null
+++ b/.node-version
@@ -0,0 +1 @@
+24.22.1