From 3439d0233aa84f4235e7ba0ce9ca6c10b5c95284 Mon Sep 17 00:00:00 2001 From: Drew Cain Date: Thu, 22 Oct 2026 12:04:08 -0500 Subject: [PATCH] Build and run the docs site on Node 24 LTS instead of Node 25 Node 25 reached end of life and will not receive the fix for CVE-2026-111497, an out-of-bounds write in the Brotli decoder bundled with Node.js that the October 21, 2026 security release fixes in 22.23.4, 24.22.1 and 26.12.1. The production image ran Node v25.9.0. package.json already declares "node": ">=20 <25", so Node 24 also brings the image back inside the supported engine range. Both build and runtime stages move to the node:24 images, which currently ship Node 24.22.1. Co-Authored-By: Claude Opus 5.5 (1M context) --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 155a0c7..db5c1ee 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM node:25-bookworm AS build +FROM node:24-bookworm AS build WORKDIR /app ARG CACHE_BUST=unknown @@ -16,7 +16,7 @@ COPY . . RUN npx nuxt prepare && npx nuxt build # Production image -FROM node:25-slim AS prod +FROM node:24-slim AS prod RUN apt-get update && apt-get install -y \ curl \