🔒️(frontend) upgrade Node to 22.23.4 and 24.22.1

Pin Node images to the 2026-10-20 security releases

.github/workflows/ci.yml

@@ -215,7 +215,7 @@ jobs:
       - name: Install Node.js
         uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
-          node-version: "24"
+          node-version: "24.22.1"
 
       - name: Install dependencies
         run: cd src/frontend/ && npm ci --ignore-scripts

CHANGELOG.md

@@ -8,9 +8,11 @@ and this project adheres to
 
 ## [Unreleased]
 
-## [1.36.1] - 2026-10-21
+### Fixed
 
-### Added
+- 🔒️(frontend) upgrade Node to 22.23.4 and 24.22.1 security releases
+
+## [1.36.1] - 2026-10-21
 
 ### Changed
 

Dockerfile

@@ -39,7 +39,7 @@ RUN --mount=type=cache,target=/root/.cache/uv \
   uv sync --locked --no-dev
 
 # ---- mails ----
-FROM node:22-alpine AS mail-builder
+FROM node:22.23.4-alpine AS mail-builder
 
 RUN apk upgrade --no-cache ca-certificates
 

compose.yml

@@ -175,7 +175,7 @@ services:
     working_dir: /app
 
   node:
-    image: node:22-alpine
+    image: node:22.23.4-alpine
     user: "${DOCKER_USER:-1000}"
     environment:
       HOME: /tmp

docker/dinum-frontend/Dockerfile

@@ -1,5 +1,5 @@
 # ---- Front-end image ----
-FROM node:22-alpine AS frontend-deps
+FROM node:22.23.4-alpine AS frontend-deps
 
 RUN apk upgrade --no-cache ca-certificates
 

src/frontend/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:22-alpine AS frontend-deps
+FROM node:22.23.4-alpine AS frontend-deps
 
 RUN apk upgrade --no-cache ca-certificates
 

src/mail/package.json

@@ -14,7 +14,7 @@
     "build": "npm run build-mjml-to-html && npm run build-html-to-plain-text"
   },
   "volta": {
-    "node": "24.13.1"
+    "node": "24.22.1"
   },
   "repository": "https://github.com/suitenumerique/meet",
   "author": "DINUM",