From 708f0d332ef464e7c93680e2f0173b83f0c4e072 Mon Sep 17 00:00:00 2001
From: briquet <benjamin.riquet@numerique.gouv.fr>
Date: Wed, 21 Oct 2026 21:54:20 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=94=92=EF=B8=8F(frontend)=20upgrade=20Nod?=
 =?UTF-8?q?e=20to=2022.23.4=20and=2024.22.1?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Pin Node images to the 2026-10-20 security releases
---
 .github/workflows/ci.yml         | 2 +-
 CHANGELOG.md                     | 6 ++++--
 Dockerfile                       | 2 +-
 compose.yml                      | 2 +-
 docker/dinum-frontend/Dockerfile | 2 +-
 src/frontend/Dockerfile          | 2 +-
 src/mail/package.json            | 2 +-
 7 files changed, 10 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 48a0491aa..23f6f560a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -215,7 +215,7 @@ jobs:
       - name: Install Node.js
         uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
-          node-version: "24"
+          node-version: "24.22.1"
 
       - name: Install dependencies
         run: cd src/frontend/ && npm ci --ignore-scripts
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 09699a419..191e20573 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,9 +8,11 @@ and this project adheres to
 
 ## [Unreleased]
 
-## [1.36.1] - 2026-10-21
+### Fixed
 
-### Added
+- 🔒️(frontend) upgrade Node to 22.23.4 and 24.22.1 security releases
+
+## [1.36.1] - 2026-10-21
 
 ### Changed
 
diff --git a/Dockerfile b/Dockerfile
index 509f47e4f..abaa03ae5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -39,7 +39,7 @@ RUN --mount=type=cache,target=/root/.cache/uv \
   uv sync --locked --no-dev
 
 # ---- mails ----
-FROM node:22-alpine AS mail-builder
+FROM node:22.23.4-alpine AS mail-builder
 
 RUN apk upgrade --no-cache ca-certificates
 
diff --git a/compose.yml b/compose.yml
index 15de865bc..4a5189cd7 100644
--- a/compose.yml
+++ b/compose.yml
@@ -175,7 +175,7 @@ services:
     working_dir: /app
 
   node:
-    image: node:22-alpine
+    image: node:22.23.4-alpine
     user: "${DOCKER_USER:-1000}"
     environment:
       HOME: /tmp
diff --git a/docker/dinum-frontend/Dockerfile b/docker/dinum-frontend/Dockerfile
index 883dfb7a5..2c0bcf86d 100644
--- a/docker/dinum-frontend/Dockerfile
+++ b/docker/dinum-frontend/Dockerfile
@@ -1,5 +1,5 @@
 # ---- Front-end image ----
-FROM node:22-alpine AS frontend-deps
+FROM node:22.23.4-alpine AS frontend-deps
 
 RUN apk upgrade --no-cache ca-certificates
 
diff --git a/src/frontend/Dockerfile b/src/frontend/Dockerfile
index 5ef119778..4cf5d34df 100644
--- a/src/frontend/Dockerfile
+++ b/src/frontend/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:22-alpine AS frontend-deps
+FROM node:22.23.4-alpine AS frontend-deps
 
 RUN apk upgrade --no-cache ca-certificates
 
diff --git a/src/mail/package.json b/src/mail/package.json
index 3f4d0d840..ed0b05d53 100644
--- a/src/mail/package.json
+++ b/src/mail/package.json
@@ -14,7 +14,7 @@
     "build": "npm run build-mjml-to-html && npm run build-html-to-plain-text"
   },
   "volta": {
-    "node": "24.13.1"
+    "node": "24.22.1"
   },
   "repository": "https://github.com/suitenumerique/meet",
   "author": "DINUM",