[pbc1017]

Current main still permits Node versions below the October security floors. This selective backport pins existing CI/image/local selectors to patched releases and enforces the manifest through the repository's existing package manager. EOL Node 18/20 selectors move to Node 24.22.1.

Supported Node range: >=24.22.1 <25 || >=26.12.1 <27. Package manager versions, dependencies, lockfiles and application features are preserved. Deployment/runtime changes are separate from this source PR.

Validation:

• wam / [email protected]: actual Node 22.22.0 rejection confirmed.
• wam install-v24.22.1: exit 0.
• wam typecheck: exit 0.
• wam lint: exit 0.
• wam build: exit 0.
• wam format:check: exit 0.
• wam changed-manifest-format: exit 0.

Independent source-owner/adversarial/contract review is pending coordinator dispatch. Current exact-head native CI: SUCCESS. this draft is not a completed security rollout.

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Essentials
• Run ID: 6e428a80-4d78-4651-8242-8bf56f02f59d

📥 Commits

Reviewing files that changed from the base of the PR and between b3811c8 and dbdfcb0.

📒 Files selected for processing: 3

• .github/workflows/ci.yml
• wam/.nvmrc
• wam/package.json

+------------------------------------------------------------+
| In God we trust. All others must go through a code review. |
+------------------------------------------------------------+
  \
   \   (\__/)
       (•ㅅ•)
       / 　 づ

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}