Repository navigation
fix(vscode): bump Node.js fallback to 24.22.2 - #9685
Merged
Brian Lam (lambrianmsft) merged 2 commits intoNov 5, 2026
Merged
Brian Lam (lambrianmsft) merged 2 commits into
Brian Lam (lambrianmsft) merged 2 commits into
Conversation
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contributor
🤖 AI PR Validation ReportPR Review ResultsThank you for your submission! Here's detailed feedback on your PR title and body compliance:✅ PR Title
✅ Commit Type
✅ Risk Level
✅ What & Why
✅ Impact of Change
✅ Test Plan
✅ Contributors
✅ Screenshots/Videos
Summary Table
✅ All checks pass — this PR title and body are compliant and ready to merge.Powered by: Copilot CLI (claude-opus-4.8) | Last updated: Thu, 05 Nov 2026 19:40:10 GMT |
Contributor
There was a problem hiding this comment.
🟢 Approval recommended
No active review issues are recorded for the fallback Node.js version update.
No open issues 🎉
What changed in this PR
Updates the VS Code extension’s fallback Node.js version from 24.15.0 to 24.22.2 to address the requested security-version baseline.
Changes:
- Changes only
DependencyVersion.nodeJs; other dependency versions and version-discovery logic remain unchanged.
| File | Description |
|---|---|
apps/vs-code-designer/src/constants.ts |
Bumps the fallback Node.js version to 24.22.2. |
Review effort: Balanced
Brian Lam (lambrianmsft)
approved these changes
Nov 5, 2026
Brian Lam (lambrianmsft)
enabled auto-merge (squash)
November 5, 2026 19:00
3 of 14 tasks
Brian Lam (lambrianmsft)
added a commit
that referenced
this pull request
Nov 5, 2026
Backport the fallback-only update from #9685 to hotfix/v5.1013. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Please consider updating the Node.js acquisition logic in the VS Code extension or any related bundles/manifests so that the default 24.x installation is >24.22.1, per October's Node.js security releases. In a default x64 VS Code Windows install on 04NOV, without any specific project settings/configurations, I'm getting the older 24.15.0 release.
Commit Type
Risk Level
What & Why
Update
DependencyVersion.nodeJsinapps/vs-code-designer/src/constants.tsfrom24.15.0to24.22.2.Verified on November 4, 2026 against the official Node.js release index: 24.22.2 is the latest published Node.js 24.x release. It exceeds the 24.22.1 security floor and includes the applicable fixes from the October 2026 security release, including CVE-2026-111497.
Impact of Change
Test Plan
Biome check passed; TypeScript syntax check and
git diff --checkpassed. Verified against upstreammainthat only the requested fallback value changed. Unit and E2E suites were not run because no logic changed.Contributors
José Miguel Parrella (@bureado), Copilot
Screenshots/Videos
Not applicable; no visual changes.