[krishan711]

Outstanding

• Node 26 (Dockerfile node:24, deploy node-version: '24'): not done, Node 26 is not LTS yet (LTS due late October).
• react / react-dom 19.3.1: held back, published 2026-10-14 (under 7 days).
• node:24.22.0 Docker image: held back, published 2026-10-14 (under 7 days); staying on 24.21.0.
• braces 3.0.3 (dev only, via @kibalabs/build -> stylelint -> micromatch): GHSA-vfj7-8cjw-p6xm, no fixed version published yet.

Workflow updates to apply

The token cannot push workflow changes. Run this in the repo folder:

git fetch origin && git switch deps-2026-10-19 && git pull && git apply <<'PATCH'
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 864b292..f411a85 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -17,14 +17,14 @@ jobs:
       DOCKER_IMAGE: package
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           # NOTE(krishan711): need full history to calculate difference
           fetch-depth: 0
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v4
       - name: Build docker image
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v7
         with:
           context: .
           load: true
@@ -40,7 +40,7 @@ jobs:
           docker cp temp-container:/app/. ./
           docker rm temp-container
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: '24'
           registry-url: 'https://registry.npmjs.org'
@@ -60,7 +60,7 @@ jobs:
       contents: write
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
       - name: Create Release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
index 6e6fd61..c6519b1 100644
--- a/.github/workflows/pull-request.yml
+++ b/.github/workflows/pull-request.yml
@@ -14,11 +14,11 @@ jobs:
       DOCKER_IMAGE: package-build
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v7
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v4
       - name: Build docker image
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v7
         with:
           context: .
           load: true
PATCH
git commit -am "Update GitHub Actions versions" && git push