chore: pin Node.js to 22.23.4

.mise.toml

@@ -1,5 +1,5 @@
 [tools]
-node = "22"
+node = "22.23.4"
 pnpm = "9.15.0"
 kubectl = "latest"
 helm = "latest"

.nvmrc

@@ -1 +1 @@
-22
+22.23.4

Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM node:22-slim AS base
+FROM node:22.23.4-slim AS base
 
 ARG PORT
 

base.Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM node:22-slim
+FROM node:22.23.4-slim
 
 ARG TARGETARCH
 

scripts/e2b/e2b.Dockerfile

@@ -9,7 +9,7 @@
 # Keep this self-contained instead of depending on lifecycleoss/workspace:latest; the E2B
 # remote builder needs every gateway contract change baked into the template deterministically.
 
-FROM node:22-slim
+FROM node:22.23.4-slim
 
 ENV HOME=/home/agent
 ENV BUN_INSTALL=/home/agent/.bun

sysops/dockerfiles/agent.Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM node:22-slim
+FROM node:22.23.4-slim
 
 ENV HOME=/home/agent
 ENV BUN_INSTALL=/home/agent/.bun

sysops/dockerfiles/tilt.app.Dockerfile

@@ -14,7 +14,7 @@
 # limitations under the License.
 
 # Use a common base image for both stages
-FROM node:22-slim
+FROM node:22.23.4-slim
 
 # Set environment variables
 ENV PNPM_HOME="/pnpm"

sysops/dockerfiles/workspace-gateway.Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM node:22-slim
+FROM node:22.23.4-slim
 
 ENV NPM_CONFIG_UPDATE_NOTIFIER=false
 ENV NODE_ENV=production