From c70339972a3d0344d2c40144b51e2ecbbcc9e37a Mon Sep 17 00:00:00 2001
From: renovate
 <service_account_2c0b36601dedc6d7a520c9bd610f1356@noreply.gitlab.nessar.fr>
Date: Sat, 17 Oct 2026 19:39:26 +0000
Subject: [PATCH 1/2] chore(deps): update node.js to v24.22.0

---
 .gitea/workflows/ci.yml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 7e0a3f5..8f22220 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -22,7 +22,7 @@ jobs:
     policy:
         name: policy
         runs-on: ubuntu-latest
-        container: node:24.21.0
+        container: node:24.22.0
         defaults:
             run:
                 shell: env PATH=/opt/bun/bin:/usr/bin:/bin bash -e {0}
@@ -45,7 +45,7 @@ jobs:
     validate:
         name: validate
         runs-on: ubuntu-latest
-        container: node:24.21.0
+        container: node:24.22.0
         defaults:
             run:
                 shell: env PATH=/opt/bun/bin:/usr/bin:/bin bash -e {0}
@@ -63,7 +63,7 @@ jobs:
     test:
         name: test
         runs-on: ubuntu-latest
-        container: node:24.21.0
+        container: node:24.22.0
         defaults:
             run:
                 shell: env PATH=/opt/bun/bin:/usr/bin:/bin bash -e {0}
@@ -93,7 +93,7 @@ jobs:
         name: benchmark
         runs-on: ubuntu-latest
         container:
-            image: node:24.21.0
+            image: node:24.22.0
             options: --memory=3g
         defaults:
             run:
@@ -112,7 +112,7 @@ jobs:
     build:
         name: build
         runs-on: ubuntu-latest
-        container: node:24.21.0
+        container: node:24.22.0
         defaults:
             run:
                 shell: env PATH=/opt/bun/bin:/usr/bin:/bin bash -e {0}
@@ -134,7 +134,7 @@ jobs:
     security:
         name: security
         runs-on: ubuntu-latest
-        container: node:24.21.0
+        container: node:24.22.0
         steps:
             - uses: https://gitea.com/actions/checkout@v7
               with:
@@ -221,7 +221,7 @@ jobs:
         if: ${{ always() }}
         needs: [policy, validate, test, benchmark, build, security, images]
         runs-on: ubuntu-latest
-        container: node:24.21.0
+        container: node:24.22.0
         env:
             CHECK_RESULTS: ${{ needs.policy.result }} ${{ needs.validate.result }} ${{ needs.test.result }} ${{ needs.benchmark.result }} ${{ needs.build.result }} ${{ needs.security.result }}
             IMAGE_RESULT: ${{ needs.images.result }}

From cc3664454a15db741de7be2f4803b5c3f7aa8de5 Mon Sep 17 00:00:00 2001
From: TO <th.theophyl.hoguet@gmail.com>
Date: Sun, 18 Oct 2026 13:15:53 +0200
Subject: [PATCH 2/2] docs(ci): note the Node 24.22.0 job containers

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 docs/gitea-actions.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/gitea-actions.md b/docs/gitea-actions.md
index efe18b0..b03111f 100644
--- a/docs/gitea-actions.md
+++ b/docs/gitea-actions.md
@@ -41,7 +41,7 @@ branch slug; stable promotions share one group and are not cancelled in progress
 
 ## Runners and permissions
 
-Every job that runs project commands uses Bun 1.4.3 with the frozen lockfile (see [Bun toolchain and Node](#bun-toolchain-and-node)). Job containers stay on Node 24.21.0. The image
+Every job that runs project commands uses Bun 1.4.3 with the frozen lockfile (see [Bun toolchain and Node](#bun-toolchain-and-node)). Job containers stay on Node 24.22.0. The image
 job uses Docker 29.9.1 and its matching Docker-in-Docker service. Scanner
 versions are Semgrep 1.180.0 and Trivy 0.75.0; Trivy downloads are checksum-checked.
 Trivy downloads its vulnerability database from Aqua's public ECR mirror because