What's Changed
Warning
This release ships Node.js v24.22.1, which patches the October 21, 2026 Node.js security release. Updating is recommended for all instances.
Fixed CVEs affecting Node.js 24.x:
- High: CVE-2026-111497 (Brotli decoder out-of-bounds write), CVE-2026-105482, CVE-2026-105483, CVE-2026-106069
- Medium: CVE-2026-105481, CVE-2026-106072, CVE-2026-106074
- Low: CVE-2026-106073
Security
- Docker base images pinned to exact digests and weekly vulnerability scanning added (CI now fails on fixable critical or high CVEs)
Fixes
- Username error message corrected across all languages: it said "less than 4 characters" but no minimum length is enforced — it now reads "cannot be empty"
New
- Polish language support