[kvz]

Node.js published security releases on 2026-11-11: 16 CVEs (7 high, 6 medium, 3 low), almost all in Node's own HTTP/2 and TLS servers, with updated bundled llhttp and undici. The fixed versions are 26.13.1, 24.22.3 and 22.23.5, and the release notes list no breaking changes. This moves this repository's exact Node pins to the fixed patch of their line.

What changes

• CI workflow node-version 26.12.1 → 26.13.1
• Dockerfile: node:26.12.1-bookworm-slim → node:26.13.1-bookworm-slim (tag verified on Docker Hub)

Version pins only; CI exercises the new versions.

_{🤖 Claimed by kvz on framework1/java-sdk since 2026-11-11 · resume: claude --resume 7b680034-4a27-47aa-b2e8-812993e1a2f1}

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 77.04%. Comparing base (b929b05) to head (26f4835).

Additional details and impacted files

@@            Coverage Diff            @@
##               main     #105   +/-   ##
=========================================
  Coverage     77.04%   77.04%           
  Complexity      217      217           
=========================================
  Files            13       13           
  Lines           793      793           
  Branches         71       71           
=========================================
  Hits            611      611           
  Misses          146      146           
  Partials         36       36           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.