Austin McKinley
bf71c329c6
The June 18 2026 Node.js security releases fix several HIGH/MEDIUM CVEs on the 24.x line, with 24.17.0 as the first patched release. The service images were pinned to 24.15, below that line. Bump to 24.18-alpine3.23 (latest 24.x) to pick up the fixes, including: - CVE-2026-48618 (HIGH) TLS wildcard-depth auth bypass - CVE-2026-48933 (HIGH) WebCrypto AES integer overflow crash - CVE-2026-48928/48930/48934 (MEDIUM) TLS/SNI identity verification bypasses - CVE-2026-48619 (MEDIUM) unbounded HTTP/2 memory growth via ORIGIN frames Advisory: https://nodejs.org/en/blog/vulnerability/june-2026-security-releases Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
95 lines
1.9 KiB
JSON
95 lines
1.9 KiB
JSON
{
|
|
"cli": {
|
|
"version": ">=18",
|
|
"promptToConfigurePushNotifications": false,
|
|
"appVersionSource": "remote"
|
|
},
|
|
"build": {
|
|
"base": {
|
|
"node": "24.18.0"
|
|
},
|
|
"development": {
|
|
"extends": "base",
|
|
"developmentClient": true,
|
|
"distribution": "internal",
|
|
"channel": "development",
|
|
"ios": {
|
|
"simulator": true,
|
|
"resourceClass": "large"
|
|
},
|
|
"env": {
|
|
"EXPO_PUBLIC_ENV": "production"
|
|
}
|
|
},
|
|
"preview": {
|
|
"extends": "base",
|
|
"distribution": "internal",
|
|
"channel": "production",
|
|
"ios": {
|
|
"resourceClass": "large"
|
|
},
|
|
"env": {
|
|
"EXPO_PUBLIC_ENV": "production"
|
|
}
|
|
},
|
|
"production": {
|
|
"extends": "base",
|
|
"ios": {
|
|
"resourceClass": "large",
|
|
"autoIncrement": true,
|
|
"buildArtifactPaths": ["ios/build/*"]
|
|
},
|
|
"android": {
|
|
"autoIncrement": true
|
|
},
|
|
"channel": "production",
|
|
"env": {
|
|
"EXPO_PUBLIC_ENV": "production"
|
|
}
|
|
},
|
|
"testflight": {
|
|
"extends": "base",
|
|
"ios": {
|
|
"autoIncrement": true,
|
|
"buildArtifactPaths": ["ios/build/*"]
|
|
},
|
|
"android": {
|
|
"autoIncrement": true
|
|
},
|
|
"channel": "testflight",
|
|
"env": {
|
|
"EXPO_PUBLIC_ENV": "testflight"
|
|
}
|
|
},
|
|
"testflight-android": {
|
|
"extends": "base",
|
|
"ios": {
|
|
"autoIncrement": true,
|
|
"buildArtifactPaths": ["ios/build/*"]
|
|
},
|
|
"android": {
|
|
"autoIncrement": true
|
|
},
|
|
"channel": "testflight",
|
|
"env": {
|
|
"EXPO_PUBLIC_ENV": "testflight"
|
|
}
|
|
}
|
|
},
|
|
"submit": {
|
|
"production": {
|
|
"ios": {
|
|
"ascAppId": "6444370199"
|
|
},
|
|
"android": {
|
|
"track": "production"
|
|
}
|
|
},
|
|
"testflight-android": {
|
|
"android": {
|
|
"track": "internal"
|
|
}
|
|
}
|
|
}
|
|
}
|