From 88de5253e368ab462399945e233de75f2c77bc0b Mon Sep 17 00:00:00 2001
From: Matheus <831308+matheus1lva@users.noreply.github.com>
Date: Wed, 21 Oct 2026 20:35:34 -0300
Subject: [PATCH] chore: security bumps (brotli CVE-2026-111497 / eMudhra)

build CI Node 18 -> 22 and verify CI Node 14 -> 22 (setup-node v1 -> v4, check-latest)
---
 .github/workflows/build.yml  | 7 ++++---
 .github/workflows/verify.yml | 7 ++++---
 2 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index cea2c2ff13..b38a4e9411 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -16,10 +16,11 @@ jobs:
            persist-credentials: false
            fetch-depth: 0
 
-        - name: Use Node 18.x
-          uses: actions/setup-node@v1
+        - name: Use Node 22
+          uses: actions/setup-node@v4
           with:
-            node-version: 18.x
+            node-version: '22'
+            check-latest: true
 
         - name: Install deps
           run: npm install
diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index 9d4707ecc0..f554d6c764 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -13,10 +13,11 @@ jobs:
       - name: Checkout repo
         uses: actions/checkout@v2
 
-      - name: Use Node 14.x
-        uses: actions/setup-node@v1
+      - name: Use Node 22
+        uses: actions/setup-node@v4
         with:
-          node-version: 14.x
+          node-version: '22'
+          check-latest: true
 
       - name: Install deps
         run: npm install