From 49997d40222e6b8ef05c6ec8aa5bf9b7e8f2d690 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 14 Jan 2026 10:19:25 +0000
Subject: [PATCH 1/3] Initial plan


From cc1395fd165032b2d43ee27c7e97f8e6453c3611 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 14 Jan 2026 10:23:14 +0000
Subject: [PATCH 2/3] feat: update Node.js unsafe versions for December 2025
 security releases

- Update Node.js 20.x to 20.20.0 (from 20.19.4)
- Update Node.js 22.x to 22.22.0 (from 22.17.1)
- Update Node.js 24.x to 24.13.0 (from 24.4.1)
- Add Node.js 25.x at 25.3.0
- Remove Node.js v18.x (EOL on 2025-04-30)
- Remove Node.js v23.x (not included in December 2025 security release)

All changes reference: https://nodejs.org/en/blog/vulnerability/december-2025-security-releases

Co-authored-by: fengmk2 <156269+fengmk2@users.noreply.github.com>
---
 package.json | 29 +++++++++++++----------------
 1 file changed, 13 insertions(+), 16 deletions(-)

diff --git a/package.json b/package.json
index 36853f3..0cc52af 100644
--- a/package.json
+++ b/package.json
@@ -71,29 +71,26 @@
         "version": "16.20.2",
         "reason": "https://nodejs.org/en/blog/vulnerability/august-2023-security-releases"
       },
-      ">= 18.0.0 < 18.20.6": {
-        "version": "18.20.6",
-        "reason": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases"
-      },
-      ">= 20.0.0 < 20.19.4": {
-        "version": "20.19.4",
-        "reason": "https://nodejs.org/en/blog/vulnerability/july-2025-security-releases"
+
+      ">= 20.0.0 < 20.20.0": {
+        "version": "20.20.0",
+        "reason": "https://nodejs.org/en/blog/vulnerability/december-2025-security-releases"
       },
       ">= 21.0.0 < 21.7.2": {
         "version": "21.7.2",
         "reason": "https://nodejs.org/en/blog/vulnerability/april-2024-security-releases/"
       },
-      ">= 22.0.0 < 22.17.1": {
-        "version": "22.17.1",
-        "reason": "https://nodejs.org/en/blog/vulnerability/july-2025-security-releases"
+      ">= 22.0.0 < 22.22.0": {
+        "version": "22.22.0",
+        "reason": "https://nodejs.org/en/blog/vulnerability/december-2025-security-releases"
       },
-      ">= 23.0.0 < 23.11.1": {
-        "version": "23.11.1",
-        "reason": "https://nodejs.org/en/blog/vulnerability/may-2025-security-releases"
+      ">= 24.0.0 < 24.13.0": {
+        "version": "24.13.0",
+        "reason": "https://nodejs.org/en/blog/vulnerability/december-2025-security-releases"
       },
-      ">= 24.0.0 < 24.4.1": {
-        "version": "24.4.1",
-        "reason": "https://nodejs.org/en/blog/vulnerability/july-2025-security-releases"
+      ">= 25.0.0 < 25.3.0": {
+        "version": "25.3.0",
+        "reason": "https://nodejs.org/en/blog/vulnerability/december-2025-security-releases"
       }
     },
     "unsafe-alinode-versions": {

From a5c43bc86913205fd850b2c48eba89d926eeea84 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 14 Jan 2026 10:28:27 +0000
Subject: [PATCH 3/3] feat: update Node.js versions for December 2025 security
 releases

Keep v18 and v23 entries as requested.

- Update Node.js 20.x to 20.20.0 (from 20.19.4)
- Update Node.js 22.x to 22.22.0 (from 22.17.1)
- Update Node.js 24.x to 24.13.0 (from 24.4.1)
- Add Node.js 25.x at 25.3.0
- Keep Node.js v18.x at 18.20.6 (January 2025 release)
- Keep Node.js v23.x at 23.11.1 (May 2025 release)

Reference: https://nodejs.org/en/blog/vulnerability/december-2025-security-releases

Co-authored-by: fengmk2 <156269+fengmk2@users.noreply.github.com>
---
 package.json | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 0cc52af..902b33c 100644
--- a/package.json
+++ b/package.json
@@ -71,7 +71,10 @@
         "version": "16.20.2",
         "reason": "https://nodejs.org/en/blog/vulnerability/august-2023-security-releases"
       },
-
+      ">= 18.0.0 < 18.20.6": {
+        "version": "18.20.6",
+        "reason": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases"
+      },
       ">= 20.0.0 < 20.20.0": {
         "version": "20.20.0",
         "reason": "https://nodejs.org/en/blog/vulnerability/december-2025-security-releases"
@@ -84,6 +87,10 @@
         "version": "22.22.0",
         "reason": "https://nodejs.org/en/blog/vulnerability/december-2025-security-releases"
       },
+      ">= 23.0.0 < 23.11.1": {
+        "version": "23.11.1",
+        "reason": "https://nodejs.org/en/blog/vulnerability/may-2025-security-releases"
+      },
       ">= 24.0.0 < 24.13.0": {
         "version": "24.13.0",
         "reason": "https://nodejs.org/en/blog/vulnerability/december-2025-security-releases"