gettyimages / gettyimages-api_nodejs

98%

main: 98%

LAST BUILD ON BRANCH require-patched-node

branch: require-patched-node

CHANGE BRANCH

x

Reset

• require-patched-node
• actions
• add-orientations-search-videos-creative
• allow-calls-with-api-key-only
• allow-custom-param-header
• allow-setting-token
• api-consistency
• code-samples
• dependabot/31
• dependabot/60
• dependabot/github_actions/dot-github/workflows/actions/download-artifact-4.1.7
• dependabot/npm_and_yarn/babel/core-7.29.7
• dependabot/npm_and_yarn/babel/traverse-7.23.2
• dependabot/npm_and_yarn/brace-expansion-1.1.21
• dependabot/npm_and_yarn/braces-3.0.3
• dependabot/npm_and_yarn/flatted-3.4.2
• dependabot/npm_and_yarn/got-and-ava--removed
• dependabot/npm_and_yarn/js-yaml-3.14.2
• dependabot/npm_and_yarn/js-yaml-3.15.2
• dependabot/npm_and_yarn/json5-1.0.2
• dependabot/npm_and_yarn/lodash-4.17.23
• dependabot/npm_and_yarn/lodash-4.18.1
• dependabot/npm_and_yarn/minimatch-3.1.5
• dependabot/npm_and_yarn/picomatch-2.3.2
• dependabot/npm_and_yarn/word-wrap-1.2.4
• deprecate-eol-versions-of-node
• feature/add-search-video-editorial-filters
• feature/typescript-declarations
• fix-lint-errors
• fix/js-yaml-dependabot-61
• fix/npm-publish
• fix_token_exp
• handle-boolean-properties-correctly
• main
• node-10
• node10
• publish-only-one-version
• refs/heads/main
• refs/tags/5.1.0
• refs/tags/6.0.0
• refs/tags/6.0.1
• refs/tags/6.1.0
• refs/tags/6.1.1
• refs/tags/6.1.2
• refs/tags/6.2.0
• refs/tags/6.2.1
• refs/tags/6.2.2
• refs/tags/6.2.3
• refs/tags/6.3.0
• refs/tags/6.3.1
• refs/tags/6.4.0
• refs/tags/6.5.0
• refs/tags/6.5.1
• refs/tags/6.5.2
• refs/tags/6.5.3
• refs/tags/6.5.4
• refs/tags/6.5.5
• refs/tags/6.5.6
• refs/tags/6.5.7
• refs/tags/6.5.8
• refs/tags/6.6.0
• refs/tags/6.7.0
• refs/tags/6.7.1
• refs/tags/6.7.2
• refs/tags/6.7.3
• refs/tags/7.0.0
• review-tests
• update-auth-hostname
• update-code-samples
• update-dependencies
• update-packages
• upgrade-upload-artifact

Build # 39829649029

Build Type

Pull #89

github

Committed by ChrisSimmons

Commit Message

Require Node.js releases patched for CVE-2026-111497

CVE-2026-111497 is an out-of-bounds write in the Node.js Brotli decoder.
The SDK cannot patch it in code.  Only a runtime upgrade fixes it.

- Set engines.node to "^22.23.4 || ^24.22.1 || >=26.12.1".  This drops
  Node.js 14 to 21 and the unpatched releases of 22, 24 and 26.
- Test on Node.js 22.x, 24.x and 26.x in build.yml.
- Run lint.yml and the publish.yml build on Node.js 24.
- Show the new range in the README prerequisites.

Pull Request Pull Request #89: Require Node.js releases patched for CVE-2026-111497

Coverage Stats

94 of 115 branches covered (81.74%)

1029 of 1049 relevant lines covered (98.09%)

114.41 hits per line