From 110cbe8a51ac879f9cd5fa74d32140cf81b6def3 Mon Sep 17 00:00:00 2001
From: 1bcMax <viewitter@gmail.com>
Date: Mon, 26 Oct 2026 23:53:23 -0500
Subject: [PATCH] ci: resolve the newest Node 24 instead of the runner's cached
 one

openclaw 2026.10.6 refuses to install below Node 24.22.1 (the Oct 20
security release). setup-node with "24" uses the hosted toolcache,
which still carries 24.21.0, so npm ci fails in every job. publish.yml
has the same step, so the next release would fail too. check-latest
resolves the newest 24.x from the manifest.
---
 .github/workflows/ci.yml      | 5 +++++
 .github/workflows/publish.yml | 1 +
 2 files changed, 6 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0f6a6aa0..aa267368 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,9 +22,12 @@ jobs:
       # devDependency (2026.10+) refuses to install below Node 24.16, so
       # `npm ci` fails on 22. Users still install fine on 22 — openclaw is
       # dev-only here, and test/Dockerfile.install-test keeps covering 22.
+      # `check-latest`: the floor moves with Node security releases (2026.10.6
+      # needs 24.22.1) and the runner's cached "24" lags them by weeks.
       - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "24"
+          check-latest: true
           cache: npm
 
       - run: npm ci
@@ -47,6 +50,7 @@ jobs:
       - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "24"
+          check-latest: true
           cache: npm
 
       - run: npm ci
@@ -92,6 +96,7 @@ jobs:
       - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "24"
+          check-latest: true
           cache: npm
           cache-dependency-path: |
             package-lock.json
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index c0c6bc1b..1da93854 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -31,6 +31,7 @@ jobs:
       - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "24"
+          check-latest: true
           registry-url: "https://registry.npmjs.org"
 
       - name: Resolve versions