[rkistner]

• Update to NodeJS v24.22.0.
• Update system CA bundles in the Docker image - likely unused.
• Use the latest Mozilla CA bundles for NodeJS. This is a smaller change than switching over to system bundles, since NodeJS already use the Mozilla CA bundles (but an older version).

These all affect the docker image only.

This also changes the changesets to be a patch update only - the actual changes are not significant enough for a minor release.

These address the TLS issues described in https://emudhra.we-have-a-problem.com/. Those could affect JWKS URL fetching and TLS for database connections. While there is a fix for the issues in NodeJS itself, the fix is not in any official NodeJS docker image yet. We manually update the CA bundles here.

This does not affect Postgres, since we already bundle a custom set of CA certificates there, which does not include the affected ones. It does affect all other source databases where TLS is used.

AI Usage

Used Codex to suggest Dockerfile changes; manually verified and applied.

[changeset-bot]

🦋 Changeset detected

Latest commit: 8d7713c

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 22 packages

Name	Type
@powersync/service-sync-rules	Minor
@powersync/service-core	Patch
@powersync/service-types	Minor
@powersync/service-errors	Minor
@powersync/service-module-mongodb	Minor
@powersync/service-module-postgres	Patch
@powersync/service-module-mysql	Patch
@powersync/service-module-mssql	Patch
@powersync/service-module-convex	Patch
@powersync/service-module-mongodb-storage	Patch
@powersync/service-module-postgres-storage	Patch
@powersync/lib-services-framework	Patch
@powersync/service-image	Patch
@powersync/service-jpgwire	Patch
@powersync/service-core-tests	Patch
@powersync/service-module-core	Patch
test-client	Patch
@powersync/service-schema	Patch
@powersync/service-client	Patch
@powersync/lib-service-postgres	Patch
@powersync/service-rsocket-router	Patch
@powersync/lib-service-mongodb	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-21T09:07:59.706067Z	8d7713c	New commits
🔒 Security Review	✅ Completed 2026-10-21T09:06:31.057503Z	3f5d0f9	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 3f5d0f9a2e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".