From e95dc07c6a08b1e5a14e528d40577941c647b966 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Fri, 3 Jul 2026 10:56:53 +0000
Subject: [PATCH] Align @types/node with Node 22 and block major Dependabot
 bumps

Pin @types/node to ^22.20.0 to match the Node 22 runtime declared in
.nvmrc. Add a Dependabot ignore rule to prevent future major-version
bumps that would reintroduce a Node API surface mismatch.
---
 .github/dependabot.yml |  3 +++
 injected/package.json  |  2 +-
 package-lock.json      | 19 ++++++++++++++++++-
 3 files changed, 22 insertions(+), 2 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 191cd02a24d..1a54ac9e599 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -10,6 +10,9 @@ updates:
       open-pull-requests-limit: 20
       labels:
           - 'dependencies'
+      ignore:
+          - dependency-name: '@types/node'
+            update-types: ['version-update:semver-major']
       groups:
           eslint:
               patterns:
diff --git a/injected/package.json b/injected/package.json
index 190acfe84f2..7b377262dcf 100644
--- a/injected/package.json
+++ b/injected/package.json
@@ -50,7 +50,7 @@
     "@fingerprintjs/fingerprintjs": "^5.2.0",
     "@types/chrome": "^0.1.43",
     "@types/jasmine": "^6.0.0",
-    "@types/node": "^25.9.3",
+    "@types/node": "^22.20.0",
     "@types/seedrandom": "^3.0.8",
     "c8": "^11.0.0",
     "fast-check": "^4.8.0",
diff --git a/package-lock.json b/package-lock.json
index 620d5867747..1ba6858b5e6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -53,7 +53,7 @@
         "@fingerprintjs/fingerprintjs": "^5.2.0",
         "@types/chrome": "^0.1.43",
         "@types/jasmine": "^6.0.0",
-        "@types/node": "^25.9.3",
+        "@types/node": "^22.20.0",
         "@types/seedrandom": "^3.0.8",
         "c8": "^11.0.0",
         "fast-check": "^4.8.0",
@@ -63,6 +63,23 @@
         "web-ext": "^10.2.0"
       }
     },
+    "injected/node_modules/@types/node": {
+      "version": "22.20.0",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.20.0.tgz",
+      "integrity": "sha512-QWlFW2wf3nTjC13/DqRnBpR4ZO36VJH/JVBkA/vcnmbTBNQIlnObqyqZE1tUR7+Ni23Lda8R1BxMfbXRpCUx5g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "undici-types": "~6.21.0"
+      }
+    },
+    "injected/node_modules/undici-types": {
+      "version": "6.21.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
+      "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
+      "dev": true,
+      "license": "MIT"
+    },
     "messaging": {
       "name": "@duckduckgo/messaging",
       "version": "1.0.0",