[claude]

Requested by Keeley Hammond · Slack thread

The release action pinned here ran the npm publish step on Node 24.10.0, which predates the October 2026 Node.js security release. v1.1.2 tracks the latest Node 24.x via check-latest, so future Node patch releases need no further pin bumps.

---

Generated by Claude Code

[claude]

CI note: Test (43, 22.23.4, ubuntu-latest) failed (and required-ci with it, since it only aggregates the matrix).

Root cause: the flaky spec Devtron Installation > should load the extension in newly created sessions (spec/devtron-install-spec.ts:107) got false. It checks newSes.extensions.getAllExtensions() synchronously right after session.fromPartition(...). In this run the Devtron service worker needed a retry ("Failed to start Devtron service-worker ... trying again"), so the extension wasn't loaded into the new session yet. The other 22 specs and the rest of the matrix passed.

Unrelated to this PR: the only change here is the pinned SHA in .github/workflows/release.yml, which runs on release/push and not in the Test workflow. The same job passed on main's latest push at the same base commit (https://github.com/electron/devtron/actions/runs/39691399581/job/119538188925). The same spec also failed intermittently on an unrelated Dependabot PR (https://github.com/electron/devtron/actions/runs/37498976034/job/112390749115).

Fix: none exists yet. Re-running the failed job should clear it. A lasting fix would be for the spec to wait for or poll the extension load instead of asserting synchronously.

---

Generated by Claude Code