chore(deps): update node.js to v22.23.3

[renovate]

This PR contains the following updates:

Package	Update	Change
node (source)	patch	22.23.2 → 22.23.3

---

Release Notes

nodejs/node (node)

v22.23.3: 2026-09-23, Version 22.23.3 'Jod' (LTS), @​aduh95 prepared by @​juanarbol

Compare Source

Notable Changes

• [fe2a6b2be8] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #​64746
• [871167ddfd] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #​65653
• [b816fc8958] - deps: upgrade npm to 10.9.9 (npm team) #​64884
• [e306521444] - deps: update icu to 78.3 (Node.js GitHub Bot) #​62324
• [a9cb31129f] - deps: update OpenSSL 3.5.8 (Node.js GitHub Bot) #​65542
• [2a3548e51c] - deps: update Undici to 6.28.1 (mcollina) #​65790
• [3909ff2c4a] - node-api: support SharedArrayBuffer in napi_create_typedarray (Yilong Li) #​62710
• [66de6349ad] - node-api: add napi_create_external_sharedarraybuffer (Ben Noordhuis) #​62623

Commits

• [44cf27b8fa] - build: update binary-upload to use correct tarball name (Stewart X Addison) #​65282
• [fe2a6b2be8] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #​64746
• [71feba6b69] - crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #​63527
• [871167ddfd] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #​65653
• [2a3548e51c] - deps: update undici to 6.28.1 (mcollina) #​65790
• [59d853a4df] - deps: update archs files for openssl-3.5.8 (Node.js GitHub Bot) #​65542
• [a9cb31129f] - deps: upgrade openssl sources to openssl-3.5.8 (Node.js GitHub Bot) #​65542
• [3376e27de2] - deps: V8: cherry-pick a6eaf75 (Camillo Bruni) #​65402
• [b816fc8958] - deps: upgrade npm to 10.9.9 (npm team) #​64884
• [4e4bd1b104] - deps: update timezone to 2026c (Node.js GitHub Bot) #​64588
• [7d82841b4e] - deps: update c-ares to 1.34.8 (Node.js GitHub Bot) #​64330
• [01855a19d3] - deps: c-ares: cherry-pick 8ba37af (René) #​64110
• [23fb398c3d] - deps: update corepack to 0.35.0 (Node.js GitHub Bot) #​63375
• [5286330365] - deps: update corepack to 0.34.7 (Node.js GitHub Bot) #​62810
• [6d6c3c98b1] - deps: update timezone to 2026b (Node.js GitHub Bot) #​62962
• [e306521444] - deps: update icu to 78.3 (Node.js GitHub Bot) #​62324
• [d9cb8468a3] - doc: clarify filter option of sqlite.database.applyChangeset (Antoine du Hamel) #​63515
• [c9c5662d91] - doc: add sxa GPG key (ed25519) (Stewart X Addison) #​64193
• [37f21068c4] - fs: restore fs patchability in ESM loader (Joyee Cheung) #​62835
• [7c2df5dd96] - http2: avoid uaf while receiving and sending rst_stream (esgor) #​64166
• [3909ff2c4a] - node-api: support SharedArrayBuffer in napi_create_typedarray (Yilong Li) #​62710
• [66de6349ad] - node-api: add napi_create_external_sharedarraybuffer (Ben Noordhuis) #​62623
• [ce9139107f] - src: escape Windows environment variables in task runner (Antoine du Hamel) #​65217
• [839480a471] - test: fix link-local dgram scope assertion (Filip Skokan) #​65629
• [40eac4a32f] - test: account for varied OpenSSL CCM final behaviours (Filip Skokan) #​65542
• [75098a9e8c] - tools: update gr2m/create-or-update-pull-request-action to v1.10.1 (Mike McCready) #​63065
• [08b6ac0416] - tools: revert OpenSSL update workflow to ubuntu-latest (Richard Lau) #​62627
• [02cafc479f] - tools: fix commit linter for semver-major release proposals (Antoine du Hamel) #​62993
• [6f6cd3768d] - tools: sync mk-ca-bundle.pl with curl (Archkon) #​64753
• [bc5753d438] - tools: remove envinfo from our workflows (Antoine du Hamel) #​64259
• [d68ee9f8a5] - tools: validate version number in release proposal commit message lint (Antoine du Hamel) #​64070
• [38ee2e895f] - tools: avoid test/fixtures/wpt/README.md conflicts (Filip Skokan) #​63938
• [fdc65e489f] - tools: use different branch for tool updates on staging branches (Antoine du Hamel) #​63110
• [e5a6fde002] - tools: update gyp-next to 0.22.1 (Node.js GitHub Bot) #​62961
• [5fbbad6e82] - url: handle unparsable serialized URLs in setters (Matteo Collina) #​64651
• [ed019e4854] - util: preserve function names without source map names (Hiroki Osame) #​65108

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ COPYPASTE	jscpd	yes		no	no	1.71s
✅ EDITORCONFIG	editorconfig-checker	1		0	0	0.19s
✅ REPOSITORY	git_diff	yes		no	no	0.17s
✅ REPOSITORY	secretlint	yes		no	no	0.57s
✅ REPOSITORY	syft	yes		no	no	3.16s
✅ REPOSITORY	trivy	yes		no	no	10.06s
✅ REPOSITORY	trivy-sbom	yes		no	no	1.15s
✅ REPOSITORY	trufflehog	yes		no	no	23.36s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff