chore(deps): update node.js to cd6fb7e

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
node	final	digest	931d7d5 → cd6fb7e

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[railway-app]

🚅 Deployed to the simon.dev-pr-1547 environment in simon.dev

Service	Status	Web	Updated (UTC)
simon.dev	🕗 Deploying (View Logs)	Web	Jan 28, 2026 at 8:34 am

[claude]

Claude finished @renovate[bot]'s task in 55s —— View job

---

Code Review Complete ✓

Review Summary

This PR updates the Node.js 24.13.0-alpine Docker image digest from 931d7d5 to cd6fb7e. This is a patch-level security or bug fix update to the same version of Node.js.

---

✅ Approved - Safe to Merge

1. Code Quality

• Clean and minimal change: Single line digest update maintains version pinning best practices
• Proper image pinning: Uses both version tag (24.13.0-alpine) and SHA256 digest for reproducible builds
• Dockerfile best practices maintained: Syntax version, security checks, and multi-stage build pattern all intact

2. Security

• ✅ No security concerns: Digest updates within the same version tag typically include security patches
• ✅ Pinning strategy: SHA256 digest ensures exact image reproducibility and prevents tag hijacking
• ✅ Secrets handling: Proper use of build args (not ENV) for sensitive data remains unchanged

3. Performance

• ✅ No performance impact: Same Node.js version (24.13.0), only the underlying image layers have been updated
• ✅ Cache mounts preserved: BuildKit cache optimizations for pnpm store and Next.js build cache remain effective

4. Testing

• ✅ Railway deployment in progress: Automated deployment to preview environment will validate the change
• ✅ Build verification: If the Railway build succeeds, the update is confirmed working
• Recommendation: Monitor the Railway deployment logs to ensure successful build and startup

5. Documentation

• ✅ Aligns with project requirements: Node.js 24 is specified in AGENTS.md as a project requirement
• ✅ No documentation updates needed: Version number remains the same (24.13.0)

---

📝 Notes

• What changed: The Docker image digest represents a patch-level update to the Node.js 24.13.0-alpine base image, likely including security fixes or Alpine Linux package updates
• Automerge enabled: This PR will automatically merge once CI passes, which is appropriate for digest-only updates
• Risk level: Very low - same Node.js version, only base image layers updated

🎯 Recommendation

Approve and allow automerge to proceed. This is a routine maintenance update that:

• Maintains version compatibility
• Likely includes security patches
• Follows Docker best practices with digest pinning
• Has been successfully tested via Railway deployment

---

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.76%. Comparing base (eb3e19c) to head (7895c4b).
⚠️ Report is 2 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1547   +/-   ##
=======================================
  Coverage   97.76%   97.76%           
=======================================
  Files          49       49           
  Lines         896      896           
  Branches      156      156           
=======================================
  Hits          876      876           
  Misses          8        8           
  Partials       12       12           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.