chore: update node

## What
Closes
https://linear.app/octopus/issue/CFS-17926/security-codefreshcli-cve-2026-75803
Closes
https://linear.app/octopus/issue/CFS-17916/security-codefreshcli-cve-2026-63073
## Why

## Notes

<!-- ⚠️ ↓↓↓ Auto-generated by Codefresh CI. Any edits may be overridden.
Image: ~codefresh/cli~ ↓↓↓ ⚠️ -->

## Security Report — codefresh/cli

> [!NOTE]
> Compared security scans:
>
> **Current image**:

[quay.io/codefresh/cli:cfs-17916-security-fix@sha256:0bb770f2924a65d2cfa5b8dc6a913378e6128890edd494ccc95c97884bdd2611](https://app.prismacloud.io/compute?computeState=/monitor/vulnerabilities/images/ci?search%3Dsha256%253A0bb770f2924a65d2cfa5b8dc6a913378e6128890edd494ccc95c97884bdd2611)
>
> **Baseline**:

[quay.io/codefresh/cli:master@sha256:0f54336751469820235db1df602cd29ce56c6d2dace33b552fb53d7958f91f65](https://app.prismacloud.io/compute?computeState=/monitor/vulnerabilities/images/ci?search%3Dsha256%253A0f54336751469820235db1df602cd29ce56c6d2dace33b552fb53d7958f91f65)

### Fixed CVEs: 8
#### 🟣 Critical: 2
- CVE-2026-63073 in `openssl@3.5.7-r0` at `unknown path`
- CVE-2026-75803 in `openssl@3.5.7-r0` at `unknown path`
#### 🔴 High: 5
- CVE-2026-63076 in `openssl@3.5.7-r0` at `unknown path`
- CVE-2026-63075 in `openssl@3.5.7-r0` at `unknown path`
- CVE-2026-63072 in `openssl@3.5.7-r0` at `unknown path`
- CVE-2026-54874 in `openssl@3.5.7-r0` at `unknown path`
- CVE-2026-14457 in `openssl@3.5.7-r0` at `unknown path`
#### 🟠 Medium: 1
- CVE-2026-63074 in `openssl@3.5.7-r0` at `unknown path`

### Fixed issues: 9
<!-- Fixed issues:
~[{"identifier":"CFS-18045","dueDate":"2026-10-13"},{"identifier":"CFS-17969","dueDate":"2026-10-13"},{"identifier":"CFS-17926","dueDate":"2026-09-27"},{"identifier":"CFS-17916","dueDate":"2026-09-27"},{"identifier":"CFS-17907","dueDate":"2026-10-13"},{"identifier":"CFS-17882","dueDate":"2026-10-13"},{"identifier":"CFS-17875","dueDate":"2026-10-13"},{"identifier":"CFS-17866","dueDate":"2026-11-12"},{"identifier":"CFS-17832","dueDate":"2026-10-13"}]~
-->
- Fixes
[CFS-18045](https://linear.app/octopus/issue/CFS-18045/security-codefreshcli-cve-2026-63075)
- Fixes
[CFS-17969](https://linear.app/octopus/issue/CFS-17969/security-codefreshcli-cve-2026-63075)
- Fixes
[CFS-17926](https://linear.app/octopus/issue/CFS-17926/security-codefreshcli-cve-2026-75803)
- Fixes
[CFS-17916](https://linear.app/octopus/issue/CFS-17916/security-codefreshcli-cve-2026-63073)
- Fixes
[CFS-17907](https://linear.app/octopus/issue/CFS-17907/security-codefreshcli-cve-2026-63076)
- Fixes
[CFS-17882](https://linear.app/octopus/issue/CFS-17882/security-codefreshcli-cve-2026-54874)
- Fixes
[CFS-17875](https://linear.app/octopus/issue/CFS-17875/security-codefreshcli-cve-2026-63072)
- Fixes
[CFS-17866](https://linear.app/octopus/issue/CFS-17866/security-codefreshcli-cve-2026-63074)
- Fixes
[CFS-17832](https://linear.app/octopus/issue/CFS-17832/security-codefreshcli-cve-2026-14457)

<!-- ⚠️ ↑↑↑ Auto-generated by Codefresh CI. Any edits may be overridden.
Image: ~codefresh/cli~ ↑↑↑ ⚠️ -->

Author: alina-codefresh

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:24.20-alpine3.24
+FROM node:24.21-alpine3.24
 ARG TARGETPLATFORM
 RUN echo '@edge http://dl-cdn.alpinelinux.org/alpine/edge/main' >> /etc/apk/repositories \
   && apk --update add --no-cache \

Dockerfile-debian

@@ -1,4 +1,4 @@
-FROM node:24.20-trixie-slim
+FROM node:24.21-trixie-slim
 ARG TARGETPLATFORM
 RUN apt update \
     && apt -y install \

Dockerfile-debian-rootless

@@ -1,4 +1,4 @@
-FROM node:24.20-trixie-slim
+FROM node:24.21-trixie-slim
 ARG TARGETPLATFORM
 RUN apt update \
     && apt -y install \

Dockerfile-rootless

@@ -1,4 +1,4 @@
-FROM node:24.20-alpine3.24
+FROM node:24.21-alpine3.24
 ARG TARGETPLATFORM
 RUN echo '@edge http://dl-cdn.alpinelinux.org/alpine/edge/main' >> /etc/apk/repositories \
   && apk --update add --no-cache \

package.json

@@ -1,6 +1,6 @@
 {
   "name": "codefresh",
-  "version": "1.2.7",
+  "version": "1.2.8",
   "description": "Codefresh command line utility",
   "main": "index.js",
   "preferGlobal": true,