[pull] master from CycloneDX:master

.github/workflows/binary-builds.yml

@@ -4,6 +4,7 @@ on:
   pull_request:
     paths:
       - '.github/workflows/binary-builds.yml'
+      - '.nvmrc'
       - '.pnpmfile.cjs'
       - 'bin/**'
       - 'data/**'
@@ -19,6 +20,7 @@ on:
       - 'v*'
     paths:
       - '.github/workflows/binary-builds.yml'
+      - '.nvmrc'
       - '.pnpmfile.cjs'
       - 'bin/**'
       - 'data/**'
@@ -48,7 +50,6 @@ jobs:
         os: [ darwin, linux, windows ]
         arch: [ amd64, arm64]
         libc: [ gnu, musl ]
-        node: [ 24.7.0 ]
         exclude:
           # musl can only be built on linux
           - os: darwin
@@ -163,11 +164,11 @@ jobs:
       - name: Setup pnpm
         if: ${{ matrix.os != 'linux' }}
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
-      - name: Use Node.js ${{ matrix.node }}
+      - name: Use Node.js
         if: ${{ matrix.os != 'linux' }}
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: ${{ matrix.node }}
+          node-version-file: .nvmrc
       - name: Install composer
         uses: shivammathur/setup-php@ec406be512d7077f68eed36e63f4d91bc006edc4 # 2.35.4
         if: ${{ matrix.os == 'darwin' }}
@@ -197,7 +198,7 @@ jobs:
             [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
 
             # Install node
-            nvm install ${{ matrix.node }}
+            nvm install
 
             # Install pnpm
             npm install --global pnpm

.github/workflows/dockertests.yml

@@ -4,6 +4,7 @@ on:
   pull_request:
     paths:
       - '.github/workflows/dockertests.yml'
+      - '.nvmrc'
       - '.pnpmfile.cjs'
       - 'bin/**'
       - 'data/**'
@@ -26,18 +27,17 @@ jobs:
       fail-fast: true
       matrix:
         os: ['ubuntu-24.04', 'ubuntu-24.04-arm']
-        node-version: ['24.7.0']
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
       - name: Setup pnpm
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
-      - name: Use Node.js ${{ matrix.node-version }}
+      - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: ${{ matrix.node-version }}
+          node-version-file: .nvmrc
       - name: pnpm install, build and test
         run: |
           pnpm install --config.strict-dep-builds=true --package-import-method copy
@@ -88,18 +88,17 @@ jobs:
       fail-fast: true
       matrix:
         os: ['ubuntu-24.04', 'ubuntu-24.04-arm']
-        node-version: ['24.7.0']
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
       - name: Setup pnpm
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
-      - name: Use Node.js ${{ matrix.node-version }}
+      - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: ${{ matrix.node-version }}
+          node-version-file: .nvmrc
       - name: pnpm install, build and test
         run: |
           pnpm install --config.strict-dep-builds=true --package-import-method copy
@@ -123,7 +122,6 @@ jobs:
     strategy:
       fail-fast: true
       matrix:
-        node-version: ['24.7.0']
         os: [ubuntu-24.04, ubuntu-24.04-arm]
     runs-on: ${{ matrix.os }}
     steps:
@@ -132,10 +130,10 @@ jobs:
           persist-credentials: false
       - name: Setup pnpm
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
-      - name: Use Node.js ${{ matrix.node-version }}
+      - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: ${{ matrix.node-version }}
+          node-version-file: .nvmrc
       - name: pnpm install, build and test
         run: |
           pnpm install --config.strict-dep-builds=true --package-import-method copy
@@ -153,21 +151,16 @@ jobs:
 
   win-tests:
     runs-on: windows-latest
-
-    strategy:
-      fail-fast: true
-      matrix:
-        node-version: ['24.7.0']
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
       - name: Setup pnpm
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
-      - name: Use Node.js ${{ matrix.node-version }}
+      - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: ${{ matrix.node-version }}
+          node-version-file: .nvmrc
       - name: pnpm install, build
         run: |
           pnpm install --config.strict-dep-builds=true --package-import-method copy

.github/workflows/java-reachables-test.yml

@@ -4,6 +4,7 @@ on:
   pull_request:
     paths:
       - '.github/workflows/java-reachables-test.yml'
+      - '.nvmrc'
       - '.pnpmfile.cjs'
       - 'bin/**'
       - 'data/**'
@@ -26,7 +27,6 @@ jobs:
       fail-fast: false
       matrix:
         java-version: ['24']
-        node-version: ['24.7.0']
         os: ['ubuntu-24.04']
     runs-on: ${{ matrix.os }}
     steps:
@@ -40,10 +40,10 @@ jobs:
           java-version: ${{ matrix.java-version }}
       - name: Setup pnpm
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
-      - name: Use Node.js ${{ matrix.node-version }}
+      - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: ${{ matrix.node-version }}
+          node-version-file: .nvmrc
       - name: pnpm install, build
         run: |
           pnpm install --config.strict-dep-builds=true

.github/workflows/nodejs.yml

@@ -4,6 +4,7 @@ on:
   pull_request:
     paths:
       - '.github/workflows/nodejs.yml'
+      - '.nvmrc'
       - '.pnpmfile.cjs'
       - 'bin/**'
       - 'data/**'
@@ -21,6 +22,7 @@ on:
       - 'v*'
     paths:
       - '.github/workflows/nodejs.yml'
+      - '.nvmrc'
       - '.pnpmfile.cjs'
       - 'bin/**'
       - 'data/**'
@@ -128,7 +130,6 @@ jobs:
     strategy:
       fail-fast: true
       matrix:
-        node-version: ['24.7.0']
         os: [windows, macos, ubuntu]
         deno_version: [2.x]
         include:
@@ -168,10 +169,10 @@ jobs:
           persist-credentials: false
       - name: Setup pnpm
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
-      - name: Use Node.js ${{ matrix.node-version }}
+      - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: ${{ matrix.node-version }}
+          node-version-file: .nvmrc
       - uses: denoland/setup-deno@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb # v2.0.3
         with:
           deno-version: v${{ matrix.deno_version }}

.github/workflows/npm-release.yml

@@ -31,7 +31,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: '24.7.0'
+          node-version-file: .nvmrc
           registry-url: https://registry.npmjs.org/
       - name: Release npm package
         if: startsWith(github.ref, 'refs/tags/')
@@ -182,7 +182,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: '24.7.0'
+          node-version-file: .nvmrc
           registry-url: https://registry.npmjs.org/
       - uses: oras-project/setup-oras@22ce207df3b08e061f537244349aac6ae1d214f6 # v1.2.4
       - name: Free disk space
@@ -266,7 +266,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: '24.7.0'
+          node-version-file: .nvmrc
           registry-url: https://registry.npmjs.org/
       - uses: oras-project/setup-oras@22ce207df3b08e061f537244349aac6ae1d214f6 # v1.2.4
       - name: Free disk space
@@ -337,7 +337,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: '24.7.0'
+          node-version-file: .nvmrc
           registry-url: https://registry.npmjs.org/
       - uses: oras-project/setup-oras@22ce207df3b08e061f537244349aac6ae1d214f6 # v1.2.4
       - name: Free disk space
@@ -407,7 +407,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: '24.7.0'
+          node-version-file: .nvmrc
           registry-url: https://registry.npmjs.org/
       - uses: oras-project/setup-oras@22ce207df3b08e061f537244349aac6ae1d214f6 # v1.2.4
       - name: Free disk space
@@ -460,7 +460,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: '24.7.0'
+          node-version-file: .nvmrc
           registry-url: https://registry.npmjs.org/
       - uses: oras-project/setup-oras@22ce207df3b08e061f537244349aac6ae1d214f6 # v1.2.4
       - name: Free disk space

.github/workflows/nydus-demo.yml

@@ -17,7 +17,6 @@ jobs:
       fail-fast: false
       matrix:
         java-version: ['24']
-        node-version: ['24.7.0']
         os: ['ubuntu-latest']
     runs-on: ${{ matrix.os }}
     steps:
@@ -29,10 +28,10 @@ jobs:
         with:
           distribution: 'temurin'
           java-version: ${{ matrix.java-version }}
-      - name: Use Node.js ${{ matrix.node-version }}
+      - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: ${{ matrix.node-version }}
+          node-version-file: .nvmrc
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false

.github/workflows/python-atom-tests.yml

@@ -4,6 +4,7 @@ on:
   pull_request:
     paths:
       - '.github/workflows/python-atom-tests.yml'
+      - '.nvmrc'
       - '.pnpmfile.cjs'
       - 'bin/**'
       - 'data/**'
@@ -26,7 +27,6 @@ jobs:
       fail-fast: false
       matrix:
         java-version: ['24']
-        node-version: ['24.7.0']
         os: ['ubuntu-24.04']
     runs-on: ${{ matrix.os }}
     steps:
@@ -37,10 +37,10 @@ jobs:
       - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.7
       - name: Setup pnpm
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
-      - name: Use Node.js ${{ matrix.node-version }}
+      - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: ${{ matrix.node-version }}
+          node-version-file: .nvmrc
       - name: Set up JDK ${{ matrix.java-version }}
         uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
         with:

.github/workflows/repotests.yml

@@ -4,6 +4,7 @@ on:
   pull_request:
     paths:
       - '.github/workflows/repotests.yml'
+      - '.nvmrc'
       - '.pnpmfile.cjs'
       - 'bin/**'
       - 'data/**'
@@ -19,7 +20,6 @@ concurrency:
 
 env:
   NEXUS_URL: http://100.73.146.80:8081/repository/npm/
-  NODE_VERSION: 24.7.0
 
 # https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/controlling-permissions-for-github_token
 permissions: {}
@@ -47,10 +47,10 @@ jobs:
           rm -rf /tmp/docker-images-* /tmp/atom-usages-* /tmp/atom-reachables-* /tmp/cdx*
       - name: Setup pnpm
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
-      - name: Use Node.js ${{ env.NODE_VERSION }}
+      - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: ${{ env.NODE_VERSION }}
+          node-version-file: .nvmrc
       - name: Setup Nexus usage
         run: echo "registry=$NEXUS_URL" > .npmrc
       - name: pnpm install
@@ -136,7 +136,7 @@ jobs:
       - name: Use Node.js ${{ env.NODE_VERSION }}
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: ${{ env.NODE_VERSION }}
+          node-version-file: .nvmrc
       - name: Setup Nexus usage
         run: echo "registry=$NEXUS_URL" > .npmrc
       - name: pnpm install
@@ -178,7 +178,6 @@ jobs:
       fail-fast: true
       matrix:
         java-version: ['24']
-        node-version: ['24.7.0']
         os: ['self-hosted-ubuntu', 'ubuntu-24.04-arm', 'windows-latest', 'macos-15']
     runs-on: ${{ matrix.os }}
     steps:
@@ -195,10 +194,10 @@ jobs:
           go-version: '1.25.1'
       - name: Setup pnpm
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
-      - name: Use Node.js ${{ matrix.node-version }}
+      - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: ${{ matrix.node-version }}
+          node-version-file: .nvmrc
       - uses: denoland/setup-deno@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb # v2.0.3
         with:
           deno-version: v2.x
@@ -968,7 +967,6 @@ jobs:
       fail-fast: true
       matrix:
         java-version: ['24']
-        node-version: ['24.7.0']
         os: ['ubuntu-24.04', 'ubuntu-24.04-arm', 'macos-15']
     runs-on: ${{ matrix.os }}
     env:
@@ -992,10 +990,10 @@ jobs:
           go-version: '1.25.1'
       - name: Setup pnpm
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
-      - name: Use Node.js ${{ matrix.node-version }}
+      - name: Use Node.js
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: ${{ matrix.node-version }}
+          node-version-file: .nvmrc
       - name: Trim CI agent
         if: matrix.os == 'ubuntu-24.04' || matrix.os == 'ubuntu-24.04-arm'
         run: |