From 23d4c3eeedbc7910ce355cfda5cbb9c6350be62e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 28 Aug 2026 02:04:22 +0000
Subject: [PATCH 1/2] build(deps): bump openid-client from 6.8.6 to 6.8.7

Bumps [openid-client](https://github.com/panva/openid-client) from 6.8.6 to 6.8.7.
- [Release notes](https://github.com/panva/openid-client/releases)
- [Changelog](https://github.com/panva/openid-client/blob/main/CHANGELOG.md)
- [Commits](https://github.com/panva/openid-client/compare/v6.8.6...v6.8.7)

---
updated-dependencies:
- dependency-name: openid-client
  dependency-version: 6.8.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index ef6900bca60..5a3db25ffcc 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1902,9 +1902,9 @@
             }
         },
         "node_modules/openid-client": {
-            "version": "6.8.6",
-            "resolved": "https://registry.npmjs.org/openid-client/-/openid-client-6.8.6.tgz",
-            "integrity": "sha512-lsfMRH/GCgMiGCRnBRY3e70uogkgOessPaTOhP3rw/dxqNOZHwOazWx+m6jt5EVk3ecRFULl0TwWpk9Qnw3RKQ==",
+            "version": "6.8.7",
+            "resolved": "https://registry.npmjs.org/openid-client/-/openid-client-6.8.7.tgz",
+            "integrity": "sha512-gtKthNu7evSBvTdrrlHb4F3Fi9dcwlb5QaITlCs+9mfpvuOi0Q3qtBf5+iY4sEP8hy1qCoAdxBNPDcmZeVSDzQ==",
             "license": "MIT",
             "dependencies": {
                 "jose": "^6.2.8",

From 5d415cb5f6dd2e261dbeddba567360dcaee03da7 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 31 Aug 2026 15:51:29 +0000
Subject: [PATCH 2/2] ci: pin Node 26 validation to 26.7

---
 .github/workflows/test.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 4351d4f47e7..04d2e70fe95 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -33,7 +33,10 @@ jobs:
             contents: read
         strategy:
             matrix:
-                node: ['26', '25', '24', '22']
+                # Pinned to 26.7: Node 26.8.0 rewrote fs.readFile
+                # (nodejs/node#65327) so that binding.open is no longer called
+                # from JS, which breaks mock-fs at require time
+                node: ['26.7', '25', '24', '22']
         name: Node ${{ matrix.node }} validation
         steps:
             - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1