A project configured for Node.js 24.x has a new deployment from 2026-10-30. The build uses 24.22.1; a serving Function execution reported process.version v24.21.0. We are keeping our 24.22.1 security requirement unchanged.

The October 29 advisory says new deployments after October 28 at 11am PT use patched Node.js: https://vercel.com/kb/bulletin/node-js-security-advisory . How can users verify whether an older reported Function version includes all equivalent security backports, and what supported action obtains 24.22.1 if it does not? Is there an official rollout update or published attestation covering this case?

This concerns the managed Function runtime, rather than the build-time Node version. No project name, deployment URL, account identifier, private logs, credentials or access tokens are included.