- Pin Node.js 20.18.3 by sha256 checksum (no more curl|bash) - Add python3 for downstream make test YAML validation - Remove netlify CLI (unused by downstream repos) - Keep all existing ruby/jekyll/imagemagick/yarn functionality