Skip to content

Security: Update Node version#82

Open
dmlvr wants to merge 1 commit intomasterfrom
node_update
Open

Security: Update Node version#82
dmlvr wants to merge 1 commit intomasterfrom
node_update

Conversation

@dmlvr
Copy link
Copy Markdown

@dmlvr dmlvr commented May 8, 2026

No description provided.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot AI review requested due to automatic review settings May 8, 2026 12:11
@dmlvr dmlvr self-assigned this May 8, 2026
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the project’s Node.js runtime requirements and CI configuration to use a newer Node version consistently across local dev tooling and GitHub Actions.

Changes:

  • Added Node version pinning via package.json engines and volta.
  • Enforced engine checks by adding .npmrc with engine-strict=true.
  • Introduced .node-version and updated the deploy workflow to read Node from that file.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File Description
package.json Pins Node version via engines and Volta configuration.
.npmrc Enforces strict engine compliance during installs.
.node-version Provides a single-file Node version source for tools/CI.
.github/workflows/deploy.yml Switches setup-node to use .node-version instead of a hardcoded Node version.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread package.json
Comment on lines +36 to 41
"engines": {
"node": "24.15.0"
},
"volta": {
"node": "24.15.0"
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants