Skip to content

chore: standardize repository on Node 24 - #531

Merged
blove merged 22 commits into
mainfrom
blove/security-modernization
Aug 30, 2026
Merged

blove merged 22 commits into
mainfrom
blove/security-modernization

Conversation

@blove

@blove blove commented Aug 30, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Pin contributor and automation environments to Node.js 24.19.0 while setting only the root development engine to ^24.15.0 and retaining pnpm@10.12.1.
  • Enforce every active workflow node-version and actions/setup-node occurrence with a self-discovering YAML AST contract, including aliases, flow/block syntax, and nested parallel steps; invalid YAML and unresolved aliases fail closed with file/line diagnostics.
  • Update current contributor guidance and record the dependency-modernization sequence for the follow-up jsdom and package-build PRs.

Compatibility and release scope

  • Published package manifests, runtime source, and public package Node-engine metadata are unchanged.
  • Existing ESM/CommonJS consumer support is unchanged.
  • No Changeset is included because this PR changes repository development and automation only.
  • yaml is a declared root development dependency; the lockfile importer reuses the existing yaml@2.8.4 resolution.

Verification

  • Node.js 24.19.0 / pnpm 10.12.1 frozen install.
  • Full repository test command: 230 root tests plus all package and app suites, including React 1570, bench 181, and website 606.
  • Typecheck, public API typecheck, deterministic type-performance budgets, lint, build, API Extractor, packaging, publish preflight, formatting, and diff checks.
  • Clean package/consumer smoke for all four public packages, including ESM and CommonJS consumers and React 19 peer installation.
  • Local website production build and Playwright smoke in Chromium and WebKit: 165 passed with 2 intentional skips per browser and zero retries.
  • Bench production build freshness check and Chromium benchmark smoke: 28/28.
  • Independent final spec and code-quality reviews passed on head commit 23a20fd5.

Known non-blocking baseline warnings remain classified: pnpm/Corepack url.parse, Vite native-config __dirname, jsdom canvas/navigation, TanStack useVirtualizer, large bench chunk, two Turbopack filesystem traces, API Extractor's bundled TypeScript version, and intentional publint suggestions for package engines/stream-adapter side effects.

@vercel

vercel Bot commented Aug 30, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
pretable Ignored Ignored Aug 30, 2026 10:02am

Request Review

@github-actions

Copy link
Copy Markdown
Contributor

Vercel preview ready

Preview: https://pretable-91ngvk7ih-cacheplane.vercel.app
Commit: 23a20fd506922a9b2e08bb8aa70e666f88a4c3fa

Updated automatically by the deploy-preview job.

@blove
blove merged commit 0da0dea into main Aug 30, 2026
20 checks passed
@blove
blove deleted the blove/security-modernization branch August 30, 2026 10:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant