Skip to content

Security: Update Node version#243

Open
dmlvr wants to merge 1 commit intomasterfrom
node_update
Open

Security: Update Node version#243
dmlvr wants to merge 1 commit intomasterfrom
node_update

Conversation

@dmlvr
Copy link
Copy Markdown

@dmlvr dmlvr commented May 8, 2026

No description provided.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@dmlvr dmlvr self-assigned this May 8, 2026
Copilot AI review requested due to automatic review settings May 8, 2026 11:31
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates and centralizes the project’s Node.js version configuration to improve security posture and ensure consistent tooling across local development and CI/CD.

Changes:

  • Pin Node.js to 24.15.0 via package.json (engines + volta) and a new .node-version file.
  • Enforce Node engine compliance by enabling engine-strict in .npmrc.
  • Update the deploy workflow to source Node from .node-version instead of a major-only version.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 3 comments.

File Description
package.json Pins Node version via engines and volta configuration.
.npmrc Enables strict enforcement of package.json#engines.
.node-version Adds a single-file Node version reference for tools/CI.
.github/workflows/deploy.yml Switches setup-node to node-version-file using .node-version.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread package.json
Comment thread package.json
Comment thread .npmrc
@dmlvr dmlvr requested a review from a team May 8, 2026 11:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants