Move runtime and tooling to Node 22

.github/workflows/codeql.yml

@@ -43,7 +43,7 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v6
         with:
-          node-version: "20"
+          node-version: "22"
           cache: "pnpm"
 
       - name: Install dependencies

.nvmrc

@@ -1 +1 @@
-20
+22

apphosting.yaml

@@ -10,7 +10,7 @@ scripts:
   runCommand: node sites/mainweb/.next/standalone/sites/mainweb/server.js
 
 runConfig:
-  runtime: nodejs20
+  runtime: nodejs22
   concurrency: 80
   cpu: 2
   memoryMiB: 1024

docs/operations/ci-cd.md

@@ -7,7 +7,7 @@ All workflows live in `.github/workflows/`.
 | Workflow | Trigger | What it does |
 | --- | --- | --- |
 | `pnpm-ci.yml` | Push `main`/`dev`, PRs | `pnpm install` + `pnpm turbo run build` (Node 22) |
-| `test.yml` | Push `main`/`dev`, PRs | `pnpm test` (Node 20; pnpm comes from `packageManager`, unpinned in the workflow so it cannot drift) |
+| `test.yml` | Push `main`/`dev`, PRs | `pnpm test` (Node 22; pnpm comes from `packageManager`, unpinned in the workflow so it cannot drift) |
 | `codeql.yml` | Push/PR `main`/`dev`, daily 02:00 UTC | CodeQL `security-extended,security-and-quality`; PRs also run dependency review (`fail-on-severity: high`) |
 
 ## Deploy

docs/operations/deployment.md

@@ -9,7 +9,7 @@ Config: [`apphosting.yaml`](../../apphosting.yaml) at the repo root.
 | | |
 | --- | --- |
 | App | `sites/mainweb` (workspace `web`) |
-| Runtime | Node 20 |
+| Runtime | Node 22 |
 | Output | Next standalone (`sites/mainweb/.next/standalone/sites/mainweb/server.js`) |
 | Concurrency | 80 |
 | CPU / memory | 2 / 1024 MiB |

docs/tooling.md

@@ -23,7 +23,7 @@ Root `turbo.json` defines `build`, `dev`, `lint`, `typecheck`, `test`, `format`,
 
 | File | Role |
 | --- | --- |
-| `.nvmrc` | Node 20 |
+| `.nvmrc` | Node 22 |
 | `pnpm-workspace.yaml` | Workspace globs, plus every pnpm setting: `overrides` (security pins), `allowBuilds`, `autoInstallPeers`, `publicHoistPattern` (hoists eslint/prettier), `frozenLockfile`. pnpm 12 reads settings only from here — not `.npmrc`, not `package.json`'s `pnpm` field |
 | `restore-workspace.js` | Rewrite internal deps from `"*"` back to `workspace:*` |
 | `.dockerignore` | Slim Docker context (docs, git, env files, `node_modules`) |

package.json

@@ -4,7 +4,7 @@
   "version": "1.0.0",
   "packageManager": "pnpm@10.33.2",
   "engines": {
-    "node": ">=20.16.0 <24"
+    "node": ">=22.13.0 <24"
   },
   "scripts": {
     "dev": "turbo run dev --parallel",