Skip to content

Upgrade Node and a few dependencies to address security vulnerabilities#1149

Merged
2 commits merged into
mainfrom
andreja/tsp-1310-resolve-security-vulnerabilities-on-public-sdk-repo-2
Apr 20, 2026
Merged

Upgrade Node and a few dependencies to address security vulnerabilities#1149
2 commits merged into
mainfrom
andreja/tsp-1310-resolve-security-vulnerabilities-on-public-sdk-repo-2

Conversation

@andrejak

Copy link
Copy Markdown
Contributor
  • Bumps a few dependencies in the lockfile
  • Bumps Node engine to 20 and upgrades @rollup/plugin-terser to 1.0.0

@andrejak andrejak marked this pull request as ready for review April 20, 2026 09:19
@andrejak andrejak requested a review from a team as a code owner April 20, 2026 09:19
@andrejak andrejak changed the title fix: bump dependencies to fix vulnerabilities Upgrade Node and a few dependencies to address security vulnerabilities Apr 20, 2026
Comment thread .tool-versions
@@ -1 +1 @@
nodejs 18.20.8 No newline at end of file

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This makes me think we should bump it in assistant too (or maybe even switch assistant to bun -- considering it has no production runtime, it'd be just for benefit of dev really)

Comment thread package.json
Comment on lines 100 to +101
"engines": {
"node": ">=18.*"
"node": ">=20"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If we change this, would people using this version on node 18 begin to experience failure to install?

Can we bump tools versions and maintain the minimum engine on 18?

@andrejak andrejak closed this pull request by merging all changes into main in 5cab32e Apr 20, 2026
@andrejak andrejak deleted the andreja/tsp-1310-resolve-security-vulnerabilities-on-public-sdk-repo-2 branch April 20, 2026 09:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants