Skip to content

Add .nvmrc and .node-version files#315

Open
clins1994 wants to merge 2 commits intoMathieu2301:mainfrom
clins1994:add-node-version-files
Open

Add .nvmrc and .node-version files#315
clins1994 wants to merge 2 commits intoMathieu2301:mainfrom
clins1994:add-node-version-files

Conversation

@clins1994
Copy link
Copy Markdown
Collaborator

@clins1994 clins1994 commented Apr 11, 2026

Summary

  • Add .nvmrc and .node-version files pinned to Node 22 (current LTS)
  • Bump engines from >=14.0.0 to >=18.0.0
  • Bump minor dependencies to latest versions

Dependency changes

Package Before After Notes
axios ^1.5.0 ^1.15.0 Fixes critical SSRF vulnerability (GHSA-3p68-rc4w-qgx5, GHSA-fvcv-3m26-pcqx)
jszip ^3.7.1 ^3.10.1 Minor bump
@babel/eslint-parser ^7.15.7 ^7.28.6 Minor bump
dotenv ^16.3.1 ^16.6.1 Minor bump
eslint-plugin-import ^2.22.1 ^2.32.0 Minor bump

Test plan

  • Verify nvm use / fnm use picks up Node 22 in the repo
  • Tests pass on Node 22 with updated dependencies
  • Critical axios SSRF vulnerability resolved

🤖 Generated with Claude Code

clins1994 and others added 2 commits April 11, 2026 17:59
Pin Node 18 (highest LTS version in CI matrix) for consistent
local development environments.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Pin .nvmrc and .node-version to Node 22 (current LTS)
- Bump engines to >=18.0.0
- Bump axios ^1.5.0 → ^1.15.0 (fixes critical SSRF vuln)
- Bump jszip ^3.7.1 → ^3.10.1
- Bump @babel/eslint-parser ^7.15.7 → ^7.28.6
- Bump dotenv ^16.3.1 → ^16.6.1
- Bump eslint-plugin-import ^2.22.1 → ^2.32.0

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@clins1994 clins1994 requested a review from Mathieu2301 April 11, 2026 09:42
@clins1994 clins1994 self-assigned this Apr 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant