Skip to content

chore(deps)!: update all dependencies, require Node.js >= 22 - #291

Merged
macalbert merged 10 commits into
mainfrom
chore/update-dependencies
May 31, 2026
Merged

chore(deps)!: update all dependencies, require Node.js >= 22#291
macalbert merged 10 commits into
mainfrom
chore/update-dependencies

Conversation

@macalbert

@macalbert macalbert commented May 30, 2026

Copy link
Copy Markdown
Owner

Summary

Updates all dependencies to latest, bumps Node.js requirement to >= 22, and releases CLI 0.11.0 / Node.js SDK 0.3.0. Supersedes 8 individual Dependabot PRs.

Breaking Changes

  • Requires Node.js >= 22 (was >= 20)
  • pnpm 11.5.0 requires Node >= 22.13
  • testcontainers v12 requires Node >= 22.22

Version Bumps

Component From To
CLI (envilder) 0.10.0 0.11.0
GHA 0.10.0 0.11.0
Node.js SDK (@envilder/sdk) 0.2.0 0.3.0

Changes

Dependencies (root workspace)

  • Bump all devDependencies to latest (TypeScript 6.0.3, Biome 2.4.16, etc.)
  • Bump pnpm from 11.1.3 to 11.5.0 (packageManager field)
  • Remove rimraf — replaced with node -e "fs.rmSync(...)" (zero deps, cross-platform)
  • Upgrade testcontainers from v11 to v12.0.1

Node.js SDK (src/sdks/nodejs)

  • Remove rimraf from devDependencies
  • Fix clean script to use fs.rmSync
  • Bump engines.node to >=22

CI/CD Workflows

  • Update all GitHub Actions workflows from node-version: "20.x" to "22.x"
  • Affected: tests.yml, verify-action-build.yml, tests-nodejs-sdk.yml, publish-action.yml, test-action.yml, coverage-report.yml

Documentation

  • Update Node.js version references across all docs:
    • README.md, CONTRIBUTING.md, docs/requirements-installation.md
    • docs/github-action.md, github-action/README.md
    • src/sdks/nodejs/README.md, examples/sdk/nodejs/README.md
  • Update .github/AGENTS.md (pnpm 9+ → 11+)
  • Update Lambda runtime examples in skills (nodejs20.xnodejs22.x)

Changelogs

  • Add [0.11.0] entries to docs/changelogs/cli.md and docs/changelogs/gha.md
  • Add [0.3.0] entry to docs/changelogs/sdk-nodejs.md

Commits

  1. chore(deps): update all dependencies to latest
  2. chore(scripts): Replace rimraf with Node.js fs module for clean script
  3. chore(deps): bump node engines to >=22 and upgrade testcontainers to v12
  4. ci: update all workflows and docs to Node.js 22
  5. chore(release): bump CLI to 0.11.0 and Node.js SDK to 0.3.0

Validation

  • pnpm build
  • pnpm lint ✅ (secretlint + biome + tsc)
  • pnpm test ✅ (274 tests passing, 37 test files)
  • pnpm format
  • Version consistency tests ✅ (30/30)
  • lefthook pre-commit + commitlint ✅

Closes

Closes #276
Closes #277
Closes #278
Closes #279
Closes #285
Closes #286
Closes #287
Closes #288

Summary by CodeRabbit

  • Breaking Changes

    • CLI, SDK, and CI workflows now require Node.js >= 22.12.0.
  • Chores

    • Node.js SDK released v0.3.0; clean script switched to built-in fs.rmSync and rimraf removed.
    • Dependency bumps across SDK, CDK, website, and test tooling.
  • Documentation

    • Updated installation notes, READMEs, changelogs, GitHub Action examples, i18n text, and added an ADR on SDK dependency/engine policy.

Update all production and dev dependencies to their latest versions.
Keep testcontainers pinned to v11 for Node 20 compatibility.
Bump pnpm from 11.1.3 to 11.5.0.
Fix clean script to use Node built-in fs.rmSync.

Supersedes #276 #277 #278 #279 #285 #286 #287 #288
Copilot AI review requested due to automatic review settings May 30, 2026 22:14
@coderabbitai

coderabbitai Bot commented May 30, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 1472247f-4cec-418b-bb52-1f7de53409d8

📥 Commits

Reviewing files that changed from the base of the PR and between c254a73 and 47fa924.

⛔ Files ignored due to path filters (4)
  • .github/AGENTS.md is excluded by none and included by none
  • CONTRIBUTING.md is excluded by none and included by none
  • README.md is excluded by none and included by none
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml, !pnpm-lock.yaml and included by none
📒 Files selected for processing (7)
  • docs/architecture/adr/0009-sdk-dependency-compatibility-policy.md
  • docs/requirements-installation.md
  • examples/sdk/nodejs/README.md
  • src/sdks/nodejs/README.md
  • src/website/src/i18n/ca.ts
  • src/website/src/i18n/en.ts
  • src/website/src/i18n/es.ts
✅ Files skipped from review due to trivial changes (6)
  • examples/sdk/nodejs/README.md
  • src/website/src/i18n/en.ts
  • docs/architecture/adr/0009-sdk-dependency-compatibility-policy.md
  • docs/requirements-installation.md
  • src/sdks/nodejs/README.md
  • src/website/src/i18n/es.ts

Walkthrough

Bump SDK and site dependencies, raise Node.js engine floor to >=22.12.0, replace rimraf with inline fs.rmSync in clean scripts, update test deps, add ADR-0009 and changelog entries, and update docs, GitHub Actions examples, READMEs, example package, and i18n strings.

Changes

Dependency & docs updates

Layer / File(s) Summary
Node.js SDK package edits
src/sdks/nodejs/package.json
Package version bumped 0.2.00.3.0; clean script replaced with inline fs.rmSync call; engines.node raised to >=22.12.0; rimraf removed from devDependencies.
Test/development dependency bumps (nodejs)
tests/sdks/nodejs/package.json
Dev/test dependency pins updated for @aws-sdk/client-ssm, @azure/identity, @azure/keyvault-secrets, @testcontainers/localstack, and testcontainers.
IAC and website manifest bumps
src/iac/package.json, src/website/package.json
aws-cdk devDependency bumped; website Astro-related packages (@astrojs/sitemap, astro, @astrojs/check) updated.
Changelogs, ADR, docs, examples and i18n
docs/changelogs/*, docs/architecture/adr/0009-sdk-dependency-compatibility-policy.md, docs/github-action.md, docs/requirements-installation.md, examples/sdk/nodejs/*, src/website/src/components/DocsContent.astro, src/website/src/i18n/*
Add CLI/GHA/SDK changelog entries; introduce ADR-0009; update GitHub Actions workflow examples to Node 22.x; update installation docs and READMEs to require Node.js 22.12+; bump example SDK package; update i18n strings.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Possibly related PRs

  • macalbert/envilder#170: Prior PR introducing Node.js SDK manifest and script changes that this SDK bump builds on.

Suggested labels

github-actions

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The PR title clearly summarizes the main change: updating all dependencies and raising the Node.js minimum requirement to version 22, which is the primary objective across all linked issues.
Description check ✅ Passed The PR description is comprehensive and well-structured, covering the summary, breaking changes, version bumps, detailed change categories, commits, and validation results, which aligns with the template structure.
Linked Issues check ✅ Passed The PR addresses all eight linked issues: #276 (aws-cdk-lib update), #277/#285 (@testcontainers/localstack v12), #278/#286 (testcontainers v12), #279 (@aws-sdk/client-ssm), #287 (@aws-sdk/credential-providers), and #288 (aws-cdk CLI update) with corresponding dependency updates, Node.js engine bumps to >=22, and CI/documentation changes.
Out of Scope Changes check ✅ Passed All changes are in scope: dependency updates in package.json files, Node.js engine requirement bumps, replacement of rimraf with fs.rmSync, CI workflow updates to Node.js 22.x, and comprehensive documentation/changelog updates directly support the linked issue objectives.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/update-dependencies

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates various dependencies and devDependencies across multiple packages in the workspace, including AWS and Azure SDKs, Astro, Vitest, and Biome. The reviewer suggests reverting the dependency version bumps in the Node.js SDK package (src/sdks/nodejs/package.json) to maintain maximum compatibility and avoid forcing consumers of the SDK to upgrade their own AWS and Azure SDK versions unnecessarily.

Comment thread src/sdks/nodejs/package.json Outdated
@macalbert macalbert self-assigned this May 30, 2026
@macalbert macalbert added the dependencies Dependency updates (Dependabot) label May 30, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the repository’s production and development dependencies (workspace-wide) and refreshes the pnpm catalog/lockfile, aiming to keep the monorepo current while retaining Node compatibility and simplifying cleanup scripts.

Changes:

  • Bumped root, website, IaC, and Node.js SDK/test dependencies to newer versions and updated the pnpm catalog.
  • Updated pnpm-lock.yaml to reflect the new dependency graph.
  • Updated the root clean script to use Node’s built-in fs.rmSync instead of rimraf.

Reviewed changes

Copilot reviewed 6 out of 8 changed files in this pull request and generated 3 comments.

Show a summary per file
File Description
package.json Bumps core deps/dev tools and pnpm version; updates clean script.
pnpm-workspace.yaml Updates catalog versions (Biome, Node types, Vitest, CDK libs, etc.).
pnpm-lock.yaml Refreshes lockfile to match updated dependency set.
src/website/package.json Updates Astro + sitemap/check tooling versions.
src/iac/package.json Bumps aws-cdk devDependency.
src/sdks/nodejs/package.json Updates SDK dependency versions and bumps rimraf.
tests/sdks/nodejs/package.json Updates Node.js SDK test dependency versions (keeps testcontainers on v11).

Comment thread package.json
Comment thread package.json
Comment thread src/website/package.json
macalbert added 2 commits May 31, 2026 00:18
- Bump engines.node from >=20.0.0 to >=22.0.0 (root + nodejs SDK)

- Upgrade testcontainers from v11 to v12.0.1 (requires Node >=22.22)

- Remove rimraf from nodejs SDK devDependencies (use fs.rmSync)

BREAKING CHANGE: Requires Node.js >= 22
Copilot AI review requested due to automatic review settings May 30, 2026 22:31
@macalbert macalbert changed the title chore(deps): update all dependencies to latest chore(deps)!: update all dependencies, bump Node to >=22 May 30, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 6 out of 8 changed files in this pull request and generated 1 comment.

Comment thread package.json
- Update all GitHub Actions workflows from node 20.x to 22.x

- Update CONTRIBUTING, README, docs, SDK READMEs, examples

- Update AGENTS.md pnpm version (9+ -> 11+)

- Update Lambda runtime examples in skills (nodejs20.x -> nodejs22.x)
BREAKING CHANGE: Requires Node.js >= 22

- CLI: 0.10.0 -> 0.11.0

- GHA: 0.10.0 -> 0.11.0 (shares version with CLI)

- Node.js SDK: 0.2.0 -> 0.3.0

- Add changelog entries for all three components
Copilot AI review requested due to automatic review settings May 30, 2026 22:45
@macalbert macalbert changed the title chore(deps)!: update all dependencies, bump Node to >=22 chore(deps)!: update all dependencies, require Node.js >= 22 May 30, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 25 out of 27 changed files in this pull request and generated 2 comments.

Comment thread docs/github-action.md Outdated
Comment thread docs/github-action.md Outdated

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 25 out of 27 changed files in this pull request and generated 9 comments.

Comment thread docs/github-action.md Outdated
Comment thread CONTRIBUTING.md Outdated
Comment thread .github/AGENTS.md Outdated
Comment thread docs/github-action.md Outdated
Comment thread CONTRIBUTING.md Outdated
Comment thread .github/AGENTS.md Outdated
Comment thread docs/github-action.md Outdated
Comment thread CONTRIBUTING.md Outdated
Comment thread .github/AGENTS.md Outdated
- ADR-0009: SDK Dependency Compatibility Policy (min viable versions)

- SDK Node.js: revert deps to ^3.700.0 (AWS) / ^4.5.0 (Azure)

- SDK Node.js: engine lowered to >=18.0.0 (actual runtime minimum)

- Root: engine bumped to >=22.12.0 (matches toolchain deps)

- Fix escaped quotes in docs/github-action.md YAML example

- Update changelogs to reflect accurate engine requirements
- SDK Node.js engines: >=18.0.0 -> >=22.12.0 (Node 18/20 are EOL)

- ADR-0009 Rule 1: track active LTS, don't support dead runtimes

- Update SDK changelog to reflect BREAKING engine change
Copilot AI review requested due to automatic review settings May 31, 2026 07:50

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 27 out of 29 changed files in this pull request and generated 8 comments.

Comment thread README.md Outdated
Comment thread docs/requirements-installation.md Outdated
Comment thread docs/requirements-installation.md Outdated
Comment thread src/sdks/nodejs/README.md Outdated
Comment thread examples/sdk/nodejs/README.md Outdated
Comment thread CONTRIBUTING.md Outdated
Comment thread .github/AGENTS.md Outdated
Comment thread docs/architecture/adr/0009-sdk-dependency-compatibility-policy.md Outdated
- i18n (en, es, ca): prereqNode and reqNode → v22+

- DocsContent.astro: YAML examples node-version → 22.x

- examples/sdk/nodejs: bump @envilder/sdk → ^0.3.0

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@src/website/src/i18n/ca.ts`:
- Line 406: The UI copy uses a broad Node version string; update the prereqNode
translation key value from "Node.js v22+" to the precise minimum supported
runtime "Node.js v22.12+" (and make the same change for the other identical
occurrence of prereqNode in this file) so the displayed requirement matches the
enforced runtime floor (>=22.12).

In `@src/website/src/i18n/en.ts`:
- Line 405: Update the displayed Node.js prerequisite string to the exact
enforced engine range: change the value of the prereqNode entry (and any other
occurrences of that same string) from "Node.js v22+" to "Node.js v22.12+" so
users are not misled into using unsupported 22.0–22.11 releases; locate the
prereqNode key in src/website src i18n (en.ts) and replace its value
accordingly.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 62ca77c6-cd3c-411b-a127-8e1827147e0e

📥 Commits

Reviewing files that changed from the base of the PR and between 1b69582 and c254a73.

⛔ Files ignored due to path filters (2)
  • .github/skills/common-architecture-decisions/SKILL.md is excluded by none and included by none
  • package.json is excluded by none and included by none
📒 Files selected for processing (11)
  • docs/architecture/adr/0009-sdk-dependency-compatibility-policy.md
  • docs/changelogs/cli.md
  • docs/changelogs/gha.md
  • docs/changelogs/sdk-nodejs.md
  • docs/github-action.md
  • examples/sdk/nodejs/package.json
  • src/sdks/nodejs/package.json
  • src/website/src/components/DocsContent.astro
  • src/website/src/i18n/ca.ts
  • src/website/src/i18n/en.ts
  • src/website/src/i18n/es.ts
✅ Files skipped from review due to trivial changes (6)
  • docs/github-action.md
  • src/website/src/i18n/es.ts
  • docs/changelogs/gha.md
  • src/website/src/components/DocsContent.astro
  • docs/changelogs/sdk-nodejs.md
  • docs/architecture/adr/0009-sdk-dependency-compatibility-policy.md
🚧 Files skipped from review as they are similar to previous changes (2)
  • docs/changelogs/cli.md
  • src/sdks/nodejs/package.json

Comment thread src/website/src/i18n/ca.ts Outdated
Comment thread src/website/src/i18n/en.ts Outdated
Copilot AI review requested due to automatic review settings May 31, 2026 08:13

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 32 out of 34 changed files in this pull request and generated 12 comments.

Comment thread README.md Outdated
Comment thread docs/requirements-installation.md Outdated
Comment thread docs/requirements-installation.md Outdated
Comment thread CONTRIBUTING.md Outdated
Comment thread .github/AGENTS.md Outdated
Comment thread docs/requirements-installation.md Outdated
Comment thread docs/requirements-installation.md Outdated
Comment thread CONTRIBUTING.md Outdated
Comment thread .github/AGENTS.md Outdated
Comment thread src/sdks/nodejs/README.md Outdated
Update all references from '22+' to '22.12+' to match the actual

engine constraint enforced by commander 15, commitlint 21, and

astro 6.4. Rephrase ADR-0009 Rule 4 as a target policy.
@macalbert
macalbert merged commit 2873c8c into main May 31, 2026
18 checks passed
@macalbert
macalbert deleted the chore/update-dependencies branch May 31, 2026 09:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates (Dependabot)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants