From 4686a4c9a4f0c0f0b4d199dc605c6714fb85c5da Mon Sep 17 00:00:00 2001
From: Kim Gustyr <kim.gustyr@flagsmith.com>
Date: Fri, 6 Nov 2026 15:43:54 +0100
Subject: [PATCH] deps: bump Node and uv to distrust compromised eMudhra CAs

---
 .pre-commit-config.yaml | 2 +-
 api/.nvmrc              | 2 +-
 api/pyproject.toml      | 2 +-
 docs/.nvmrc             | 2 +-
 frontend/.nvmrc         | 2 +-
 mcp/Dockerfile          | 2 +-
 mcp/pyproject.toml      | 2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index e92525265155..740b54568258 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -71,7 +71,7 @@ repos:
       - id: flagsmith-lint-tests
 
   - repo: https://github.com/astral-sh/uv-pre-commit
-    rev: 0.12.19 # Ensure this matches the version in api/pyproject.toml
+    rev: 0.13.7 # Ensure this matches the version in api/pyproject.toml
     hooks:
       - id: uv-lock
         name: api-lockcheck
diff --git a/api/.nvmrc b/api/.nvmrc
index 209e3ef4b624..a45fd52cc589 100644
--- a/api/.nvmrc
+++ b/api/.nvmrc
@@ -1 +1 @@
-20
+24
diff --git a/api/pyproject.toml b/api/pyproject.toml
index 6341fe011611..38e06dc5ae60 100644
--- a/api/pyproject.toml
+++ b/api/pyproject.toml
@@ -156,7 +156,7 @@ explicit = true
 flagsmith-private = { index = "flagsmith-pypi-production" }
 
 [tool.uv]
-required-version = ">=0.11.18"  # Ensure this matches the version in .pre-commit-config.yaml
+required-version = ">=0.13.7"  # Ensure this matches the version in .pre-commit-config.yaml
 exclude-newer = "1 week"
 exclude-newer-package = { flagsmith-private = false, flagsmith-common = false, flagsmith = false, flagsmith-flag-engine = false, flagsmith-sql-flag-engine = false, openfeature-provider-flagsmith = false }
 
diff --git a/docs/.nvmrc b/docs/.nvmrc
index 166aae1151bf..86456ddf0251 100644
--- a/docs/.nvmrc
+++ b/docs/.nvmrc
@@ -1 +1 @@
-v24.21.0
+v24.22.2
diff --git a/frontend/.nvmrc b/frontend/.nvmrc
index 166aae1151bf..86456ddf0251 100644
--- a/frontend/.nvmrc
+++ b/frontend/.nvmrc
@@ -1 +1 @@
-v24.21.0
+v24.22.2
diff --git a/mcp/Dockerfile b/mcp/Dockerfile
index bf2afd240337..a8cf6e2bac24 100644
--- a/mcp/Dockerfile
+++ b/mcp/Dockerfile
@@ -7,7 +7,7 @@ ARG CI_COMMIT_SHA=dev
 
 # Pin runtimes versions
 ARG PYTHON_VERSION=3.13
-ARG UV_VERSION=0.11.18
+ARG UV_VERSION=0.13.7
 
 FROM ghcr.io/astral-sh/uv:${UV_VERSION} AS uv
 FROM cgr.dev/chainguard/wolfi-base:latest AS wolfi-base
diff --git a/mcp/pyproject.toml b/mcp/pyproject.toml
index 06ba1871493e..81b5e4255ae0 100644
--- a/mcp/pyproject.toml
+++ b/mcp/pyproject.toml
@@ -37,7 +37,7 @@ requires = ["uv_build>=0.11.0,<0.12.0"]
 build-backend = "uv_build"
 
 [tool.uv]
-required-version = ">=0.11.18"  # Ensure this matches the version in .pre-commit-config.yaml
+required-version = ">=0.13.7"  # Ensure this matches the version in .pre-commit-config.yaml
 exclude-newer = "1 week"
 exclude-newer-package = { flagsmith-common = false }