Skip to content

[BY-3800] Remove stale Volta Node 16 pin - #14

Merged
tomlewis0 merged 1 commit into
masterfrom
feature/by-3800
Oct 22, 2026
Merged

tomlewis0 merged 1 commit into
masterfrom
feature/by-3800

Conversation

@tomlewis0

Copy link
Copy Markdown
Contributor

Linear: https://linear.app/beyonk/issue/BY-3800/bump-all-services-to-node-24221-for-october-nodejs-cves

What

Removes the volta.node: 16.14.2 pin from package.json. Node 16 has been end of life since 2023.

Why this is all that's needed

  • The package is still in use (dashboard/apps/dashboard, common/apps/integrations) and 2.3.2 was published today, so it shouldn't be archived
  • It's browser code, so the October Node.js CVEs don't apply to what it ships. Node is only used for local dev and publishing
  • engines and devEngines are already 24, which resolves to the latest 24.x. The Volta pin only took effect for developers using Volta

No release needed: nothing published changes, and publishing only runs on v* tags.

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@tomlewis0
tomlewis0 merged commit d162443 into master Oct 22, 2026
2 checks passed
@tomlewis0
tomlewis0 deleted the feature/by-3800 branch October 22, 2026 10:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant