Skip to content

Drop Node 20 - #1670

Merged
bdehamer merged 5 commits into
mainfrom
bdehamer/v5
Jun 1, 2026
Merged

Drop Node 20#1670
bdehamer merged 5 commits into
mainfrom
bdehamer/v5

Conversation

@bdehamer

Copy link
Copy Markdown
Collaborator

Summary

Bumps the Node engine range to ^22.22.2 || ^24.15.0 || >=26.0.0 and updates dependencies whose floors moved with it. In support of inclusion in the next major version of the npm CLI.

  • Drop support for Node 20
  • Bump make-fetch-happen from 15.x to 16.x (@sigstore/sign, @sigstore/oci)
  • Bump proc-log from 6.x to 7.x (@sigstore/sign, @sigstore/oci)

Closes: #1644

@bdehamer
bdehamer requested a review from a team as a code owner May 26, 2026 21:58
@changeset-bot

changeset-bot Bot commented May 26, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 6a5d7f7

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 12 packages
Name Type
@sigstore/mock-server Minor
@sigstore/conformance Minor
@sigstore/mock Minor
@sigstore/cli Minor
@sigstore/oci Minor
@sigstore/rekor-types Major
@sigstore/bundle Major
sigstore Major
@sigstore/verify Major
@sigstore/core Major
@sigstore/sign Major
@sigstore/tuf Major

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

Michael Smith and others added 4 commits May 26, 2026 15:07
BREAKING CHANGE: drop support for Node 20

Signed-off-by: Michael Smith <owlstronaut@github.com>
Signed-off-by: Michael Smith <owlstronaut@github.com>
Signed-off-by: Michael Smith <owlstronaut@github.com>
make-fetch-happen@16 pulls in @npmcli/agent@5, which depends on
ESM-only http-proxy-agent@9, https-proxy-agent@9, socks-proxy-agent@10,
and agent-base@7. Jest's CommonJS runtime can't require() them, so any
test importing make-fetch-happen failed with 'Cannot use import
statement outside a module'.

Extend @swc/jest to .js files and add a transformIgnorePatterns
override so those packages are transformed instead of skipped under
node_modules/.

Signed-off-by: Brian DeHamer <bdehamer@github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@bdehamer bdehamer changed the title Bdehamer/v5 Drop Node 20 May 26, 2026
@bdehamer
bdehamer marked this pull request as draft May 26, 2026 22:11
Signed-off-by: Brian DeHamer <bdehamer@github.com>
@bdehamer
bdehamer marked this pull request as ready for review June 1, 2026 20:41

@ejahnGithub ejahnGithub left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@bdehamer
bdehamer merged commit 46c00b3 into main Jun 1, 2026
41 of 42 checks passed
@bdehamer
bdehamer deleted the bdehamer/v5 branch June 1, 2026 20:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bump Node engines + deps for next npm CLI major

2 participants