Repository navigation
Move to Node 26 #225
Description
Summary
The macOS app's DMG packaging runs on Node 22, which loses security fixes in April 2027.
Moving to Node 26 puts it on the current LTS line, one set of security fixes to track across every repo.
Current pins
- The bundle and manual release jobs set Node 22 to package the DMG.
Renovate has #198 open.
The Node 26 traps checklist on datum-cloud/infra#8215 lists the known breakages and the safety test.
Acceptance criteria
- The repo builds, tests and ships on Node 26, or this issue is closed as declined with a reason
Part of datum-cloud/infra#8215.
Activity
ecv commentedon Nov 1, 2026
Current Node pins on the default branch, read 2026-10-31:
.github/workflows/bundle.yml:node-version: "22".github/workflows/manual-release.yml:node-version: "22"ecv commentedon Nov 1, 2026
Checked #198, which moves both pins to Node 26. Its base is current main and every check is green.
Node only runs on macOS here, to install
appdmgand lay out the DMG. The greenbundle (ubuntu-latest)check never reaches that step, so it was run on an arm64 Mac:npm ciunder Node 26.13.0 builds both native addons,macos-aliasandfs-xattr, and adds 104 packages with 0 vulnerabilities, the same as Node 24.appdmgwith the repo'sappdmg.jsonand a stubDatum.appruns all steps and writes the image. Signing was skipped.The pull request is approved and ready to merge.
ecv commentedon Nov 1, 2026
Node 26 is on main since #198, merged 1 Nov at 12:44Z. Main's checks are green at ecd1cbc.