[FOLIO-2553] Update minimum node versions to at least 10.*.* Created: 04/Apr/20  Updated: 05/Jan/21  Resolved: 18/Dec/20

Status: Closed
Project: FOLIO
Components: None
Affects versions: None
Fix versions: None

Type: Task Priority: P3
Reporter: Zak Burke Assignee: Unassigned
Resolution: Duplicate Votes: 0
Labels: security
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original estimate: Not Specified

Issue links:
Defines
is defined by STRIPES-719 Node v10 end-of-life 2021-04-30 Closed
is defined by STRIPES-670 Update package.json's engines.node to... Closed
Duplicate
duplicates STCOR-497 Node.js TLS, HTTP and OpenSSL securit... Closed
Sprint:
Development Team: Stripes Force

 Description   

Update minimum supported node version to at least >=10.19.0, preferably >=12.16.1.

Many of our packages misleadingly claim compatibility with older versions that we are not, in fact, compatible with due to higher/newer compatibility restrictions in transitive dependencies. Besides which, those older versions have reached EOL and are no longer receiving security updates.

./stripes-cli/package.json:    "node": ">=8.9.0"
./stripes-components/package.json:    "node": ">=6.0.0"
./stripes-connect/package.json:    "node": ">=6.0.0"
./stripes-core/package.json:    "node": ">=8.9.4"
./stripes-final-form/package.json:    "node": ">=6.0.0"
./stripes-form/package.json:    "node": ">=6.0.0"
./stripes-smart-components/package.json:    "node": ">=6.0.0"
./stripes-util/package.json:    "node": ">=6.0.0"
./stripes/package.json:    "node": ">=8.9.0"
./ui-checkin/package.json:    "node": ">=6.0.0"
./ui-checkout/package.json:    "node": ">=6.0.0"
./ui-circulation/package.json:    "node": ">=6.0.0"
./ui-developer/package.json:    "node": ">=6.0.0"
./ui-inventory/package.json:    "node": ">=6.0.0"
./ui-requests/package.json:    "node": ">=6.0.0"
./ui-tenant-settings/package.json:    "node": ">=6.0.0"
./ui-users/package.json:    "node": ">=6.0.0"


 Comments   
Comment by Julian Ladisch [ 16/Dec/20 ]

Assigning to Stripes Force to start with the stripes packages.

Comment by Jason Skomorowski [ 05/Jan/21 ]

Do we require an "engines" section in most of these files at all? Do any of them other than stripes-core and stripes-cli even have code that's interpreted by node or is it entirely processed through webpack and babel for inclusion in a bundle to be run in browsers and never passes through node beyond that?

Generated at Thu Feb 08 23:21:30 UTC 2024 using Jira 1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d.