Skip to content

Conversation

tempoz
Copy link
Contributor

@tempoz tempoz commented Sep 30, 2025

Addresses https://github.com/buildbuddy-io/buildbuddy/security/dependabot/223

Also upgraded node since the newest docusaurus requires node 20.

@dan-stowell
Copy link
Contributor

@tempoz, what do you think about doing the Node upgrade separately? And going to the most recent stable version?

Copy link
Contributor

@sluongng sluongng left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I scanned through the change log in https://github.com/facebook/docusaurus/releases and did not notice anything breaking between 3.6.3 and 3.9.1.

👍 to Dan's suggestion: let's move the nodejs upgrade to a separate PR. Though I don't think we would be able to upgrade it to the very latest because we might need a rules_nodejs upgrade before that.

@tempoz
Copy link
Contributor Author

tempoz commented Oct 2, 2025

node 20 is the most recent LTS, which is why I picked it. Happy to separate it out, though.

@tempoz
Copy link
Contributor Author

tempoz commented Oct 2, 2025

I've separated out the node upgrade now.

@tempoz tempoz requested a review from sluongng October 2, 2025 16:08
Copy link
Contributor

@dan-stowell dan-stowell left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Once Node.js 20 is out in prod and stable, safe to merge this!
Just saw the commentary here on why Node.js 20, that's good reasoning, no need to chase Node.js 22 right this second.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants