Merge pull request #7006 from taskcluster/matt-boris/node20.13.0go1.22.3

build(deps): upgrade to node 20.13.0 and go1.22.3

.nvmrc

@@ -1 +1 @@
-20.12.2
+20.13.0

Dockerfile

@@ -1,7 +1,7 @@
 ##
 # Build /app
 
-FROM node:20.12.2 AS build
+FROM node:20.13.0 AS build
 
 RUN mkdir -p /base/cache
 ENV YARN_CACHE_FOLDER=/base/cache
@@ -63,7 +63,7 @@ RUN /bin/bash -c "\
 ##
 # build the final image
 
-FROM node:20.12.2-alpine AS image
+FROM node:20.13.0-alpine AS image
 RUN apk --no-cache add --update nginx bash
 COPY --from=build /base/app /app
 ENV HOME=/app

changelog/Kl-98SWYQ_-rGc8NdXWCDQ.md

@@ -0,0 +1,4 @@
+audience: general
+level: patch
+---
+Upgrades to node v20.13.0 and go1.22.3 (SECURITY release).

clients/client-test/package.json

@@ -28,7 +28,7 @@
     "taskcluster-lib-validate": "link:../libraries/validate"
   },
   "engines": {
-    "node": "20.12.2"
+    "node": "20.13.0"
   },
   "type": "module"
 }

clients/client/package.json

@@ -23,7 +23,7 @@
     "nock": "^13.0.0"
   },
   "engines": {
-    "node": "20.12.2"
+    "node": "20.13.0"
   },
   "type": "module",
   "files": [

cloudbuild.yaml

@@ -103,7 +103,7 @@ options:
   env:
     - USE_GKE_GCLOUD_AUTH_PLUGIN=True
 substitutions:
-  _NODE_VERSION: 20.12.2
+  _NODE_VERSION: 20.13.0
   _VERSION: '{"version":"${BRANCH_NAME}_${SHORT_SHA}","commit":"${SHORT_SHA}","source":"https://github.com/taskcluster/taskcluster","build":"${BUILD_ID}"}'
   _IMAGE_NAME: gcr.io/${PROJECT_ID}/${PROJECT_ID}/${BRANCH_NAME}
   _DEPLOY_IMAGE_NAME: gcr.io/${PROJECT_ID}/${PROJECT_ID}/${BRANCH_NAME}-deploy

dev-docs/development-process.md

@@ -10,7 +10,7 @@ You will probably be working on only one of these pieces, so read carefully belo
 ### Node
 
 <!-- the next line is automatically edited; do not change -->
-You will need Node version 20.12.2 installed.
+You will need Node version 20.13.0 installed.
 We recommend using https://github.com/nvm-sh/nvm to support installing multiple Node versions.
 
 We use `yarn` to run most development commands, so [install that as well](https://classic.yarnpkg.com/en/docs/install/#debian-stable).

netlify.toml

@@ -9,7 +9,7 @@
 
 [build.environment]
   YARN_FLAGS = "--immutable"
-  NODE_VERSION = "20.12.2"
+  NODE_VERSION = "20.13.0"
   APPLICATION_NAME = "Taskcluster"
   GRAPHQL_ENDPOINT = "https://community-tc.services.mozilla.com/graphql"
   GRAPHQL_SUBSCRIPTION_ENDPOINT = "https://community-tc.services.mozilla.com/subscription"

package.json

@@ -5,7 +5,7 @@
   "engine-strict": true,
   "type": "module",
   "engines": {
-    "node": "20.12.2"
+    "node": "20.13.0"
   },
   "packageManager": "yarn@4.1.1",
   "workspaces": [

ui/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:20.12.2
+FROM node:20.13.0
 
 WORKDIR /app/ui
 COPY yarn.lock package.json ./

ui/package.json

@@ -4,7 +4,7 @@
   "private": true,
   "license": "MPL-2.0",
   "engines": {
-    "node": "20.12.2"
+    "node": "20.13.0"
   },
   "packageManager": "yarn@4.1.1",
   "scripts": {

workers/docker-worker/package.json

@@ -4,7 +4,7 @@
   "version": "64.2.8",
   "engine-strict": true,
   "engines": {
-    "node": "20.12.2"
+    "node": "20.13.0"
   },
   "packageManager": "yarn@4.1.1",
   "description": "Docker task host for linux.",

workers/docker-worker/test/images/test/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:20.12.2
+FROM node:20.13.0
 
 # Top level bins to override system defaults
 RUN npm install -g babel-cli babel-preset-es2015 babel-polyfill