From 25cd7ff301662362a52596931bfb4ed4a162f911 Mon Sep 17 00:00:00 2001
From: Peter Dave Hello <hsu@peterdavehello.org>
Date: Sun, 25 May 2025 19:01:40 +0800
Subject: [PATCH] Upgrade Node.js to v20.19.2 for security enhancements

This commit upgrades Node.js version from v20.18.1 to v20.19.2.

This version incorporates security patches that address known
vulnerabilities, improving the overall security posture.
---
 .github/workflows/changeset-release.yml   | 2 +-
 .github/workflows/code-qa.yml             | 2 +-
 .github/workflows/marketplace-publish.yml | 2 +-
 .github/workflows/nightly-publish.yml     | 2 +-
 .github/workflows/update-contributors.yml | 2 +-
 .nvmrc                                    | 2 +-
 evals/scripts/setup.sh                    | 6 +++---
 7 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/changeset-release.yml b/.github/workflows/changeset-release.yml
index 1ec60d4bad..adbc5dc966 100644
--- a/.github/workflows/changeset-release.yml
+++ b/.github/workflows/changeset-release.yml
@@ -9,7 +9,7 @@ on:
 env:
   REPO_PATH: ${{ github.repository }}
   GIT_REF: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || 'main' }}
-  NODE_VERSION: 20.18.1
+  NODE_VERSION: 20.19.2
   PNPM_VERSION: 10.8.1
 
 jobs:
diff --git a/.github/workflows/code-qa.yml b/.github/workflows/code-qa.yml
index 1ca5d8151a..ac378b65cd 100644
--- a/.github/workflows/code-qa.yml
+++ b/.github/workflows/code-qa.yml
@@ -9,7 +9,7 @@ on:
     branches: [main]
 
 env:
-  NODE_VERSION: 20.18.1
+  NODE_VERSION: 20.19.2
   PNPM_VERSION: 10.8.1
 
 jobs:
diff --git a/.github/workflows/marketplace-publish.yml b/.github/workflows/marketplace-publish.yml
index bea1ecfa6d..0719029e9d 100644
--- a/.github/workflows/marketplace-publish.yml
+++ b/.github/workflows/marketplace-publish.yml
@@ -7,7 +7,7 @@ on:
 
 env:
   GIT_REF: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || 'main' }}
-  NODE_VERSION: 20.18.1
+  NODE_VERSION: 20.19.2
   PNPM_VERSION: 10.8.1
 
 jobs:
diff --git a/.github/workflows/nightly-publish.yml b/.github/workflows/nightly-publish.yml
index 14bb0212b1..b7710f29d0 100644
--- a/.github/workflows/nightly-publish.yml
+++ b/.github/workflows/nightly-publish.yml
@@ -9,7 +9,7 @@ on:
   workflow_dispatch: # Allows manual triggering.
 
 env:
-  NODE_VERSION: 20.18.1
+  NODE_VERSION: 20.19.2
   PNPM_VERSION: 10.8.1
 
 jobs:
diff --git a/.github/workflows/update-contributors.yml b/.github/workflows/update-contributors.yml
index 2b74f977b3..d4e9768fb7 100644
--- a/.github/workflows/update-contributors.yml
+++ b/.github/workflows/update-contributors.yml
@@ -7,7 +7,7 @@ on:
   workflow_dispatch:  # Allows manual triggering
 
 env:
-  NODE_VERSION: 20.18.1
+  NODE_VERSION: 20.19.2
   PNPM_VERSION: 10.8.1
 
 jobs:
diff --git a/.nvmrc b/.nvmrc
index ba331903d1..1d898f1fe5 100644
--- a/.nvmrc
+++ b/.nvmrc
@@ -1 +1 @@
-20.19.2
+v20.19.2
diff --git a/evals/scripts/setup.sh b/evals/scripts/setup.sh
index 8b031bddb5..e451d94636 100755
--- a/evals/scripts/setup.sh
+++ b/evals/scripts/setup.sh
@@ -176,8 +176,8 @@ for i in "${!options[@]}"; do
   case "${plugin}" in
   "nodejs")
     if ! command -v node &>/dev/null; then
-      asdf install nodejs 20.18.1 || exit 1
-      asdf set nodejs 20.18.1 || exit 1
+      asdf install nodejs 20.19.2 || exit 1
+      asdf set nodejs 20.19.2 || exit 1
       NODE_VERSION=$(node --version)
       echo "✅ Node.js is installed ($NODE_VERSION)"
     else
@@ -185,7 +185,7 @@ for i in "${!options[@]}"; do
       echo "✅ Node.js is installed ($NODE_VERSION)"
     fi
 
-    if [[ $(node --version) != "v20.18.1" ]]; then
+    if [[ $(node --version) != "v20.19.2" ]]; then
       NODE_VERSION=$(node --version)
       echo "🚨 You have the wrong version of node installed ($NODE_VERSION)."
       echo "💡 If you are using nvm then run 'nvm install' to install the version specified by the repo's .nvmrc."