Bumped all dependencies and modernised CI for Node 20+/22+/24+

Fixes #1824 — prebuild-install failing on Node 22.14.0 due to
N-API version string comparison bug in napi-build-utils < 2.0.0.

Dependencies:
- prebuild-install: ^7.1.1 -> ^7.1.3 (fixes N-API version detection)
- prebuild: 12.1.0 -> 13.0.1
- tar: ^6.1.11 -> ^7.5.10 (fixes 6 HIGH CVEs)
- node-addon-api: ^7.0.0 -> ^8.0.0
- node-gyp: 8.x -> 12.x (peer + optional)
- Added engines field: node >=20.17.0
- Added yarn.lock

CI:
- Test matrix: Node 20, 22, 24 (all current LTS lines)
- ubuntu-20.04 -> ubuntu-24.04, alpine3.15 -> alpine3.20
- Replaced macos-m1 self-hosted with macos-latest (now ARM64)
- Dropped win32-ia32 (Node 24 no longer ships 32-bit Windows)
- Removed pip install setuptools workaround
- Updated actions (checkout v6, setup-node v6, upload-artifact v7,
  setup-qemu-action v4, setup-buildx-action v4)
- Dockerfile: Node 18 -> 24, bullseye -> bookworm

Author: jonatansberg

.github/workflows/ci.yml

@@ -20,39 +20,37 @@ jobs:
       matrix:
         os:
           - macos-latest
-          - ubuntu-20.04
+          - ubuntu-24.04
           - windows-latest
         host:
           - x64
         target:
           - x64
         node:
-          - 18
+          - 20
+          - 22
+          - 24
         include:
-          - os: windows-latest
-            node: 18
-            host: x86
-            target: x86
-          - os: macos-m1
-            node: 18
+          - os: macos-latest
+            node: 20
             host: arm64
             target: arm64
-    name: ${{ matrix.os }} (host=${{ matrix.host }}, target=${{ matrix.target }})
+          - os: macos-latest
+            node: 22
+            host: arm64
+            target: arm64
+          - os: macos-latest
+            node: 24
+            host: arm64
+            target: arm64
+    name: ${{ matrix.os }} (node=${{ matrix.node }}, host=${{ matrix.host }}, target=${{ matrix.target }})
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node }}
           architecture: ${{ matrix.host }}
 
-      - name: Add yarn (self-hosted)
-        if: matrix.os == 'macos-m1'
-        run: npm install -g yarn
-
-      - name: Add setuptools for Python 3.12 (temp)
-        if: matrix.os != 'macos-m1'
-        run: pip install setuptools
-
       - name: Add msbuild to PATH
         uses: microsoft/setup-msbuild@v1.3
         if: contains(matrix.os, 'windows')
@@ -98,16 +96,16 @@ jobs:
         run: yarn test
 
       - name: Upload binaries to commit artifacts
-        uses: actions/upload-artifact@v4
-        if: matrix.node == 18
+        uses: actions/upload-artifact@v7
+        if: matrix.node == 24
         with:
-          name: prebuilt-binaries
+          name: prebuilt-binaries-${{ matrix.os }}-${{ matrix.target }}
           path: prebuilds/*
           retention-days: 7
 
       - name: Upload binaries to GitHub Release
         run: yarn upload --upload-all ${{ github.token }}
-        if: matrix.node == 18 && startsWith(github.ref, 'refs/tags/')
+        if: matrix.node == 24 && startsWith(github.ref, 'refs/tags/')
 
   build-qemu:
     runs-on: ubuntu-latest
@@ -116,26 +114,26 @@ jobs:
       fail-fast: false
       matrix:
         node:
-          - 18
+          - 24
         target:
           - linux/arm64
         variant:
-          - bullseye
-          - alpine3.15
+          - bookworm
+          - alpine3.20
         include:
           # musl x64 builds
           - target: linux/amd64
-            variant: alpine3.15
-            node: 18
+            variant: alpine3.20
+            node: 24
     name: ${{ matrix.variant }} (node=${{ matrix.node }}, target=${{ matrix.target }})
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+      - uses: actions/checkout@v6
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Build binaries and test
         run: |
@@ -152,13 +150,13 @@ jobs:
           docker cp $CONTAINER_ID:/usr/src/build/prebuilds/ ./prebuilds
 
       - name: Upload binaries to commit artifacts
-        uses: actions/upload-artifact@v4
-        if: matrix.node == 18
+        uses: actions/upload-artifact@v7
+        if: matrix.node == 24
         with:
-          name: prebuilt-binaries
+          name: prebuilt-binaries-${{ matrix.variant }}-${{ matrix.target }}
           path: prebuilds/*
           retention-days: 7
 
       - name: Upload binaries to GitHub Release
         run: yarn install --ignore-scripts && yarn upload --upload-all ${{ github.token }}
-        if: matrix.node == 18 && startsWith(github.ref, 'refs/tags/')
+        if: matrix.node == 24 && startsWith(github.ref, 'refs/tags/')

.gitignore

@@ -28,5 +28,4 @@ setup.sh
 /build-tmp-napi-v6
 *.tgz
 package-lock.json
-yarn.lock
 prebuilds

README.md

@@ -36,7 +36,7 @@ yarn add sqlite3
 
 ### Prebuilt binaries
 
-`sqlite3` v5+ was rewritten to use [Node-API](https://nodejs.org/api/n-api.html) so prebuilt binaries do not need to be built for specific Node versions. `sqlite3` currently builds for both Node-API v3 and v6. Check the [Node-API version matrix](https://nodejs.org/api/n-api.html#node-api-version-matrix) to ensure your Node version supports one of these. The prebuilt binaries should be supported on Node v10+.
+`sqlite3` v5+ was rewritten to use [Node-API](https://nodejs.org/api/n-api.html) so prebuilt binaries do not need to be built for specific Node versions. `sqlite3` currently builds for both Node-API v3 and v6. Check the [Node-API version matrix](https://nodejs.org/api/n-api.html#node-api-version-matrix) to ensure your Node version supports one of these. The prebuilt binaries should be supported on Node v20.17.0+.
 
 The module uses [`prebuild-install`](https://github.com/prebuild/prebuild-install) to download the prebuilt binary for your platform, if it exists. These binaries are hosted on GitHub Releases for `sqlite3` versions above 5.0.2, and they are hosted on S3 otherwise. The following targets are currently provided:
 
@@ -46,7 +46,6 @@ The module uses [`prebuild-install`](https://github.com/prebuild/prebuild-instal
 * `linux-x64`
 * `linuxmusl-arm64`
 * `linuxmusl-x64`
-* `win32-ia32`
 * `win32-x64`
 
 Unfortunately, [prebuild](https://github.com/prebuild/prebuild/issues/174) cannot differentiate between `armv6` and `armv7`, and instead uses `arm` as the `{arch}`. Until that is fixed, you will still need to install `sqlite3` from [source](#source-install).

package.json

@@ -45,25 +45,28 @@
   },
   "dependencies": {
     "bindings": "^1.5.0",
-    "node-addon-api": "^7.0.0",
-    "prebuild-install": "^7.1.1",
-    "tar": "^6.1.11"
+    "node-addon-api": "^8.0.0",
+    "prebuild-install": "^7.1.3",
+    "tar": "^7.5.10"
   },
   "devDependencies": {
     "eslint": "8.56.0",
     "mocha": "10.2.0",
-    "prebuild": "12.1.0"
+    "prebuild": "13.0.1"
   },
   "peerDependencies": {
-    "node-gyp": "8.x"
+    "node-gyp": "12.x"
   },
   "peerDependenciesMeta": {
     "node-gyp": {
       "optional": true
     }
   },
   "optionalDependencies": {
-    "node-gyp": "8.x"
+    "node-gyp": "12.x"
+  },
+  "engines": {
+    "node": ">=20.17.0"
   },
   "scripts": {
     "install": "prebuild-install -r napi || node-gyp rebuild",

tools/BinaryBuilder.Dockerfile

@@ -1,5 +1,5 @@
-ARG NODE_VERSION=18
-ARG VARIANT=bullseye
+ARG NODE_VERSION=24
+ARG VARIANT=bookworm
 
 FROM node:$NODE_VERSION-$VARIANT
 

tools/semver-check.js

@@ -2,7 +2,7 @@ const fs = require('fs');
 const path = require('path');
 const semver = require('semver');
 
-const supportedVersions = '10.12.0';
+const supportedVersions = '20.17.0';
 
 function checkEngines(modulePath) {
     const packageJsonPath = path.join(modulePath, 'package.json');