chore(ci): use Node.js 22 in CI

Anemy · Anemy · commit 8d0acb1e3181 · 2025-05-15T15:39:27.000-04:00
diff --git a/.evergreen/connectivity-tests/Dockerfile b/.evergreen/connectivity-tests/Dockerfile
@@ -1,5 +1,5 @@
 # "bullseye" is the debian distribution that ubuntu:20.04 is based on
-ARG NODE_JS_VERSION=20
+ARG NODE_JS_VERSION=22
 FROM node:${NODE_JS_VERSION}-bullseye
 
 COPY .evergreen/connectivity-tests/krb5.conf /etc/krb5.conf
diff --git a/.evergreen/functions.yml b/.evergreen/functions.yml
@@ -40,7 +40,7 @@ variables:
     EVERGREEN_VERSION_ID: ${version_id}
     EVERGREEN_WORKDIR: ${workdir}
     EVERGREEN_CREATED_AT: ${created_at}
-    NODE_JS_VERSION: '20.16.0'
+    NODE_JS_VERSION: '22.11.0'
     NPM_VERSION: '10.2.4'
     # secrets
     HADRON_METRICS_INTERCOM_APP_ID: ${metrics_intercom_app_id}
diff --git a/.github/workflows/authors-and-third-party-notices.yaml b/.github/workflows/authors-and-third-party-notices.yaml
@@ -40,7 +40,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 20.16.0
+          node-version: 22.11.0
           cache: 'npm'
 
       - name: Install npm@10.2.4
diff --git a/.github/workflows/bump-packages.yaml b/.github/workflows/bump-packages.yaml
@@ -31,7 +31,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 20.16.0
+          node-version: 22.11.0
           cache: 'npm'
 
       - name: Install npm@10.2.4
diff --git a/.github/workflows/publish-compass.yaml b/.github/workflows/publish-compass.yaml
@@ -5,9 +5,9 @@ on:
   workflow_dispatch:
     inputs:
       dryRun:
-        description: "Run publish in dry-run mode (WARN: think twice when changing this value, this will override currently published manifest in download center!)"
+        description: 'Run publish in dry-run mode (WARN: think twice when changing this value, this will override currently published manifest in download center!)'
         required: true
-        default: "true"
+        default: 'true'
   release:
     types: [published]
 
@@ -25,8 +25,8 @@ jobs:
       - name: Setup Node.js Environment
         uses: actions/setup-node@v4
         with:
-          node-version: 20.16.0
-          cache: "npm"
+          node-version: 22.11.0
+          cache: 'npm'
 
       - name: Install npm@10.2.4
         run: |
@@ -39,7 +39,7 @@ jobs:
 
       - name: Upload updated download center manifest
         env:
-          DEBUG: "hadron*,mongo*,compass*"
+          DEBUG: 'hadron*,mongo*,compass*'
           DOWNLOAD_CENTER_AWS_ACCESS_KEY_ID: ${{ secrets.DOWNLOAD_CENTER_AWS_ACCESS_KEY_ID }}
           DOWNLOAD_CENTER_AWS_SECRET_ACCESS_KEY: ${{ secrets.DOWNLOAD_CENTER_AWS_SECRET_ACCESS_KEY }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/publish-packages.yaml b/.github/workflows/publish-packages.yaml
@@ -27,17 +27,17 @@ jobs:
           ref: ${{ github.head_ref }}
 
           # this is important so git log has the whole history
-          fetch-depth: "0"
+          fetch-depth: '0'
 
       - name: Setup git
         run: |
           git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"
           git config --local user.name "github-actions[bot]"
 
-      - name: "Use Node.js 20"
+      - name: 'Use Node.js 20'
         uses: actions/setup-node@v4
         with:
-          node-version: 20.16.0
+          node-version: 22.11.0
 
       - name: Install npm@10.2.4
         run: npm install -g npm@10.2.4
@@ -47,7 +47,7 @@ jobs:
           npm run bootstrap-ci
         shell: bash
 
-      - name: "Publish what is not already in NPM"
+      - name: 'Publish what is not already in NPM'
         env:
           NPM_TOKEN: ${{ secrets.DEVTOOLSBOT_NPM_TOKEN }}
         run: |
@@ -57,7 +57,7 @@ jobs:
           git update-index --assume-unchanged .npmrc
           npm run publish-packages
 
-      - name: "Publish tags"
+      - name: 'Publish tags'
         run: |
           npx lerna list --json | \
             jq -r '.[] | .name + "@" + .version' | \
diff --git a/.github/workflows/start-beta.yml b/.github/workflows/start-beta.yml
@@ -5,14 +5,14 @@ on:
     inputs:
       mergeBranch:
         description: 'mergeBranch (optional, default="main"): the branch to merge from, useful to perform quick fixes outside of main.'
-        default: "main"
+        default: 'main'
         required: false
       overrideNextGa:
-        description: "overrideNextGa (optional): set this param if you want to override the nextGa version that is fetched from jira versions, and use a different one."
+        description: 'overrideNextGa (optional): set this param if you want to override the nextGa version that is fetched from jira versions, and use a different one.'
         required: false
   schedule:
     # Each Monday at 5 AM UTC
-    - cron: "0 5 * * 1"
+    - cron: '0 5 * * 1'
 
 permissions:
   contents: write # To create the new branch and push it
@@ -33,8 +33,8 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 20.16.0
-          cache: "npm"
+          node-version: 22.11.0
+          cache: 'npm'
 
       - name: Install npm@10.2.4
         run: |
diff --git a/.github/workflows/start-ga.yaml b/.github/workflows/start-ga.yaml
@@ -7,11 +7,11 @@ on:
   workflow_dispatch:
     inputs:
       releaseTicket:
-        description: "releaseTicket (required): it must have a fixVersion which will be used as release version."
+        description: 'releaseTicket (required): it must have a fixVersion which will be used as release version.'
         required: true
       mergeBranch:
         description: 'mergeBranch (optional, default="beta-releases"): the branch to merge from, useful to perform quick fixes or to skip beta.'
-        default: "beta-releases"
+        default: 'beta-releases'
         required: false
 
 permissions:
@@ -33,8 +33,8 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 20.16.0
-          cache: "npm"
+          node-version: 22.11.0
+          cache: 'npm'
 
       - name: Install npm@10.2.4
         run: |
diff --git a/.github/workflows/test-installers.yml b/.github/workflows/test-installers.yml
@@ -132,7 +132,6 @@ jobs:
           - hadron-distribution: compass-readonly
             test: auto-update-to
 
-
           # TODO(COMPASS-9067): auto-update-from does not work for windows. Not
           # even manually. It downloads the releases file, the toast appears
           # that says it is downloading the update, the log appears that says
@@ -177,8 +176,8 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 20
-          cache: "npm"
+          node-version: 22
+          cache: 'npm'
 
       - name: Run post-checkout command
         if: matrix.post-checkout-command
@@ -231,8 +230,8 @@ jobs:
           GITHUB_TOKEN: ${{ github.token }}
           # mongodb 8.0.6 requires macOS 14+. Just use an older version for now
           # so it will run on GitHub's mac runners
-          MONGODB_VERSION: "8.0.5"
-          MONGODB_RUNNER_VERSION: "8.0.5"
+          MONGODB_VERSION: '8.0.5'
+          MONGODB_RUNNER_VERSION: '8.0.5'
         working-directory: packages/compass-smoke-tests
         # Using --skipUninstalling --skipCleanup because the runners are ephemeral
         run: npm start -- --package ${{ matrix.package }} --tests ${{ matrix.test }} --skipUninstall --skipCleanup
diff --git a/.github/workflows/update-electron.yaml b/.github/workflows/update-electron.yaml
@@ -4,7 +4,7 @@ name: Update electron
 on:
   workflow_dispatch:
   schedule:
-    - cron: "0 0 * * *"
+    - cron: '0 0 * * *'
 
 permissions:
   contents: none # We use the github app token to push the changes
@@ -29,8 +29,8 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 20.16.0
-          cache: "npm"
+          node-version: 22.11.0
+          cache: 'npm'
 
       - name: Install npm@10.2.4
         run: |
@@ -46,10 +46,10 @@ jobs:
         uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # 7.0.5
         with:
           token: ${{ steps.app-token.outputs.token }}
-          commit-message: "chore(deps): update electron"
+          commit-message: 'chore(deps): update electron'
           branch: ci/update-electron
-          title: "chore(deps): update electron"
+          title: 'chore(deps): update electron'
           labels: no-title-validation
-          author: "${{ steps.app-token.outputs.app-slug}}[bot] <${{ steps.app-token.outputs.app-email }}>"
+          author: '${{ steps.app-token.outputs.app-slug}}[bot] <${{ steps.app-token.outputs.app-email }}>'
           body: |
             - Update electron
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -1,9 +1,8 @@
 # Contributing
 
-
 ## Getting Started
 
-You'll need node `^20` and npm `^10` installed on your machine to work with the repository locally.
+You'll need node `^22` and npm `^10` installed on your machine to work with the repository locally.
 After your environment is ready, navigate to the repository and run `npm run bootstrap`, this will install dependencies and will compile all packages.
 
 After bootstrap is finished, you should be able to run `npm run start` and see Compass application running locally. Alternatively you can start a web version of the app by running `npm run start-web`.
@@ -118,6 +117,7 @@ This will do all the initial workspace bootstrapping for you, ensuring that your
 ## Using Github Actions
 
 Github actions offers an easy way to create workflows that run various automated checks. While our main CI system is Evergreen, we have a number of auxiliary workflows configured to run using github actions. While adding new workflows or updating existing ones, it's important that we follow [the security hardening guidelines](https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions) by Github. Those can change over time, so be sure to periodically review them to make sure we're not using insecure workflows. Some notable highlights to pay special attention to are:
+
 1. Avoid using tag or branch refs for untrusted 3rd party actions. Those can easily be recreated by malicious actors and introduce supply chain attacks. As a rule of thumb, first party actions are considered actions by MongoDB, Github, Microsoft, or the primary maintainer of a particular ecosystem - e.g. Amazon for AWS. When using a 3rd party action, always use the full git commit sha as the ref to checkout.
 2. Be extra vigilant when using user-supplied data, such as branch name or PR title in scripts as that opens up the possibility of script injection attacks. Instead, prefer to use js actions to achieve the same result or sanitize the input before using it in a script.
 3. Never commit secrets in the workflow file directly - instead use github secrets to store them securely at the repo/org level.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -77,7 +77,7 @@
     "node-gyp": "^10.2.0"
   },
   "engines": {
-    "node": ">=20.15.0",
+    "node": ">=22.11.0",
     "npm": ">=10.2.4"
   },
   "bugs": {
