Skip to content

deps: bump node from 24-slim to 26-slim in the docker-images group - #103

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/docker/docker-images-7d78ceeb5d
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/docker/docker-images-7d78ceeb5d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps the docker-images group with 1 update: node.

Updates node from 24-slim to 26-slim

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the docker-images group with 1 update: node.


Updates `node` from 24-slim to 26-slim

---
updated-dependencies:
- dependency-name: node
  dependency-version: 26-slim
  dependency-type: direct:production
  dependency-group: docker-images
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Dependency update (Renovate) docker labels Aug 31, 2026
@dependabot
dependabot Bot requested a review from thomas-lg as a code owner August 31, 2026 20:40
@github-actions github-actions Bot added dependencies Dependency update (Renovate) and removed dependencies Dependency update (Renovate) labels Aug 31, 2026
@thomas-lg

Copy link
Copy Markdown
Member

Closing — green, but it re-introduces exactly the drift #92 removed.

CI passes because npm's engines check is only a warning, and the frontend job still runs node 24 — only the Dockerfile would move to 26. That means the runtime that builds the bundle you ship would differ by a major from the one CI tests with and the one the devcontainer develops on. Keeping those three in lockstep is the whole point of #92.

It is also outside the range this project declares:

"engines": { "node": "^20.19.0 || ^22.12.0 || ^24.0.0" }

and node 26 is still Current, not LTS — even-numbered majors only enter LTS in the October of their release year.

Node here is effectively pinned by Angular's supported range, so it should move deliberately alongside an Angular upgrade (all four places at once), not weekly on its own. Adding an ignore for node majors to match the typescript rule; minor/patch digest updates keep flowing.

Also correcting the Dockerfile comment, which claimed odd-numbered majors are the thing being skipped — 26 is even, so that reasoning was incomplete. The actual rule is the engines range plus LTS status.

@thomas-lg thomas-lg closed this Aug 31, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@thomas-lg
thomas-lg deleted the dependabot/docker/docker-images-7d78ceeb5d branch August 31, 2026 20:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency update (Renovate) docker

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant