Skip to content

Dependencies: Update dotnet sdk and node development dependency to latest secure version of current major (13)#20729

Merged
AndyButland merged 1 commit intov13/devfrom
v13/task/update-dev-framework-dependencies
Nov 5, 2025
Merged

Dependencies: Update dotnet sdk and node development dependency to latest secure version of current major (13)#20729
AndyButland merged 1 commit intov13/devfrom
v13/task/update-dev-framework-dependencies

Conversation

@AndyButland
Copy link
Contributor

@AndyButland AndyButland commented Nov 4, 2025

Description

Following recent vulnerability reports in .NET SDKs and nodejs, this updates our development dependencies to the latest patch versions of the current major for Umbraco 13.

Note that this doesn't affect anyone running Umbraco. They will need to ensure their hosting environments are updated, and this change won't force it. But it ensures anyone contributing to Umbraco and building from source either locally or via a build agent will need to have a secure version of these dependencies available.

Testing

Make sure you are running the necessary versions of dotnet (8.0.415) and node (>=20.19.4) and ensure you can still build the back-end and front-end of Umbraco.

Copilot AI review requested due to automatic review settings November 4, 2025 11:14
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the minimum required versions for Node.js and .NET SDK to align with newer releases. The .NET SDK version is updated from 8.0.100 to 8.0.415, and the Node.js requirement is bumped from >=20.9 to >=20.19.4.

Key Changes

  • Updated .NET SDK requirement in global.json from 8.0.100 to 8.0.415
  • Updated Node.js engine requirement in package.json from >=20.9 to >=20.19.4

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
global.json Updates .NET SDK version to 8.0.415
src/Umbraco.Web.UI.Client/package.json Updates Node.js engine requirement to >=20.19.4

@AndyButland AndyButland merged commit 5d6f4f2 into v13/dev Nov 5, 2025
26 checks passed
@AndyButland AndyButland deleted the v13/task/update-dev-framework-dependencies branch November 5, 2025 20:24
AndyButland added a commit that referenced this pull request Nov 5, 2025
…test secure version of current major (13) (#20729)

Update dotnet sdk and node development dependency to latest secure version of current major.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant