Run on Node 22 (Node.js Oct 2026 security release) #27

Merged

backmeupplz merged 3 commits from node-22-security into master

2026-10-22 02:59:42 +00:00

backmeupplz commented

2026-10-21 14:57:27 +00:00

(Migrated from github.com)

Why

Node 16 is EOL and does not get the Node.js Oct 21 2026 security release. This moves the bot to Node 22 (fixed line 22.23.4).

Change

.nvmrc: v16.17.0 -> v22 (Nixpacks picks nodejs_22)
nixpacks.toml: pin [phases.setup] nixpkgsArchive to nixos-26.05 rev cd4ea8d57de16f4810bc5f14207bac45fbf19f67 (nodejs_22 22.23.3). It will be swapped for a rev carrying 22.23.4 once that reaches the channel, before merge/deploy.
Builder stays Nixpacks; no dependency changes.

Smoke test

nixpacks build . locally, then ran the start command (node dist/app.js) in the image for 20 s with a fake bot token and a local mongo:7:

v22.23.3
Bot is up and running
TelegramError: 401: Unauthorized
  on: { method: 'getMe', payload: {} }
Node.js v22.23.3

Loads all modules; exits only because the fake token fails getMe.

🤖 Generated with Claude Code

## Why Node 16 is EOL and does not get the Node.js Oct 21 2026 security release. This moves the bot to Node 22 (fixed line 22.23.4). ## Change - `.nvmrc`: `v16.17.0` -> `v22` (Nixpacks picks `nodejs_22`) - `nixpacks.toml`: pin `[phases.setup] nixpkgsArchive` to nixos-26.05 rev `cd4ea8d57de16f4810bc5f14207bac45fbf19f67` (nodejs_22 22.23.3). It will be swapped for a rev carrying 22.23.4 once that reaches the channel, before merge/deploy. - Builder stays Nixpacks; no dependency changes. ## Smoke test `nixpacks build .` locally, then ran the start command (`node dist/app.js`) in the image for 20 s with a fake bot token and a local `mongo:7`: ``` v22.23.3 Bot is up and running TelegramError: 401: Unauthorized on: { method: 'getMe', payload: {} } Node.js v22.23.3 ``` Loads all modules; exits only because the fake token fails `getMe`. 🤖 Generated with [Claude Code](https://claude.com/claude-code)