Problem/Motivation

Node.js 20 reached end of life on 30 April 2026, and Drupal core main now requires "node": ">= 24.0" in core/package.json. Varbase still pins Node 20 in its engines and GitLab CI images.

Node 24 is the LTS line, latest v24.22.2, and it is one of the lines the November 2026 security releases will patch. Pinning the major picks those patches up with no further change.

Steps to reproduce

  1. On 10.1.x and 9.2.x, open package.json: the engines say "node": ">= 20.0". On 9.2.x the Yarn floor is ">= 4.6.0" with yarn@4.9.2.
  2. On 11.0.x, 10.1.x and 9.2.x, open .gitlab-ci.yml (and .gitlab-ci-local.yml on 11.0.x and 10.1.x): the Node jobs run image: node:20.

Proposed resolution

  • 11.0.x: .gitlab-ci.yml and .gitlab-ci-local.yml move to node:24. This branch has no root package.json.
  • 10.1.x: engines "node": ">= 24.0" and "yarn": ">= 4.18.1", packageManager yarn@4.18.1, CI images node:24.
  • 9.2.x: engines "node": ">= 24.0" and "yarn": ">= 4.18.1", packageManager yarn@4.18.1, CI images node:24.
  • 10.1.x and 9.2.x: a .yarnrc.yml in the Varbase standard (approvedGitRepositories, enableScripts, nodeLinker: node-modules, npmMinimalAgeGate: 0), which Yarn before 4.14.0 rejects, and yarn.lock re-resolved to the newest versions the existing ranges allow. No dependency range in package.json changes.

AI-Generated: Yes

Remaining tasks

  • ✅ File an issue
  • ✅ Addition/Change/Update/Fix
  • ✅ Testing to ensure no regression
  • ➖ Automated unit testing coverage
  • ➖ Automated functional testing coverage
  • ➖ UX/UI designer responsibilities
  • ➖ Readability
  • ➖ Accessibility
  • ➖ Performance
  • ➖ Security
  • ➖ Developer Documentation
  • ➖ User Guide Documentation
  • ❌ Reviewed by human
  • ❌ Code review by maintainers
  • ❌ Full testing and approval
  • ❌ Credit contributors
  • ❌ Review with the product owner
  • ❌ Release notes snippet
  • ❌ Release

User interface changes

  • N/A

API changes

  • N/A

Data model changes

  • N/A

Release notes snippet

  • Node.js 24 or newer is now required, in the engines and CI. Node 20 is end of life.

Issue fork varbase-3635511

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

Comments

rajab natshah created an issue. See original summary.

rajab natshah’s picture

Title: Update Node.js to >= 24.0 and Yarn to >= 4.9.3 for Varbase » Update Node.js to >= 24.0 and Yarn to 4.18.1 for Varbase
Issue summary: View changes
rajab natshah’s picture

Issue summary: View changes

rajab natshah’s picture

Issue summary: View changes
Status: Active » Needs review