Skip to content

Upgrade all dependencies from Node 16 era to current versions#24

Draft
Copilot wants to merge 3 commits into
mainfrom
copilot/upgrade-dependencies-and-fix-tests
Draft

Upgrade all dependencies from Node 16 era to current versions#24
Copilot wants to merge 3 commits into
mainfrom
copilot/upgrade-dependencies-and-fix-tests

Conversation

Copy link
Copy Markdown

Copilot AI commented Apr 15, 2026

App was pinned to Node 16 with severely outdated dependencies (24 vulnerabilities, multiple deprecated packages).

Node.js

  • Engine 16>=20, .nvmrc22

OpenTelemetry (breaking changes)

  • Replaced deprecated @opentelemetry/exporter-jaeger@opentelemetry/exporter-trace-otlp-http
  • @opentelemetry/resources v1→v2: new Resource({...})resourceFromAttributes({...})
  • @opentelemetry/semantic-conventions: SemanticResourceAttributes.SERVICE_NAMEATTR_SERVICE_NAME
  • @opentelemetry/sdk-node 0.26.00.214.0, removed separately-pinned sdk-trace-base

Promster (breaking changes)

  • @promster/express v7→v15: getSummary/getContentType moved to @promster/metrics

Other dependency bumps

  • pino-http v5→v10, pino-pretty v7→v13
  • prom-client v14→v15, express v4.17→v4.22, nodemon v2→v3

Infrastructure

  • Dockerfile: distroless images nodejs:${v}nodejs${v}-debian12 (new naming convention)
  • Docker scripts: OTEL_EXPORTER_JAEGER_ENDPOINTOTEL_EXPORTER_OTLP_ENDPOINT
  • Added npm test script using Node.js built-in test runner with 5 integration tests

Result

0 vulnerabilities, all tests passing.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • metadata.google.internal
    • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node node src/index.js (dns block)
  • www.npmjs.com
    • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Copilot AI linked an issue Apr 15, 2026 that may be closed by this pull request
Copilot AI and others added 2 commits April 15, 2026 15:20
Agent-Logs-Url: https://github.com/Olivr/app-node-js/sessions/22020782-a31d-4c70-b0db-3ee206a23864

Co-authored-by: politician <3155568+politician@users.noreply.github.com>
- Update Node.js engine from 16 to >=20, .nvmrc to 22
- Replace deprecated @opentelemetry/exporter-jaeger with @opentelemetry/exporter-trace-otlp-http
- Update @opentelemetry/resources to v2 (Resource -> resourceFromAttributes)
- Update @opentelemetry/semantic-conventions (SemanticResourceAttributes -> ATTR_SERVICE_NAME)
- Update @opentelemetry/sdk-node to v0.214.0 and related instrumentation packages
- Update @promster/express to v15, add @promster/metrics for getSummary/getContentType
- Update pino-http from v5 to v10, pino-pretty from v7 to v13
- Update prom-client from v14 to v15
- Update nodemon from v2 to v3
- Update express to v4.22
- Update Dockerfile for new distroless image naming convention
- Update Docker/dev scripts for OTLP endpoint env vars
- Add test infrastructure using Node.js built-in test runner
- All 5 tests pass, 0 vulnerabilities

Agent-Logs-Url: https://github.com/Olivr/app-node-js/sessions/22020782-a31d-4c70-b0db-3ee206a23864

Co-authored-by: politician <3155568+politician@users.noreply.github.com>
Copilot AI changed the title [WIP] Upgrade app dependencies and ensure tests run Upgrade all dependencies from Node 16 era to current versions Apr 15, 2026
Copilot AI requested a review from politician April 15, 2026 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Upgrade this app

2 participants