Skip to content

chore(deps): bump node from 24-bookworm-slim to 26-bookworm-slim in the docker-images group - #2013

Closed
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/docker/docker-images-263a700181
Closed

chore(deps): bump node from 24-bookworm-slim to 26-bookworm-slim in the docker-images group#2013
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/docker/docker-images-263a700181

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the docker-images group with 1 update: node.

Updates node from 24-bookworm-slim to 26-bookworm-slim

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the docker-images group with 1 update: node.


Updates `node` from 24-bookworm-slim to 26-bookworm-slim

---
updated-dependencies:
- dependency-name: node
  dependency-version: 26-bookworm-slim
  dependency-type: direct:production
  dependency-group: docker-images
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Aug 17, 2026
@dependabot
dependabot Bot requested a review from BigSimmo as a code owner August 17, 2026 01:11
@dependabot dependabot Bot added the docker Pull requests that update docker code label Aug 17, 2026
@github-actions

github-actions Bot commented Aug 17, 2026

Copy link
Copy Markdown
Contributor

CI triage

CI failed on this PR. Automated classification of the 2 failed job(s):

  • Container images / build-and-verifyneeds investigation: inspect the failing step and uploaded diagnostics; rerun only after classifying the cause.
  • PR requiredneeds investigation: inspect the failing step and uploaded diagnostics; rerun only after classifying the cause.

Compared with main CI run #11772 (success).

Classification is evidence routing, not permission to ignore a failure. Exact quarantined Playwright identities remain governed by the flake ledger.

Copy link
Copy Markdown
Owner

This bump breaks CI for real, not a flake: node:24-bookworm-slim26-bookworm-slim fails Container images / build-and-verify because npm ci inside the Docker build hits EBADENGINE — this repo pins engines.node: ">=24.15.0 <25" with engine-strict=true (see AGENTS.md), and Node 26 violates that pin. This isn't something to fix by relaxing the engine pin; the safe move is to stop Dependabot from proposing this major version until the repo is ready to move off Node 24.

·@·d·ependabot i·gnore t·his major version


Generated by Claude Code

@dependabot @github

dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

Copy link
Copy Markdown
Owner

Closing — this conflicts with the repo's hard-pinned Node runtime. package.json pins "engines": {"node": ">=24.15.0 <25", "npm": "11.x"}, both Dockerfile and Dockerfile.worker pin node:24-bookworm-slim, and the repo's AGENTS.md/CLAUDE.md both document Node 24.x as a hard requirement (engine-strict; the dev server exits on any other major). This isn't hypothetical — this PR's own Container images / build-and-verify required check is failing as a direct result of the base-image bump.

Recommend @dependabot ignore for this major version (or the docker-images group) so it stops reopening until Node 26 is deliberately adopted repo-wide.


Generated by Claude Code

@dependabot
dependabot Bot deleted the dependabot/docker/docker-images-263a700181 branch August 18, 2026 02:55
BigSimmo added a commit that referenced this pull request Aug 18, 2026
* chore(ledger): record Run PR sweep results for 6 synced + 2 investigated PRs

Sweep synced 6 behind-but-clean open PRs (#2010, #2011, #2012, #2013, #2072,
#2073) from origin/main via the authenticated update-branch API, and
investigated a GitGuardian failure on #2040/#2041 that turned out to be a
false positive (no secrets in either diff) rather than a real leak.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HhswQFFRjzhZnv467HL82y

* style: prettier format on the PR #2040 ledger record

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HhswQFFRjzhZnv467HL82y

* fix(ledger): restore content-addressed record's original bytes

A prior "prettier format" commit (bed47de) escaped the literal `*` to
`\*` inside this immutable, content-addressed review record, breaking
the filename/content SHA-256 invariant that
check-branch-review-ledger.mjs enforces. Immutable records must never
be edited after creation; revert to the exact original row content
(verified: sha256 matches the filename again).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015qDHwBNZYyRLdJHqSkiYTg

---------

Co-authored-by: Claude <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update docker code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant