Local gates run Node 26 while the publish job runs Node 22: a web test can pass every gate and fail the publish #11

Merged
agra merged 1 commit from fix/2389-npm-node26 into master 2026-10-02 10:07:13 +03:00
Owner

Tracker: #2389

Merge only after git.swipelab.com/sx/toolchain:latest carries Node 26.3.0 (SX request #2390, sx/toolchain#1, then the image rebuild). With the floor at 26.3, a publish on today's Node 22 image fails at start.

The publish job's npm moves to 11.16.0, pinned at the registry tarball's sha256; its sha512 equals the registry's dist.integrity. It runs on a Node floor of 26.3, the Node and npm the local gates run. The lock's source hash, the deploy contract test's fakes and README's Node requirement follow.

npm 11.16.0's tarball keeps package/bin/npm-cli.js, so deploy_env.sh provision holds unchanged. Provisioned that way it reports npm 11.16.0 on Node 26.3.0, and the npm_node probe fails on Node 22.23.2 with "below 26.3".

Head: 8fa73e4c08

Tracker: [#2389](https://sak.swipelab.com/tasks/2389) **Merge only after `git.swipelab.com/sx/toolchain:latest` carries Node 26.3.0** (SX request [#2390](https://sak.swipelab.com/tasks/2390), https://git.swipelab.com/sx/toolchain/pulls/1, then the image rebuild). With the floor at 26.3, a publish on today's Node 22 image fails at start. The publish job's npm moves to 11.16.0, pinned at the registry tarball's sha256; its sha512 equals the registry's `dist.integrity`. It runs on a Node floor of 26.3, the Node and npm the local gates run. The lock's source hash, the deploy contract test's fakes and README's Node requirement follow. npm 11.16.0's tarball keeps `package/bin/npm-cli.js`, so `deploy_env.sh provision` holds unchanged. Provisioned that way it reports npm 11.16.0 on Node 26.3.0, and the `npm_node` probe fails on Node 22.23.2 with "below 26.3". Head: 8fa73e4c080312b146d947741effb5e810062878
agra merged commit 974b467f0b into master 2026-10-02 10:07:13 +03:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
sx/sak!11
No description provided.