chore: drop node 20 support

.github/workflows/ci.yml

@@ -13,14 +13,13 @@ permissions:
   pull-requests: write
 
 jobs:
-  # Ubuntu build with MongoDB matrix (9 combinations: 3 Node × 3 MongoDB)
   build-ubuntu:
     runs-on: ubuntu-latest
 
     strategy:
       fail-fast: false
       matrix:
-        node-version: [20.x, 22.x, 24.x]
+        node-version: [22.x, 24.x]
         mongodb-version: ['6.0', '7.0', '8.0']
 
     steps:

.github/workflows/dependency-review.yml

@@ -21,6 +21,6 @@ jobs:
         with:
           comment-summary-in-pr: always
           fail-on-severity: high
-          allow-licenses: MIT, MIT-0, Apache-2.0, BSD-3-Clause, BSD-3-Clause-Clear, ISC, BSD-2-Clause, Unlicense, CC0-1.0, 0BSD, X11, MPL-2.0, MPL-1.0, MPL-1.1, MPL-2.0, OFL-1.1, Zlib, BlueOak-1.0.0, Ubuntu-font-1.0
+          allow-licenses: MIT, MIT-0, Apache-2.0, BSD-3-Clause, BSD-3-Clause-Clear, ISC, BSD-2-Clause, Unlicense, CC0-1.0, 0BSD, X11, MPL-2.0, MPL-1.0, MPL-1.1, MPL-2.0, OFL-1.1, Zlib, BlueOak-1.0.0, Ubuntu-font-1.0, Artistic-2.0
           fail-on-scopes: development, runtime
           allow-dependencies-licenses: 'pkg:npm/caniuse-lite'

.github/workflows/e2e.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
         with:
-          node-version: '20'
+          node-version: '22'
           cache: 'npm'
 
       - name: Install dependencies

.github/workflows/experimental-inventory-ci.yml

@@ -19,7 +19,7 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [20.x]
+        node-version: [22.x]
         mongodb-version: [4.4]
 
     steps:

.github/workflows/lint.yml

@@ -3,7 +3,7 @@ name: Code Cleanliness
 on: [pull_request]
 
 env:
-  NODE_VERSION: 20
+  NODE_VERSION: 22
 
 permissions:
   contents: read

CONTRIBUTING.md

@@ -23,12 +23,14 @@ For project governance, roles, and voting procedures, see the [Governance sectio
 
 ## Prerequisites
 
-| Tool                                                                                                       | Version                        | Notes                       |
-| ---------------------------------------------------------------------------------------------------------- | ------------------------------ | --------------------------- |
-| [Node.js](https://nodejs.org/en/download)                                                                  | 20.18.2+, 22.13.1+, or 24.0.0+ | Check with `node -v`        |
-| [npm](https://npmjs.com/)                                                                                  | 8+                             | Bundled with Node.js        |
-| [Git](https://git-scm.com/downloads)                                                                       | Any recent version             | Must support HTTP/S         |
-| [Docker](https://docs.docker.com/get-docker/) & [Docker Compose](https://docs.docker.com/compose/install/) | Any recent version             | Required for E2E tests only |
+We actively support and test against the latest two LTS Node versions, currently 22 and 24. When a new LTS version rolls out (26, 28, etc.), we deprecate the oldest one.
+
+| Tool                                                                                                       | Version              | Notes                       |
+| ---------------------------------------------------------------------------------------------------------- | -------------------- | --------------------------- |
+| [Node.js](https://nodejs.org/en/download)                                                                  | 22.13.1+, or 24.0.0+ | Check with `node -v`        |
+| [npm](https://npmjs.com/)                                                                                  | 8+                   | Bundled with Node.js        |
+| [Git](https://git-scm.com/downloads)                                                                       | Any recent version   | Must support HTTP/S         |
+| [Docker](https://docs.docker.com/get-docker/) & [Docker Compose](https://docs.docker.com/compose/install/) | Any recent version   | Required for E2E tests only |
 
 ## Getting Started
 
@@ -387,7 +389,7 @@ GitProxy uses a JSON Schema ([config.schema.json](config.schema.json)) to define
 
 The following checks must pass before a PR can be merged:
 
-- **Unit tests**: Run across a matrix of Node.js (20, 22, 24) and MongoDB (6.0, 7.0, 8.0) versions on Ubuntu, plus a Windows build
+- **Unit tests**: Run across a matrix of the latest 2 Node.js (22, 24) and MongoDB (6.0, 7.0, 8.0) versions on Ubuntu, plus a Windows build
 - **E2E tests**: Docker-based end-to-end tests
 - **Cypress tests**: UI end-to-end tests
 - **Lint & format**: ESLint, Prettier, TypeScript type checks

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:20@sha256:c0280010525e13fdb12f34cdb2229f0f45e9f9cdd4b13c2e9cb8a66b791d65ca AS builder
+FROM node:22@sha256:b501c082306a4f528bc4038cbf2fbb58095d583d0419a259b2114b5ac53d12e9 AS builder
 
 USER root
 
@@ -17,7 +17,7 @@ RUN npm run build-ui \
   && cp config.schema.json dist/ \
   && npm prune --omit=dev
 
-FROM node:20@sha256:c0280010525e13fdb12f34cdb2229f0f45e9f9cdd4b13c2e9cb8a66b791d65ca AS production
+FROM node:22@sha256:b501c082306a4f528bc4038cbf2fbb58095d583d0419a259b2114b5ac53d12e9 AS production
 
 COPY --from=builder /out/package*.json ./
 COPY --from=builder /out/node_modules/ /app/node_modules/