Node 24 Upgrade for DownloadPackageV1, NuGetToolInstallerV0/V1 #21752
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Contributor
Author
|
/azp run |
|
Azure Pipelines successfully started running 3 pipeline(s). |
Contributor
Author
|
/azp run |
|
Azure Pipelines successfully started running 3 pipeline(s). |
Contributor
Author
|
/azp run |
|
Azure Pipelines successfully started running 3 pipeline(s). |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Context
Migrate to node 24 for the tasks. Npm audit was also used to update vulnerabilities within the tasks' dependencies. AB#{2341818}
Task Name
DownloadPackageV1, NuGetToolInstallerV0, NuGetToolInstallerV1
Description
Migrate tasks' node version from node 20 to node 24
Npm audit to fix vulnerabilities within the tasks
Risk Assessment (Low / Medium / High)
Medium
Reasoning:
Scope: Changes affect core dependencies including task library and Node.js types
Backward Compatibility: Full backward compatibility maintained through override
The risk is mitigated by:
Maintaining Node20_1 support alongside Node24 (with override process)
No changes to task logic or functionality
Change Behind Feature Flag (Yes / No)
N - The migration to node 24 cannot be controlled via feature flag
Tech Design / Approach
Design Document
Documentation Changes Required (Yes/No)
N/A
Unit Tests Added or Updated (Yes / No)
Y - L0s were updated to remove dependencies on vulnerable packages
Additional Testing Performed
List all other tests performed (manual or automated, including integration, regression, scenario tests, etc.).
Logging Added/Updated (Yes/No)
N/A
Telemetry Added/Updated (Yes/No)
N
Rollback Scenario and Process (Yes/No)
Rollback Process
Dependency Impact Assessed and Regression Tested (Yes/No)
Updates to the following packages were validated
@types/node v24.10.4 provides accurate type definitions for Node.js 24
azure-pipelines-task-lib v5.2.4 is stable and widely tested
typescript v5.7.2 is the latest stable version with Node.js 24 support
Checklist