Upgrade Node.js from 22.17.0 to 24.14.0

[cteyton]

Explanation

Upgrade Node.js runtime from 22.17.0 to 24.14.0 across the entire monorepo: version pins, Docker images, CI workflows, and Dockerfiles.

Type of Change

• Bug fix
• New feature
• Improvement/Enhancement
• Refactoring
• Documentation
• Breaking change

Affected Components

• Domain packages affected: none (runtime-only change)
• Frontend / Backend / Both: Both + CI + Docker
• Breaking changes (if any): Node 24 native TS stripping conflicts with Jest config loading — requires NODE_OPTIONS="--no-experimental-strip-types" for test runs

Testing

• Unit tests added/updated
• Integration tests added/updated
• Manual testing completed
• Test coverage maintained or improved

Test Details:

Step	Result
npm install (npm 11.11.0)	Pass
nx build api	Pass ([DEP0180] fs.Stats deprecated warning)
nx build frontend	Pass ([MODULE_TYPELESS_PACKAGE_JSON] warning)
nx build packmind-cli	Pass
nx build mcp-server	Pass
Tests (24/25 projects)	Pass with --no-experimental-strip-types
Lint (29 projects)	Pass

Known issue: Node 24 enables --experimental-strip-types by default, which conflicts with Jest's TypeScript config loading. Workaround: NODE_OPTIONS="--no-experimental-strip-types". This needs to be added to CI test jobs.

TODO List

• CHANGELOG Updated
• Documentation Updated
• Add --no-experimental-strip-types to CI test workflows
• Update OpenSSL pin in Dockerfiles for Alpine 3.23

Reviewer Notes

• migrate-24_11.md contains the backport guide for the proprietary repo
• The package-lock.json diff is minimal (engine field + some optional peer dep cleanup by npm 11)
• cli-e2e-tests were skipped (require external API connectivity)

🤖 Generated with Claude Code

[greptile-apps]

Greptile Summary

This PR upgrades Node.js from 22.17.0 to 24.14.0 across the entire monorepo — touching CI workflows, Dockerfiles, docker-compose files, NX configuration (21→22), Storybook (9→10), and all jest.config.ts files. The jest configs are migrated from ESM (import/export default) to CJS (require/module.exports) to work around Node 24's default --experimental-strip-types conflicting with Jest's TypeScript config loading, and NODE_OPTIONS='--no-experimental-strip-types' is propagated to every build and test step.

Key changes:

• .nvmrc, package.json engines, and all CI node-version inputs bumped to 24.14.0
• All 25+ jest.config.ts files converted to CJS require/module.exports pattern
• NODE_OPTIONS extended with --no-experimental-strip-types in build.yml, package.json scripts, and publish-cli-release.yml
• Docker images updated from node:22.17.0-alpine3.21 → node:24.14.0-alpine3.23 in both compose files
• Dockerfiles updated similarly; apk removal moved into the initial install layer (tighter image)
• NX bumped to 22.6.0; testTargetName ownership moved from @nx/vite plugin to new @nx/vitest plugin entry
• UI component type fixes (Omit<…,'variant'> + casts) required by stricter typings in the new dependency set
• docker job in main.yml now always called (hadolint Dockerfile linting runs on all branches); build-scan-push is still guarded inside docker.yml

Outstanding items flagged: The openssl=3.5.5-r0 pin in both Dockerfiles is unverified for Alpine 3.23 (explicit PR TODO), and the SHA256 digest pin that was present in the old FROM lines was not re-added for the new image, which is a mild supply-chain hardening regression.

Confidence Score: 4/5

Safe to merge for CI/build paths; Docker image builds may fail due to the unverified openssl pin, which should be validated before merging.

All CI test jobs, lint, and application builds are correctly updated and verified by the author. The one outstanding P1 concern is the openssl=3.5.5-r0 pin in both Dockerfiles, which is an acknowledged TODO and was not covered by the testing matrix — if that exact package revision does not exist in Alpine 3.23's repos the Docker build pipeline will hard-fail. The P2 findings (digest pin removal, npm version inconsistency) are minor. Once the OpenSSL pin is confirmed or corrected this is ready to merge.

dockerfile/Dockerfile.api and dockerfile/Dockerfile.mcp — openssl version pin needs verification against Alpine 3.23 package index before Docker builds are run

Important Files Changed

Filename	Overview
dockerfile/Dockerfile.api	Upgraded to node:24.14.0-alpine3.23; apk removal moved to initial layer (good); SHA digest pin removed and openssl=3.5.5-r0 pin unverified for Alpine 3.23 (acknowledged TODO)
dockerfile/Dockerfile.mcp	Same changes as Dockerfile.api: Alpine 3.23 base, digest pin removed, openssl=3.5.5-r0 pin potentially invalid for Alpine 3.23
.github/workflows/build.yml	NODE_OPTIONS updated to include --no-experimental-strip-types for all build and test jobs — necessary fix for Node 24's TS stripping conflict with Jest
.github/workflows/main.yml	node-version bumped to 24.14.0; if-guard on docker job removed intentionally so hadolint linting runs on all branches (build-scan-push still guarded inside docker.yml)
package.json	Node/npm engines updated, --no-experimental-strip-types added to test scripts, NX upgraded to 22.6.0, Storybook 10 pinned; npm engine (11.9.0) differs from docker-package.json (11.11.0)
apps/api/docker-package.json	Node/npm engines updated to 24.14.0/11.11.0 — npm version (11.11.0) is inconsistent with root package.json (11.9.0)
apps/api/jest.config.ts	Converted from ESM imports to CJS require/module.exports to avoid Node 24 experimental TS stripping conflict during Jest config loading
packages/ui/src/lib/components/form/PMButton/PMButton.tsx	Omits conflicting variant prop from ButtonProps via Omit<>, casts internal value — required for Storybook 10 / stricter TS types
nx.json	testTargetName removed from @nx/vite plugin (was duplicate) and correctly assigned to new @nx/vitest plugin entry
docker-compose.yml	All service images updated from node:22.17.0-alpine3.21 to node:24.14.0-alpine3.23 consistently

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Push / PR] --> B[build.yml]
    A --> C[quality.yml]
    A --> D[docker.yml - hadolint]

    B --> B1["nx build api\nNODE_OPTIONS: --max-old-space-size + --no-experimental-strip-types"]
    B --> B2["nx test api/frontend/mcp/packages/cli\nNODE_OPTIONS: --max-old-space-size + --no-experimental-strip-types"]

    C --> C1[lint-and-format]
    C --> C2[sonarqube]

    D --> D1["hadolint\n(all branches)"]
    D --> D2["build-scan-push\n(main + release tags only)"]

    B & C --> E[docker.yml - build-scan-push]
    E -->|main/release only| F["Build Docker images\nFROM node:24.14.0-alpine3.23\napk add openssl=3.5.5-r0"]
    F --> G[Scan and Push to DockerHub]

    style F fill:#ffe0b2,stroke:#e65100
    style D1 fill:#e8f5e9,stroke:#2e7d32

Loading

_{Reviews (11): Last reviewed commit: "Upgrade esbuild-loader dep" | Re-trigger Greptile}

[cteyton]

Update your review @greptile

[greptile-apps]

Too many files changed for review. (126 files found, 100 file limit)

[sonarqubecloud]

Quality Gate passed

Issues
10 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
3.6% Duplication on New Code

See analysis details on SonarQube Cloud