Bump Node

.devcontainer/devcontainer.json

@@ -59,5 +59,5 @@
   "initializeCommand": "sh .devcontainer/initialize-command.sh",
   "onCreateCommand": "sh .devcontainer/on-create-command.sh",
   "postStartCommand": "sh .devcontainer/post-start-command.sh"
-  // Devcontainer context hash (do not manually edit this, it's managed by a pre-commit hook): b6e19452 # spellchecker:disable-line
+  // Devcontainer context hash (do not manually edit this, it's managed by a pre-commit hook): b8c69216 # spellchecker:disable-line
 }

.github/workflows/ci.yaml

@@ -24,10 +24,10 @@ jobs:
     name: Pre-commit for Py${{ matrix.python-version }} on ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4.2.2
+      - uses: actions/checkout@v5.0.0
 
       - name: Setup Python
-        uses: actions/setup-python@v5.6.0
+        uses: actions/setup-python@v6.0.0
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -47,7 +47,7 @@ jobs:
         timeout-minutes: 30 # this is the amount of time this action will wait to attempt to acquire the mutex lock before failing, e.g. if other jobs are queued up in front of it
 
       - name: Cache Pre-commit hooks
-        uses: actions/cache@v4.2.3
+        uses: actions/cache@v4.2.4
         env:
           cache-name: cache-pre-commit-hooks
         with:
@@ -79,10 +79,10 @@ jobs:
       contents: write # needed for mutex
 
     steps:
-      - uses: actions/checkout@v4.2.2
+      - uses: actions/checkout@v5.0.0
 
       - name: Setup Python
-        uses: actions/setup-python@v5.6.0
+        uses: actions/setup-python@v6.0.0
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -128,7 +128,7 @@ jobs:
         timeout-minutes: 30 # this is the amount of time this action will wait to attempt to acquire the mutex lock before failing, e.g. if other jobs are queued up in front of it
 
       - name: Cache Pre-commit hooks
-        uses: actions/cache@v4.2.3
+        uses: actions/cache@v4.2.4
         env:
           cache-name: cache-pre-commit-hooks
         with:

.github/workflows/tag-on-merge.yaml

@@ -13,7 +13,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4.2.2
+      - uses: actions/checkout@v5.0.0
         with:
           ref: ${{ github.event.pull_request.merge_commit_sha }}
           fetch-depth: '0'

extensions/context.py

@@ -20,28 +20,29 @@ def hook(self, context: dict[Any, Any]) -> dict[Any, Any]:
         context["pnpm_version"] = "10.15.1"
         # These are duplicated in the pyproject.toml of this repository
         context["pyright_version"] = "1.1.405"
-        context["pytest_version"] = "8.4.1"
+        context["pytest_version"] = "8.4.2"
         context["pytest_randomly_version"] = "3.16.0"
-        context["pytest_cov_version"] = "6.2.1"
+        context["pytest_cov_version"] = "6.3.0"
         #######
         context["sphinx_version"] = "8.1.3"
-        context["pulumi_version"] = "3.192.0"
-        context["pulumi_aws_version"] = "7.6.0"
-        context["pulumi_aws_native_version"] = "1.32.0"
+        context["pulumi_version"] = "3.193.0"
+        context["pulumi_aws_version"] = "7.7.0"
+        context["pulumi_aws_native_version"] = "1.33.0"
         context["pulumi_command_version"] = "1.1.0"
         context["pulumi_github_version"] = "6.7.3"
-        context["pulumi_okta_version"] = "4.20.0"
-        context["boto3_version"] = "1.40.23"
+        context["pulumi_okta_version"] = "5.2.0"
+        context["boto3_version"] = "1.40.25"
         context["ephemeral_pulumi_deploy_version"] = "0.0.5"
         context["pydantic_version"] = "2.11.7"
         context["pyinstaller_version"] = "6.13.0"
         context["setuptools_version"] = "80.7.1"
-        context["strawberry_graphql_version"] = "0.280.0"
+        context["strawberry_graphql_version"] = "0.282.0"
         context["fastapi_version"] = "0.116.1"
         context["fastapi_offline_version"] = "1.7.4"
         context["uvicorn_version"] = "0.35.0"
         context["lab_auto_pulumi_version"] = "0.1.16"
         #######
+        context["node_version"] = "24.7.0"
         context["nuxt_ui_version"] = "^3.3.2"
         context["nuxt_version"] = "^4.1.0"
         context["nuxt_icon_version"] = "^2.0.0"
@@ -65,29 +66,29 @@ def hook(self, context: dict[Any, Any]) -> dict[Any, Any]:
         context["graphql_codegen_typescript_version"] = "^4.1.6"
         #######
         # These are duplicated in the CI files for this repository
-        context["gha_checkout"] = "v4.2.2"
-        context["gha_setup_python"] = "v5.6.0"
-        context["gha_cache"] = "v4.2.3"
+        context["gha_checkout"] = "v5.0.0"
+        context["gha_setup_python"] = "v6.0.0"
+        context["gha_cache"] = "v4.2.4"
         context["gha_linux_runner"] = "ubuntu-24.04"
         #######
         context["gha_upload_artifact"] = "v4.6.2"
-        context["gha_download_artifact"] = "v4.3.0"
+        context["gha_download_artifact"] = "v5.0.0"
         context["gha_github_script"] = "v7.0.1"
         context["gha_setup_buildx"] = "v3.11.1"
         context["buildx_version"] = "v0.27.0"
         context["gha_docker_build_push"] = "v6.16.0"
-        context["gha_configure_aws_credentials"] = "v4.3.1"
+        context["gha_configure_aws_credentials"] = "v5.0.0"
         context["gha_amazon_ecr_login"] = "v2.0.1"
-        context["gha_setup_node"] = "v4.4.0"
+        context["gha_setup_node"] = "v5.0.0"
         context["gha_action_gh_release"] = "v2.2.1"
         context["gha_mutex"] = "1ebad517141198e08d47cf72f3c0975316620a65 # v1.0.0-alpha.10"
-        context["gha_pypi_publish"] = "v1.12.4"
+        context["gha_pypi_publish"] = "v1.13.0"
         context["gha_sleep"] = "v2.0.3"
         context["gha_windows_runner"] = "windows-2025"
         #######
         context["debian_release_name"] = "bookworm"
-        context["alpine_image_version"] = "3.21"
-        context["nginx_image_version"] = "1.28.0"
+        context["alpine_image_version"] = "3.22"
+        context["nginx_image_version"] = "1.29.1"
         # These also in the tests/data.yml files in this repository and in copier.yaml
         context["py312_version"] = "3.12.7"  # ReadTheDocs does not yet support 3.12.8
         context["py313_version"] = "3.13.2"

pyproject.toml

@@ -5,8 +5,8 @@ description = "Add your description here"
 readme = "README.md"
 requires-python = ">=3.12.7"
 dependencies = [
-    "pytest>=8.4.1",
-    "pytest-cov>=6.2.1",
+    "pytest>=8.4.2",
+    "pytest-cov>=6.3.0",
     "pytest-randomly>=3.16.0",
     "pyright[nodejs]>=1.1.405",
     "copier>=9.10.1",

template/.github/workflows/ci.yaml.jinja-base

@@ -60,7 +60,7 @@ jobs:
         uses: ./.github/actions/install_deps
         with:
           python-version: ${{ matrix.python-version }}{% endraw %}{% if template_uses_javascript is defined and template_uses_javascript is sameas(true) %}{% raw %}
-          node-version: 22.14.0 # TODO: don't hardcode this{% endraw %}{% endif %}{% raw %}
+          node-version: {% endraw %}{{ node_version }}{% raw %}{% endraw %}{% endif %}{% raw %}
           install-deps: false
 
       - name: Instantiate copier template

template/copier.yml.jinja-base

@@ -30,7 +30,7 @@ use_windows_in_ci:
 node_version:
     type: str
     help: What version of NodeJS is used for development?
-    default: 22.14.0
+    default: "{{ node_version }}"
 
 {% endraw %}{% endif %}{% raw %}{% endraw %}{% if template_might_want_to_install_aws_ssm_port_forwarding_plugin %}{% raw %}
 install_aws_ssm_port_forwarding_plugin:

template/extensions/context.py.jinja-base

@@ -37,6 +37,7 @@ class ContextUpdater(ContextHook):
         context["uvicorn_version"] = "{{ uvicorn_version }}"
         context["lab_auto_pulumi_version"] = "{{ lab_auto_pulumi_version }}"
 
+        context["node_version"] = "{{ node_version }}"
         context["nuxt_ui_version"] = "{{ nuxt_ui_version }}"
         context["nuxt_version"] = "{{ nuxt_version }}"
         context["nuxt_icon_version"] = "{{ nuxt_icon_version }}"