Raise Node baseline to 22

Author: andrewkoltsov

.github/workflows/ci.yml

@@ -24,7 +24,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
-          node-version: 20
+          node-version: 22
           cache: npm
 
       - name: Install dependencies
@@ -44,7 +44,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
-          node-version: 20
+          node-version: 22
           cache: npm
 
       - name: Install dependencies

.github/workflows/codeql.yml

@@ -39,7 +39,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
-          node-version: 20
+          node-version: 22
           cache: npm
 
       - name: Install dependencies

CHANGELOG.md

@@ -13,6 +13,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ### Changed
 
+- Minimum supported Node.js is now 22.x, CI and CodeQL validation now run on
+  Node 22, and development type definitions now track the Node 22 line.
 - GitHub Actions workflows now pin third-party and GitHub-hosted actions by
   commit hash, and write-scoped workflow token permissions are limited to the
   jobs that need them.

README.md

@@ -30,6 +30,8 @@ supply-chain signals over time.
 
 ## Install
 
+This package requires Node.js 22 or newer.
+
 Install the package from npm:
 
 ```bash

package-lock.json

@@ -25,7 +25,7 @@
     "./openapi.json": "./openapi.json"
   },
   "engines": {
-    "node": ">=20"
+    "node": ">=22"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",
@@ -72,7 +72,7 @@
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "@types/node": "^20.19.37",
+    "@types/node": "^22.19.17",
     "@vitest/coverage-v8": "^4.1.2",
     "eslint": "^10.1.0",
     "eslint-config-prettier": "^10.1.8",