build(deps): node security upgrade to 18.16.1

.nvmrc

@@ -1 +1 @@
-18.16.0
+18.16.1

Dockerfile

@@ -1,7 +1,7 @@
 ##
 # Build /app
 
-FROM node:18.16.0 as build
+FROM node:18.16.1 as build
 
 RUN mkdir -p /base/cache
 ENV YARN_CACHE_FOLDER=/base/cache
@@ -62,7 +62,7 @@ RUN /bin/bash -c "\
 ##
 # build the final image
 
-FROM node:18.16.0-alpine as image
+FROM node:18.16.1-alpine as image
 RUN apk --no-cache add --update nginx bash
 COPY --from=build /base/app /app
 ENV HOME=/app

changelog/EVFhmJe2RFi1Mbb3wapEcA.md

@@ -0,0 +1,6 @@
+audience: general
+level: patch
+---
+Upgrade Node.js version to 18.16.1 (security release).
+
+More information can be found [here](https://nodejs.org/en/blog/vulnerability/june-2023-security-releases).

cloudbuild.yaml

@@ -102,7 +102,7 @@ options:
   env:
     - USE_GKE_GCLOUD_AUTH_PLUGIN=True
 substitutions:
-  _NODE_VERSION: 18.16.0
+  _NODE_VERSION: 18.16.1
   _VERSION: '{"version":"${BRANCH_NAME}_${SHORT_SHA}","commit":"${SHORT_SHA}","source":"https://github.com/taskcluster/taskcluster","build":"${BUILD_ID}"}'
   _IMAGE_NAME: gcr.io/${PROJECT_ID}/${PROJECT_ID}/${BRANCH_NAME}
   _DEPLOY_IMAGE_NAME: gcr.io/${PROJECT_ID}/${PROJECT_ID}/${BRANCH_NAME}-deploy

dev-docs/development-process.md

@@ -10,7 +10,7 @@ You will probably be working on only one of these pieces, so read carefully belo
 ### Node
 
 <!-- the next line is automatically edited; do not change -->
-You will need Node version 18.16.0 installed.
+You will need Node version 18.16.1 installed.
 We recommend using https://github.com/nvm-sh/nvm to support installing multiple Node versions.
 
 We use `yarn` to run most development commands, so [install that as well](https://classic.yarnpkg.com/en/docs/install/#debian-stable).

netlify.toml

@@ -10,7 +10,7 @@
 [build.environment]
   YARN_FLAGS = "--frozen-lockfile"
   YARN_VERSION = "1.22.19"
-  NODE_VERSION = "18.16.0"
+  NODE_VERSION = "18.16.1"
   APPLICATION_NAME = "Taskcluster"
   GRAPHQL_ENDPOINT = "https://community-tc.services.mozilla.com/graphql"
   GRAPHQL_SUBSCRIPTION_ENDPOINT = "https://community-tc.services.mozilla.com/subscription"

package.json

@@ -4,7 +4,7 @@
   "private": true,
   "engine-strict": true,
   "engines": {
-    "node": "18.16.0",
+    "node": "18.16.1",
     "yarn": "^1.22.19"
   },
   "workspaces": [

ui/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:18.16.0
+FROM node:18.16.1
 
 WORKDIR /app/ui
 COPY yarn.lock package.json ./

ui/package.json

@@ -4,7 +4,7 @@
   "private": true,
   "license": "MPL-2.0",
   "engines": {
-    "node": "18.16.0",
+    "node": "18.16.1",
     "yarn": "^1.22.19"
   },
   "scripts": {

workers/docker-worker/package.json

@@ -4,7 +4,7 @@
   "version": "53.1.0",
   "engine-strict": true,
   "engines": {
-    "node": "18.16.0",
+    "node": "18.16.1",
     "yarn": "^1.22.19"
   },
   "description": "Docker task host for linux.",

workers/docker-worker/test/images/test/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:18.16.0
+FROM node:18.16.1
 
 # Top level bins to override system defaults
 RUN npm install -g babel-cli babel-preset-es2015 babel-polyfill