Agent/upgrade dependencies node22

.github/workflows/backend-full-matrix.yml

@@ -32,9 +32,9 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
           cache: yarn
-          cache-dependency-path: yarn.lock
+          cache-dependency-path: server/yarn.lock
 
       - name: Install server dependencies
         run: yarn --cwd server install --frozen-lockfile

.github/workflows/backend-smoke.yml

@@ -38,9 +38,9 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
           cache: yarn
-          cache-dependency-path: yarn.lock
+          cache-dependency-path: server/yarn.lock
 
       - name: Install server dependencies
         run: yarn --cwd server install --frozen-lockfile

.github/workflows/dead-code-report.yml

@@ -42,9 +42,11 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
           cache: yarn
-          cache-dependency-path: yarn.lock
+          cache-dependency-path: |
+            server/yarn.lock
+            web/yarn.lock
 
       - name: Install server dependencies
         run: yarn --cwd server install --frozen-lockfile

.nvmrc

@@ -0,0 +1 @@
+22.23.1

DEPENDENCY_MIGRATION.md

@@ -0,0 +1,35 @@
+# Dependency migration baseline
+
+This repository uses Yarn Classic 1.x and targets Node.js `>=22.22.2`.
+`.nvmrc` pins Node.js 22.23.1 so local development and CI can reproduce the
+validated runtime.
+
+## Intentional version holds
+
+- TypeScript is pinned to `~6.0.3`. The current `typescript-eslint` peer range
+  is `<6.1.0`, and Docusaurus 3.10 still inherits the deprecated `baseUrl`
+  option. TypeScript 7 should be adopted only after both upstream toolchains
+  support it.
+- `@types/node` stays on major 22 to match the supported Node.js runtime. A
+  higher current DefinitelyTyped major does not represent this application's
+  runtime contract.
+
+## Security resolutions
+
+- Server: `@esbuild-kit/core-utils` is an indirect Drizzle Kit dependency that
+  still requests vulnerable esbuild 0.18. It is resolved to esbuild 0.25,
+  which is the closest patched API-compatible line and is covered by the
+  Drizzle CLI and transform smoke checks.
+- Docs: current Docusaurus dependencies still request vulnerable releases of
+  `serialize-javascript`, `uuid`, and `brace-expansion`. Yarn resolutions pin
+  patched releases. The Docusaurus RU/EN production build validates these
+  overrides.
+
+The incompatible-range warnings printed by Yarn for these resolutions are
+expected until the corresponding upstream dependency ranges are updated.
+
+## Audit commands
+
+Run `yarn audit` in the repository root and separately in `server`, `web`, and
+`docs`. Run `yarn outdated` in the same four locations; only the intentional
+TypeScript and Node type holds above should remain.

README.md

@@ -61,7 +61,7 @@ TaleSpinner is especially useful if you:
 
 ### Requirements
 
-- Node.js 20+
+- Node.js 22.22.2+
 - Yarn Classic 1.x
 
 > Use `yarn` for this repository, not `npm` or `pnpm`.

docs/docs/user/getting-started.md

@@ -20,7 +20,7 @@ description: Первый рабочий запуск TaleSpinner за 10 мин
 
 Нужно:
 
-- Node.js 20+
+- Node.js 22.22.2+
 - Yarn 1.x
 
 ## Шаг 1. Установите зависимости

docs/i18n/en/docusaurus-plugin-content-docs/current/user/getting-started.md

@@ -20,7 +20,7 @@ After this guide you will have:
 
 Requirements:
 
-- Node.js 20+
+- Node.js 22.22.2+
 - Yarn 1.x
 
 ## Step 1. Install dependencies

docs/package.json

@@ -14,19 +14,20 @@
     "check": "yarn generate:api && yarn check:i18n && yarn build"
   },
   "dependencies": {
-    "@docusaurus/core": "3.9.2",
-    "@docusaurus/preset-classic": "3.9.2",
+    "@docusaurus/core": "3.10.2",
+    "@docusaurus/faster": "3.10.2",
+    "@docusaurus/preset-classic": "3.10.2",
     "@mdx-js/react": "^3.0.0",
     "clsx": "^2.0.0",
     "prism-react-renderer": "^2.3.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@docusaurus/module-type-aliases": "3.9.2",
-    "@docusaurus/tsconfig": "3.9.2",
-    "@docusaurus/types": "3.9.2",
-    "typescript": "~5.6.2"
+    "@docusaurus/module-type-aliases": "3.10.2",
+    "@docusaurus/tsconfig": "3.10.2",
+    "@docusaurus/types": "3.10.2",
+    "typescript": "~6.0.3"
   },
   "browserslist": {
     "production": [
@@ -41,6 +42,12 @@
     ]
   },
   "engines": {
-    "node": ">=20.0"
+    "node": ">=22.22.2",
+    "yarn": "1.x"
+  },
+  "resolutions": {
+    "**/serialize-javascript": "7.0.7",
+    "**/sockjs/uuid": "11.1.1",
+    "**/brace-expansion": "5.0.9"
   }
 }

docs/tsconfig.json

@@ -2,7 +2,7 @@
   // This file is not used in compilation. It is here just for a nice editor experience.
   "extends": "@docusaurus/tsconfig",
   "compilerOptions": {
-    "baseUrl": "."
+    "ignoreDeprecations": "6.0"
   },
   "exclude": [".docusaurus", "build"]
 }