allegro · adrianmroz-allegro · Sep 21, 2022 · Sep 20, 2022 · Sep 20, 2022 · Sep 20, 2022
@@ -13,7 +13,7 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [ 14.x, 16.x ]
+        node-version: [ 14.20.0, 16.15.0 ]
 
     steps:
       - name: Checkout

@@ -16,6 +16,7 @@ jobs:
     # add permission to comment PR created by dependantbot
     permissions:
       issues: write
+      pull-requests: write
 
     steps:
       - name: Checkout

@@ -14,6 +14,7 @@ jobs:
     # add permission to comment PR created by dependantbot
     permissions:
       issues: write
+      pull-requests: write
 
     steps:
       - name: Checkout
@@ -22,7 +23,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v1
         with:
-          node-version: 16.x
+          node-version: 16.15.0
 
       - name: Cache Node.js modules
         uses: actions/cache@v2

@@ -24,7 +24,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v1
         with:
-          node-version: '16.x'
+          node-version: '16.15.0'
 
       - name: Cache Node.js modules
         uses: actions/cache@v2

@@ -29,7 +29,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v1
         with:
-          node-version: '16.x'
+          node-version: '16.15.0'
 
       - name: Cache Node.js modules
         uses: actions/cache@v2

@@ -14,7 +14,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v1
         with:
-          node-version: 16.x
+          node-version: 16.15.0
 
       - name: Cache Node.js modules
         uses: actions/cache@v2

@@ -1,5 +1,6 @@
 #
 # BUILD stage
+# Use last supported node version (16.15.0) for build
 #
 FROM node:16.15.0 AS build
 
@@ -20,6 +21,7 @@ RUN npm prune --production
 
 #
 # RUNTIME stage
+# We pick last node 16.x to get recommended security updates. Any 16.x node should work as runtime.
 #
 FROM gcr.io/distroless/nodejs:16 as runtime
 

@@ -51,6 +51,15 @@ or join the chat on [Slack](https://join.slack.com/t/turnilo/shared_invite/enQtO
 
 * [Node.js](https://nodejs.org/) - 14.x or 16.x version
 
+:warning:
+We test builds with 14.20.0 and 16.15.0
+
+:warning:
+Turnilo build works only up to 16.15.0 node version. 
+Due to new npm dependency resolving algorithm and old peer dependencies around sass Turnilo can't be built with newer node versions.
+Relevant [npm issue](https://github.com/npm/cli/issues/4998).
+We would be happy to accept any help with updating dependencies!
+
 :warning:
 Do not use `yarn` command for dependency management and project build, use `npm` instead.
 With `npm` builds are reproducible (thanks to package-lock.json) and even faster than with `yarn`.