Launch issues with Node 25.6

[dombarnes]

Before filing this issue, please ensure you're using the latest CLI by running swa --version and comparing to the latest version on npm.

Are you accessing the CLI from the default port :4280 ?

• No, I am using a different port number (--port) and accessing the CLI from that port
• Yes, I am accessing the CLI from port :4280

Make sure you are accessing the URL printed in the console when running swa start!

ℹ️ NOTE: Make sure to enable debug logs when running any swa commands using --verbose=silly

Describe the bug
A clear and concise description of what the bug is.
swa fails to load under Node 25.6.0 due it compatibility issue with buffer-equa-constant-time and jwa package

yarn az:deploy
/Users/<user>/projects/myproject/node_modules/buffer-equal-constant-time/index.js:37
var origSlowBufEqual = SlowBuffer.prototype.equal;
                                  ^

TypeError: Cannot read properties of undefined (reading 'prototype')
    at Object.<anonymous> (/Users/<user>/projects/myproject/node_modules/buffer-equal-constant-time/index.js:37:35)
    at Module._compile (node:internal/modules/cjs/loader:1809:14)
    at Object..js (node:internal/modules/cjs/loader:1940:10)
    at Module.load (node:internal/modules/cjs/loader:1530:32)
    at Module._load (node:internal/modules/cjs/loader:1332:12)
    at wrapModuleLoad (node:internal/modules/cjs/loader:255:19)
    at Module.require (node:internal/modules/cjs/loader:1553:12)
    at require (node:internal/modules/helpers:152:16)
    at Object.<anonymous> (/Users/<user>/projects/myproject/node_modules/jws/node_modules/jwa/index.js:1:19)
    at Module._compile (node:internal/modules/cjs/loader:1809:14)

Note: yarn az:deploy is an alias for swa build && swa deploy --env production

Related: auth0/node-jsonwebtoken#992

To Reproduce
Steps to reproduce the behavior:

1. Install Node 25.6.0 (I used mise)
2. yarn swa -h
3. Error thrown

Expected behavior
swa tool does whatever you asked it to

Screenshots
If applicable, add screenshots to help explain your problem.
N/A

Desktop (please complete the following information):

• OS: [e.g. iOS] macOS 26.2
• Version [e.g. 22] Node 25.6.0, "@azure/static-web-apps-cli": "^2.0.8"

Additional context
Add any other context about the problem here.

[LongOddCode]

Confirmed as a transitive issue that the CLI cannot fix locally. Full dependency chain:

@azure/static-web-apps-cli
 └─ @azure/msal-node (latest: 5.1.3)
     └─ jsonwebtoken@^9.0.0  (latest: 9.0.3)
         └─ jws@^4.0.1
             └─ jwa@^2.0.0
                 └─ buffer-equal-constant-time@1.0.1   ← crashes on Node 25

Why no clean fix from SWA CLI

• buffer-equal-constant-time is the crashing module (uses SlowBuffer, removed in Node 25). Only versions 1.0.0 and 1.0.1 exist on npm and the repo is effectively unmaintained.
• Every jwa version (1.x and 2.x) declares it as a direct dependency — bumping jsonwebtoken / jws / jwa doesn't help.
• @azure/msal-node still depends on jsonwebtoken@^9 in the latest release (v5.1.3).
• An npm overrides pin would require a community-maintained fork of buffer-equal-constant-time; I couldn't find a trusted one. Publishing one from this repo is out of scope.

Upstream

The real fix has to land in jsonwebtoken / jwa / buffer-equal-constant-time — tracked at auth0/node-jsonwebtoken#992.

Workaround

Use a Node LTS release (18, 20, 22, or 24). SWA CLI's documented support matrix is LTS only — Node 25 is a current/odd release and is not expected to be supported until the LTS cadence catches up and the upstream jwa / buffer-equal-constant-time chain is patched.

Happy to revisit if anyone knows of a maintained buffer-equal-constant-time replacement we could pin via overrides.