From 21ae77e69fecda4c11f84e748f4ea29eb0bc6cd0 Mon Sep 17 00:00:00 2001
From: Peter Dave Hello <hsu@peterdavehello.org>
Date: Mon, 26 Jan 2026 02:26:39 +0800
Subject: [PATCH] chore: Upgrade Node.js to v20.20.0 for security enhancements

This commit upgrades Node.js from v20.19.2 to v20.20.0.

This release includes security patches that address known
vulnerabilities, improving the overall security posture.

Reference:
- https://nodejs.org/en/blog/release/v20.20.0/
- https://nodejs.org/en/blog/vulnerability/january-2026-dos-mitigation-async-hooks/
---
 .github/actions/setup-node-pnpm/action.yml | 2 +-
 .nvmrc                                     | 2 +-
 .tool-versions                             | 2 +-
 package.json                               | 2 +-
 packages/evals/Dockerfile.runner           | 2 +-
 packages/evals/README.md                   | 2 +-
 packages/evals/scripts/setup.sh            | 6 +++---
 src/package.json                           | 2 +-
 8 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/actions/setup-node-pnpm/action.yml b/.github/actions/setup-node-pnpm/action.yml
index af9b45b5e96..3d933f7d01a 100644
--- a/.github/actions/setup-node-pnpm/action.yml
+++ b/.github/actions/setup-node-pnpm/action.yml
@@ -6,7 +6,7 @@ inputs:
     node-version:
         description: "Node.js version to use"
         required: false
-        default: "20.19.2"
+        default: "20.20.0"
     pnpm-version:
         description: "pnpm version to use"
         required: false
diff --git a/.nvmrc b/.nvmrc
index 1d898f1fe56..953490f51f6 100644
--- a/.nvmrc
+++ b/.nvmrc
@@ -1 +1 @@
-v20.19.2
+v20.20.0
diff --git a/.tool-versions b/.tool-versions
index 269cea0b28e..8df6dff3d7b 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -1 +1 @@
-nodejs 20.19.2
+nodejs 20.20.0
diff --git a/package.json b/package.json
index b93691d2693..d4d772b9ecd 100644
--- a/package.json
+++ b/package.json
@@ -2,7 +2,7 @@
 	"name": "roo-code",
 	"packageManager": "pnpm@10.8.1",
 	"engines": {
-		"node": "20.19.2"
+		"node": "20.20.0"
 	},
 	"scripts": {
 		"preinstall": "node scripts/bootstrap.mjs",
diff --git a/packages/evals/Dockerfile.runner b/packages/evals/Dockerfile.runner
index 5d8e1132061..66cb422fbdc 100644
--- a/packages/evals/Dockerfile.runner
+++ b/packages/evals/Dockerfile.runner
@@ -50,7 +50,7 @@ ENV MISE_DATA_DIR="/root/.local/share/mise"
 ENV PATH="/root/.local/share/mise/shims:/root/.local/bin:$PATH"
 
 # Define language runtime versions (matching setup.sh)
-ARG NODE_VERSION=20.19.2
+ARG NODE_VERSION=20.20.0
 ARG PYTHON_VERSION=3.13.2
 ARG GO_VERSION=1.24.2
 ARG RUST_VERSION=1.85.1
diff --git a/packages/evals/README.md b/packages/evals/README.md
index 8a54e56b819..7ada80308ec 100644
--- a/packages/evals/README.md
+++ b/packages/evals/README.md
@@ -81,7 +81,7 @@ cd packages/evals && ./scripts/setup.sh
 The setup script does the following:
 
 - Installs development tools: Homebrew, asdf, GitHub CLI, pnpm
-- Installs programming languages: Node.js 20.19.2, Python 3.13.2, Go 1.24.2, Rust 1.85.1, Java 17
+- Installs programming languages: Node.js 20.20.0, Python 3.13.2, Go 1.24.2, Rust 1.85.1, Java 17
 - Sets up VS Code with required extensions
 - Configures Docker services (PostgreSQL, Redis)
 - Clones/updates the evals repository
diff --git a/packages/evals/scripts/setup.sh b/packages/evals/scripts/setup.sh
index 60c5c53a42f..9ee9867fafe 100755
--- a/packages/evals/scripts/setup.sh
+++ b/packages/evals/scripts/setup.sh
@@ -184,8 +184,8 @@ fi
 # Install language runtimes via mise
 if ! command -v node &>/dev/null; then
   echo "📦 Installing Node.js via mise..."
-  mise install node@20.19.2 || exit 1
-  mise use --global node@20.19.2 || exit 1
+  mise install node@20.20.0 || exit 1
+  mise use --global node@20.20.0 || exit 1
   eval "$(mise activate bash)"
   NODE_VERSION=$(node --version)
   echo "✅ Node.js is installed ($NODE_VERSION)"
@@ -194,7 +194,7 @@ else
   echo "✅ Node.js is installed ($NODE_VERSION)"
 fi
 
-if [[ $(node --version) != "v20.19.2" ]]; then
+if [[ $(node --version) != "v20.20.0" ]]; then
   NODE_VERSION=$(node --version)
   echo "🚨 You have the wrong version of node installed ($NODE_VERSION)."
   echo "💡 If you are using nvm then run 'nvm install' to install the version specified by the repo's .nvmrc."
diff --git a/src/package.json b/src/package.json
index e5ade27ed3d..c571eae4341 100644
--- a/src/package.json
+++ b/src/package.json
@@ -11,7 +11,7 @@
 	},
 	"engines": {
 		"vscode": "^1.84.0",
-		"node": "20.19.2"
+		"node": "20.20.0"
 	},
 	"author": {
 		"name": "Roo Code"