sidhujag · Oct 26, 2026 · Oct 26, 2026
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -20,9 +20,8 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        # package.json engines is ">=20 <24"; cover both active LTS
-        # lines so a bump in either doesn't silently break CI.
-        node: ['20', '22']
+        # Match the patched runtime used for development and deployment.
+        node: ['26.12.1']
 
     env:
       CI: 'true'
@@ -67,15 +66,15 @@ jobs:
         run: npm run build
 
       - name: Install browser for recovery-alert layout checks
-        if: matrix.node == '22'
+        if: matrix.node == '26.12.1'
         run: npx playwright install --with-deps chromium
 
       - name: Check recovery and dashboard browser flows and small windows
-        if: matrix.node == '22'
+        if: matrix.node == '26.12.1'
         run: npx playwright test --config playwright.config.cjs tests/browser/recovery-alerts.spec.cjs tests/browser/network-availability.spec.cjs
 
       - name: Preserve recovery-alert screenshots and failure traces
-        if: always() && matrix.node == '22'
+        if: always() && matrix.node == '26.12.1'
         uses: actions/upload-artifact@v4
         with:
           name: recovery-alert-browser
@@ -96,7 +95,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@v4
         with:
-          node-version: '22'
+          node-version: '26.12.1'
       - name: Request exact-commit deployment
         run: node scripts/request-deploy.cjs frontend
         env:

diff --git a/.nvmrc b/.nvmrc
@@ -0,0 +1 @@
+26.12.1
diff --git a/README.md b/README.md
@@ -195,3 +195,8 @@ This frontend should not contain private keys, RPC credentials, server secrets,
 
 If you discover a security issue, please avoid opening a public issue with exploit details. Contact the maintainers privately first so it can be reviewed responsibly.
 
+
+## Development runtime
+
+Use Node.js 26.12.1 or a newer patched 26.x release. The exact development and CI version is recorded in `.nvmrc`; run `nvm install && nvm use` before installing dependencies.
+
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -4,7 +4,7 @@
   "version": "0.1.0",
   "private": true,
   "engines": {
-    "node": ">=20.19.0 <24",
+    "node": ">=26.12.1 <27",
     "npm": ">=10"
   },
   "dependencies": {
Original file line number	Diff line number	Diff line change
Expand Up		@@ -195,3 +195,8 @@ This frontend should not contain private keys, RPC credentials, server secrets,

		If you discover a security issue, please avoid opening a public issue with exploit details. Contact the maintainers privately first so it can be reviewed responsibly.


		## Development runtime

		Use Node.js 26.12.1 or a newer patched 26.x release. The exact development and CI version is recorded in `.nvmrc`; run `nvm install && nvm use` before installing dependencies.