feat: require Node.js >=22.21.0 and drop EOL Node.js 20

.github/workflows/guard.yml

@@ -31,7 +31,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        node: [22, 24, 25]
+        node: [22, 24, 26]
     permissions:
       contents: read
     steps:
@@ -110,7 +110,7 @@ jobs:
             node-version: 24
           - runtime: node
             script: test-runtime-node
-            node-version: 25
+            node-version: 26
           - runtime: fetch
             script: test-runtime-fetch
             node-version: 22
@@ -119,7 +119,7 @@ jobs:
             node-version: 24
           - runtime: fetch
             script: test-runtime-fetch
-            node-version: 25
+            node-version: 26
           - runtime: cloudflare
             script: test-runtime-cloudflare
           - runtime: bun

.github/workflows/reusable-examples.yml

@@ -63,7 +63,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
-          node-version: 20
+          node-version: 22
       - uses: denoland/setup-deno@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb # v2.0.3
         with:
           deno-version: v2.4.2
@@ -104,7 +104,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
-          node-version: ${{ matrix.node-version || '20' }}
+          node-version: ${{ matrix.node-version || '22' }}
       - run: npm ci && npm run build
       - run: npm ci
         working-directory: "examples/${{matrix.folder}}"

.github/workflows/reusable-test.yml

@@ -58,7 +58,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
-          node-version: 20
+          node-version: 22
       - uses: denoland/setup-deno@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb # v2.0.3
         with:
           deno-version: v2.4.2
@@ -72,9 +72,9 @@ jobs:
       fail-fast: false
       matrix:
         node:
-          - 20
           - 22
           - 24
+          - 26
         os: [ubuntu-latest]
     permissions:
       contents: read

analyze-wasm/package.json

@@ -28,7 +28,7 @@
     "url": "https://arcjet.com"
   },
   "engines": {
-    "node": ">=20"
+    "node": ">=22.21.0 <23 || >=24.5.0"
   },
   "type": "module",
   "main": "./index.js",
@@ -65,7 +65,7 @@
     "@arcjet/rollup-config": "1.5.0",
     "@bytecodealliance/jco": "1.5.0",
     "@rollup/wasm-node": "4.61.0",
-    "@types/node": "24.12.4",
+    "@types/node": "22.19.21",
     "eslint": "9.39.4",
     "typescript": "5.9.3"
   },

analyze/package.json

@@ -27,7 +27,7 @@
     "url": "https://arcjet.com"
   },
   "engines": {
-    "node": ">=20"
+    "node": ">=22.21.0 <23 || >=24.5.0"
   },
   "type": "module",
   "main": "./index.js",
@@ -52,7 +52,7 @@
     "@arcjet/rollup-config": "1.5.0",
     "@bytecodealliance/jco": "1.5.0",
     "@rollup/wasm-node": "4.61.0",
-    "@types/node": "24.12.4",
+    "@types/node": "22.19.21",
     "eslint": "9.39.4",
     "typescript": "5.9.3"
   },

arcjet-fastify/package.json

@@ -39,7 +39,7 @@
     "url": "https://arcjet.com"
   },
   "engines": {
-    "node": ">=20"
+    "node": ">=22.21.0 <23 || >=24.5.0"
   },
   "type": "module",
   "exports": "./index.js",
@@ -52,8 +52,7 @@
     "lint": "eslint .",
     "prepublishOnly": "npm run build",
     "test-api": "node --test -- test/*.test.js",
-    "test-coverage#": "TODO: after node 20, use: ` --test-coverage-branches=100 --test-coverage-exclude \"../{analyze-wasm,analyze,arcjet,cache,duration,env,headers,ip,logger,protocol,runtime,sprintf,stable-hash,transport}/**/*.{js,ts}\" --test-coverage-exclude \"test/**/*.{js,ts}\" --test-coverage-functions=100 --test-coverage-lines=100`",
-    "test-coverage": "node --experimental-test-coverage --test -- test/*.test.js",
+    "test-coverage": "node --experimental-test-coverage --test --test-coverage-branches=80 --test-coverage-exclude \"../{analyze-wasm,analyze,arcjet,cache,duration,env,headers,ip,logger,protocol,runtime,sprintf,stable-hash,transport}/**/*.{js,ts}\" --test-coverage-exclude \"test/**/*.{js,ts}\" --test-coverage-functions=100 --test-coverage-lines=90 -- test/*.test.js",
     "test": "npm run build && npm run lint && npm run test-coverage"
   },
   "dependencies": {
@@ -73,7 +72,7 @@
     "@arcjet/eslint-config": "1.5.0",
     "@arcjet/rollup-config": "1.5.0",
     "@rollup/wasm-node": "4.61.0",
-    "@types/node": "24.12.4",
+    "@types/node": "22.19.21",
     "eslint": "9.39.4",
     "fastify": "5.8.5",
     "typescript": "5.9.3"

arcjet-guard/CONTRIBUTING.md

@@ -2,7 +2,7 @@
 
 ## Prerequisites
 
-- Node.js >= 22.18.0
+- Node.js >= 22.21.0 (`>=22.21.0 <23 || >=24.5.0`)
 - npm
 
 Optional for runtime tests:

arcjet-guard/README.md

@@ -417,11 +417,17 @@ You can also manage sites and keys with the CLI: `npx @arcjet/cli`.
 
 | Runtime            | Minimum version          |
 | ------------------ | ------------------------ |
-| Node.js            | 22.18.0                  |
+| Node.js            | 22.21.0 [^node]          |
 | Bun                | 1.3.0                    |
 | Deno               | `stable` / `lts`         |
 | Cloudflare Workers | compat date `2025-09-01` |
 
+[^node]:
+    Requires `>=22.21.0 <23 || >=24.5.0`. Node.js 20 is end-of-life and Node.js
+    23 is not supported; on the 24 line the built-in HTTP agent proxy support
+    used for the API transport landed in 24.5.0. Anyone tracking an active LTS
+    release is unaffected.
+
 > [!TIP]
 > Import from `@arcjet/guard` — the correct transport is selected
 > automatically via conditional exports (HTTP/2 on Node.js and Bun,