NodeJS 20 is EOL in April 2026

[hashworks]

The UI currently requires NodeJS 20 "Iron" which will be EOL in April.

I've tested the latest LTS (24 "Krypton"), which fails to build:

Build Error (broccoli-persistent-filter:CleanCSSFilter)

util.isRegExp is not a function

But LTS 22 "Jod" (EOL 2027) seems to build just fine.

[heatherezell]

Thanks for raising this, and for testing newer Node versions.

We’ve reviewed the current UI build path, and Node 20 is used for the ui/ build and local development workflow, not as a runtime dependency in the shipped Vault binary. The production binary serves the built UI assets directly, so this is not a case where Vault is running a Node 20 server in production.

That said, the concern is still valid. Keeping the UI toolchain on an EOL Node release is something we want to address for security/supportability reasons and to avoid future build and dependency drift.

We’re planning to prioritize this work in the upcoming quarter, with Node 22 looking like the most likely target based on the current state of the build. We’ll update this issue as that work is scoped and scheduled.

Thanks again for flagging it.