chore: update engines, dependencies & version for a release

.github/copilot-instructions.md

@@ -14,9 +14,9 @@ minified JavaScript bookmarklets.
   scripts
 - **Lines of Code**: 21 TypeScript source files in `src/`, 6 Node.js scripts
   in `scripts/`
-- **Node Version Required**: >=24.13.1 (strict requirement via
+- **Node Version Required**: >=26.0 (strict requirement via
   `engineStrict: true`)
-- **npm Version Required**: >=11.8.0
+- **npm Version Required**: >=11.13
 - **Primary Output**: 21 `.bookmarklet` files in `dist/` directory
 
 ## Critical Build Instructions
@@ -26,8 +26,8 @@ minified JavaScript bookmarklets.
 **ALWAYS use the correct Node.js and npm versions.** The project uses
 `engineStrict: true` and requires:
 
-- Node.js >= 24.12.0
-- npm >= 11.6.0
+- Node.js >= 26.0
+- npm >= 11.13
 
 If you get version warnings during `npm ci`, the build may still work but is
 not supported.
@@ -172,7 +172,7 @@ Located in `.github/workflows/`:
 
 1. **`ci.yml`** - NodeJS Build
    - Triggers: push to main/hotfix, PRs to main
-   - Matrix: Node 24.x and 25.x
+   - Matrix: Node 26.x
    - Steps: Security audit → Install deps → Build & test → Generate SBOM
    - **Timeout**: 5 minutes
 
@@ -232,8 +232,7 @@ Check that builds still work after updates.
 **Issue**: If you see `EBADENGINE Unsupported engine` warnings:
 
 ```text
-npm warn EBADENGINE required: { node: '>=24.13.1', npm: '>=11.8.0' }
-npm warn EBADENGINE current: { node: 'v20.19.6', npm: '10.8.2' }
+npm warn EBADENGINE required: { node: '>=26.0', npm: '>=11.13' }
 ```
 
 **Workaround**: The build may work but is not officially supported. Upgrade

.github/workflows/ci.yml

@@ -22,7 +22,7 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [24.x, 25.x]
+        node-version: [26.x]
       fail-fast: false
 
     steps:

.github/workflows/linter.yml

@@ -29,7 +29,7 @@ jobs:
       - name: "Setup Node.js"
         uses: actions/setup-node@v6
         with:
-          node-version: '24.x'
+          node-version: '26.x'
           cache: 'npm'
 
       - name: "Install Dependencies"

.github/workflows/release.yml

@@ -37,7 +37,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: 24.x
+          node-version: 26.x
           cache: 'npm'
 
       - name: Security Audit
@@ -184,7 +184,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: 24.x
+          node-version: 26.x
           cache: 'npm'
           cache-dependency-path: release-source/package-lock.json
 

README.md

@@ -266,6 +266,8 @@ using a URL protocol scheme.
 
 ## Version Notes
 
+4.2.4 Update engines (node >=26.0, npm >=11.13) and dependencies
+
 4.2.3 Fix unskim regex issue, update dependency integrate a "clean" into compile
 
 4.2.2 UtmStrip removes 7 additional ad-platform click IDs and affiliate tracking

package.json

@@ -10,19 +10,19 @@
   "description": "Project that makes Safari bookmarklets to automagically jump to the corresponding app and more.",
   "devDependencies": {
     "@eslint/js": "10.0.1",
-    "@types/node": "25.6.0",
+    "@types/node": "25.6.2",
     "@typescript-eslint/eslint-plugin": "~8.59.2",
     "@typescript-eslint/parser": "~8.59.2",
     "eslint": "10.3.0",
     "eslint-plugin-no-unsanitized": "~4.1.5",
     "globals": "17.6.0",
     "markdownlint-cli2": "~0.22.1",
-    "terser": "5.46.2",
+    "terser": "5.47.1",
     "typescript": "6.0.3"
   },
   "engines": {
-    "node": ">=24.13.1",
-    "npm": ">=11.8.0"
+    "node": ">=26.0",
+    "npm": ">=11.13"
   },
   "engineStrict": true,
   "homepage": "https://github.com/mobilemind/OpenInlets#readme",
@@ -62,5 +62,5 @@
     "test": "npm run build && node scripts/test-utmstrip.js && npm run verify-build",
     "verify-build": "node scripts/verify-build.js"
   },
-  "version": "4.2.3"
+  "version": "4.2.4"
 }