Bumped all dependencies and modernised CI for Node 20+/22+/24+

Fixes #1824 — prebuild-install failing on Node 22.14.0 due to
N-API version string comparison bug in napi-build-utils < 2.0.0.

Dependencies:
- prebuild-install: ^7.1.1 -> ^7.1.3 (fixes N-API version detection)
- prebuild: 12.1.0 -> 13.0.1
- tar: ^6.1.11 -> ^7.5.10 (fixes 6 HIGH CVEs)
- node-addon-api: ^7.0.0 -> ^8.0.0
- node-gyp: 8.x -> 12.x (peer + optional)
- Added engines field: node >=20.17.0

CI:
- Node 18 -> 24, ubuntu-20.04 -> ubuntu-24.04, alpine3.15 -> alpine3.20
- Replaced macos-m1 self-hosted with macos-latest (now ARM64)
- Removed pip install setuptools workaround
- Updated actions (checkout v6, setup-node v6, upload-artifact v7,
  setup-qemu-action v4, setup-buildx-action v4)
- Dockerfile: Node 18 -> 24, bullseye -> bookworm

Author: jonatansberg

.github/workflows/ci.yml

@@ -20,39 +20,31 @@ jobs:
       matrix:
         os:
           - macos-latest
-          - ubuntu-20.04
+          - ubuntu-24.04
           - windows-latest
         host:
           - x64
         target:
           - x64
         node:
-          - 18
+          - 24
         include:
           - os: windows-latest
-            node: 18
+            node: 24
             host: x86
             target: x86
-          - os: macos-m1
-            node: 18
+          - os: macos-latest
+            node: 24
             host: arm64
             target: arm64
     name: ${{ matrix.os }} (host=${{ matrix.host }}, target=${{ matrix.target }})
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node }}
           architecture: ${{ matrix.host }}
 
-      - name: Add yarn (self-hosted)
-        if: matrix.os == 'macos-m1'
-        run: npm install -g yarn
-
-      - name: Add setuptools for Python 3.12 (temp)
-        if: matrix.os != 'macos-m1'
-        run: pip install setuptools
-
       - name: Add msbuild to PATH
         uses: microsoft/setup-msbuild@v1.3
         if: contains(matrix.os, 'windows')
@@ -98,16 +90,16 @@ jobs:
         run: yarn test
 
       - name: Upload binaries to commit artifacts
-        uses: actions/upload-artifact@v4
-        if: matrix.node == 18
+        uses: actions/upload-artifact@v7
+        if: matrix.node == 24
         with:
           name: prebuilt-binaries
           path: prebuilds/*
           retention-days: 7
 
       - name: Upload binaries to GitHub Release
         run: yarn upload --upload-all ${{ github.token }}
-        if: matrix.node == 18 && startsWith(github.ref, 'refs/tags/')
+        if: matrix.node == 24 && startsWith(github.ref, 'refs/tags/')
 
   build-qemu:
     runs-on: ubuntu-latest
@@ -116,26 +108,26 @@ jobs:
       fail-fast: false
       matrix:
         node:
-          - 18
+          - 24
         target:
           - linux/arm64
         variant:
-          - bullseye
-          - alpine3.15
+          - bookworm
+          - alpine3.20
         include:
           # musl x64 builds
           - target: linux/amd64
             variant: alpine3.15
-            node: 18
+            node: 24
     name: ${{ matrix.variant }} (node=${{ matrix.node }}, target=${{ matrix.target }})
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+      - uses: actions/checkout@v6
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Build binaries and test
         run: |
@@ -152,13 +144,13 @@ jobs:
           docker cp $CONTAINER_ID:/usr/src/build/prebuilds/ ./prebuilds
 
       - name: Upload binaries to commit artifacts
-        uses: actions/upload-artifact@v4
-        if: matrix.node == 18
+        uses: actions/upload-artifact@v7
+        if: matrix.node == 24
         with:
           name: prebuilt-binaries
           path: prebuilds/*
           retention-days: 7
 
       - name: Upload binaries to GitHub Release
         run: yarn install --ignore-scripts && yarn upload --upload-all ${{ github.token }}
-        if: matrix.node == 18 && startsWith(github.ref, 'refs/tags/')
+        if: matrix.node == 24 && startsWith(github.ref, 'refs/tags/')

README.md

@@ -36,7 +36,7 @@ yarn add sqlite3
 
 ### Prebuilt binaries
 
-`sqlite3` v5+ was rewritten to use [Node-API](https://nodejs.org/api/n-api.html) so prebuilt binaries do not need to be built for specific Node versions. `sqlite3` currently builds for both Node-API v3 and v6. Check the [Node-API version matrix](https://nodejs.org/api/n-api.html#node-api-version-matrix) to ensure your Node version supports one of these. The prebuilt binaries should be supported on Node v10+.
+`sqlite3` v5+ was rewritten to use [Node-API](https://nodejs.org/api/n-api.html) so prebuilt binaries do not need to be built for specific Node versions. `sqlite3` currently builds for both Node-API v3 and v6. Check the [Node-API version matrix](https://nodejs.org/api/n-api.html#node-api-version-matrix) to ensure your Node version supports one of these. The prebuilt binaries should be supported on Node v20.17.0+.
 
 The module uses [`prebuild-install`](https://github.com/prebuild/prebuild-install) to download the prebuilt binary for your platform, if it exists. These binaries are hosted on GitHub Releases for `sqlite3` versions above 5.0.2, and they are hosted on S3 otherwise. The following targets are currently provided:
 

package.json

@@ -45,25 +45,28 @@
   },
   "dependencies": {
     "bindings": "^1.5.0",
-    "node-addon-api": "^7.0.0",
-    "prebuild-install": "^7.1.1",
-    "tar": "^6.1.11"
+    "node-addon-api": "^8.0.0",
+    "prebuild-install": "^7.1.3",
+    "tar": "^7.5.10"
   },
   "devDependencies": {
     "eslint": "8.56.0",
     "mocha": "10.2.0",
-    "prebuild": "12.1.0"
+    "prebuild": "13.0.1"
   },
   "peerDependencies": {
-    "node-gyp": "8.x"
+    "node-gyp": "12.x"
   },
   "peerDependenciesMeta": {
     "node-gyp": {
       "optional": true
     }
   },
   "optionalDependencies": {
-    "node-gyp": "8.x"
+    "node-gyp": "12.x"
+  },
+  "engines": {
+    "node": ">=20.17.0"
   },
   "scripts": {
     "install": "prebuild-install -r napi || node-gyp rebuild",

tools/BinaryBuilder.Dockerfile

@@ -1,5 +1,5 @@
-ARG NODE_VERSION=18
-ARG VARIANT=bullseye
+ARG NODE_VERSION=24
+ARG VARIANT=bookworm
 
 FROM node:$NODE_VERSION-$VARIANT
 

tools/semver-check.js

@@ -2,7 +2,7 @@ const fs = require('fs');
 const path = require('path');
 const semver = require('semver');
 
-const supportedVersions = '10.12.0';
+const supportedVersions = '20.17.0';
 
 function checkEngines(modulePath) {
     const packageJsonPath = path.join(modulePath, 'package.json');