Node.js v20 EOL & no longer compatible with cflinuxfs3

Products

• VMware Tanzu Build Service
• VMware Tanzu Platform - Cloud Foundry
• VMware Tanzu Platform - Hub
• Vmware Tanzu Platform - SM
• VMware Tanzu Platform
• VMware Tanzu Platform Core

Issue/Introduction

Applications currently using Node.js v20 cannot run on the cflinuxfs3 stack.

Key Deadlines & Impact

• Node.js v20 EOL: April 2026.
• Removal from Buildpack: Following the EOL date, Node.js v20 will be removed from the standard Node.js buildpack.
• Compatibility Conflict: Currently supported Node.js versions (v22+) have OpenSSL and glibc incompatibilities with cflinuxfs3.

Resolution

1. Move to cflinuxfs4 (Preferred)

This is the most sustainable path. cflinuxfs4 supports the libraries required by the latest Node.js LTS releases.

• Benefit: Ensures continuous security patches, performance improvements, and compliance.
• Action: Update manifest.yml to specify stack: cflinuxfs4 and test application compatibility.

2. Pin to Older Buildpack

Applications can be "pinned" to a specific buildpack version that still contains Node.js v20.

• Risk: This leaves applications running on an unsupported runtime. No further security patches will be provided for the runtime or any other dependencies provided by the buildpack (npm, yarn, etc), increasing vulnerability to CVEs.
• Use Case: Only recommended as a short-term stopgap if immediate migration to cflinuxfs4 is technically blocked.