Old app nobody dares to touch, still on Node.js 20?
Node.js 20 reached end of life on 30 April 2026 and gets no more security fixes, and Node.js 22 follows on 30 April 2027 (Node.js release schedule). Code nobody understands is code nobody upgrades.
I pin today’s behavior with tests first, then upgrade and refactor in small merges: a coding agent does the mechanical parts and a person approves every merge. You also get a runbook and an architecture note written from the code, so the next person does not start blind. On an app like that, a report once broke on years‑old orphaned data; the same day I shipped a hotfix, said plainly it was a stopgap, and handed the team the root cause and the proper fix to finish.
