feat: support Node.js 26

[styfle]

Summary

• Add Node.js 26 to the CI test matrix
• Update npm package manager metadata and Node typings
• Bump Node 26-sensitive integration dependencies and refresh affected fixtures
• Skip Node 26-incompatible Datadog/PhantomJS fixtures via skipOnNode26AndAbove
• Keep phantomjs-prebuilt as a real devDependency and fixture for Node 20/22/24 coverage
• Use a Node script in CI to remove phantomjs-prebuilt from the Node 26 install manifest, since the PhantomJS fixture is skipped on Node 26 and its unsupported installer blocks Windows/macOS installs

Coverage comparison

• With phantomjs-prebuilt: lines 91.03%, functions 96.36%, branches 88.31%
• After removing phantomjs-prebuilt: tests pass, but functions drop to 95.75%
• Kept the fixture because it covers a unique source path

Testing

• npx npm@11.14.1 install
• npx npm@11.14.1 run build
• npx npm@11.14.1 run prettier-check
• npx jest --verbose test/unit.test.js -t "phantomjs-prebuilt|datadog-pprof-node-gyp"
• npx -y -p node@20 -c 'node -v && node node_modules/typescript/bin/tsc --sourceMap && node node_modules/jest/bin/jest.js --verbose test/unit.test.js -t "phantomjs-prebuilt|module-sync-condition-es-node20|module-sync-condition-cjs-node20"'
• npx npm@11.14.1 run test-verbose
• npx -y -p node@26 -c 'node node_modules/typescript/bin/tsc --sourceMap && node node_modules/jest/bin/jest.js --verbose --coverage --globals "{\"coverage\":true}"'

  

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​twilio@​5.5.2 ⏵ 6.0.2	-33		+1	+3
	npm/​auth0@​3.7.2 ⏵ 5.9.1	-22			+1
	npm/​@​types/​node@​14.18.63 ⏵ 25.7.0			+1
	npm/​axios@​1.13.2 ⏵ 1.16.0	-10	+50
	npm/​@​datadog/​pprof@​5.9.0 ⏵ 5.14.1			+1
	npm/​@​google-cloud/​bigquery@​7.9.2 ⏵ 8.3.1			+1	+4
	npm/​firebase-admin@​13.2.0 ⏵ 13.9.0	+1		+1	+3

View full report