Looks good to me. Would it be worth deviating from mozilla and use the latest v10 version instead? (currently v10.20.1)
I am not convinced it would be. First, Mozilla might have a reason to stick to this particular version (we have seen [comment:7:ticket:30321 weird bugs in node before] which we'd maybe need to work around otherwise). Second, I plan to have a script to alert us once we deviate from Mozilla's toolchain requirements so we can adapt. I believe the more we differ from what Mozilla is using the harder it will be to keep track. Third, it's a compile-time dependency, no runtime dependency. Thus, updating to the latest and greatest version security-wise is not as urgent IMO.
Trac: Keywords: GeorgKoppen202005, TorBrowserTeam202006R deleted, TorBrowserTeam202006, GeorgKoppen202006 added Summary: Bump node version to v10.19 to Bump node version to v10.21.0 Points: N/Ato 0.1