fix(ci): read the Node version from .nvmrc instead of pinning it inline

[3uzbcqje]

The drift

pr-ci.yml hardcoded node-version: "20.11.1". The Dockerfile's base image is on a different track — Dependabot bumps it, because a docker image tag is something it manages, but it cannot see a version string inside workflow YAML. So CI and the image drifted apart with nothing to catch it.

That surfaced on #72, where @rstest/core, @rsbuild/core and @rspack/core all declare:

required: { node: '^20.19.0 || >=22.12.0' }
current:  { node: 'v20.11.1', npm: '10.2.4' }

CI's Node no longer satisfied what the dependencies asked for.

The change

• Adds .nvmrc pinned to 20.20.2, matching the Dockerfile tag Bump the "all-dependencies" group with 2 updates across multiple ecosystems #72 moves to.
• setup-node now uses node-version-file: .nvmrc, so the version lives in one place and nvm use picks it up locally too.

What this does not fix

#72 also fails on an unrelated Dependabot lockfile bug — @rstest/core@0.11.12 vendors @rspack/core@2.2.2, which needs @module-federation/* ^0.24.1 || ^2.0.0, but the lockfile carries only 0.22.0 and no nested 2.x tree. npm ci reports those six packages as missing from the lock. That needs the PR recreated or the lockfile regenerated, separately from this.

Remaining drift

.nvmrc and the Dockerfile tag still have to be moved together by hand — Dependabot updates the image tag but will not touch .nvmrc. This narrows the problem from two places to two places that are now one line apart and commented, rather than one being invisible. Genuinely closing it would mean templating the Dockerfile FROM from .nvmrc at build time, which is a bigger change than this warrants.

🤖 Generated with Claude Code

https://claude.ai/code/session_01XKNMLCKoVr8Xz1HePmDBXs

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: f1b70cbb-1b6b-477c-b94f-a4f3217a2f83

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}