@openrewrite/recipes-nodejs 0.51.1 → 0.51.2

package/dist/migrate/upgrade-node-22.js

@@ -19,7 +19,7 @@ const process_features_tls_1 = require("./process-features-tls");
 const util_type_checking_1 = require("./util-type-checking");
 const util_extend_1 = require("./util-extend");
 const buffer_slice_1 = require("./buffer-slice");
-const process_exit_code_1 = require("./process-exit-code");
+const upgrade_node_20_1 = require("./upgrade-node-20");
 const increase_node_engine_version_1 = require("./increase-node-engine-version");
 const increase_node_engine_version_in_github_actions_1 = require("./increase-node-engine-version-in-github-actions");
 const find_punycode_usage_1 = require("./find-punycode-usage");
@@ -34,8 +34,7 @@ const node22RuntimeDeprecations = [
     new util_extend_1.ReplaceUtilExtend(),
     new crypto_constructors_1.ReplaceCryptoConstructors(),
 ];
-const olderDeprecations = [
-    new process_exit_code_1.AvoidImplicitCoercionOfExitCode(),
+const docOnlyDeprecations = [
     new buffer_slice_1.ReplaceDeprecatedBufferSlice(),
     new process_features_tls_1.RemoveUsageOfProcessFeaturesTlsConstants(),
     new promisify_on_promise_1.RemovePromisifyOnPromise(),
@@ -45,7 +44,7 @@ class UpgradeNode22 extends rewrite_1.Recipe {
         super(...arguments);
         this.name = "org.openrewrite.node.migrate.upgrade-node-22";
         this.displayName = "Upgrade to Node.js 22";
-        this.description = "Migrate deprecated APIs for Node.js 22 compatibility. Addresses Node 22 runtime deprecations and deprecations from earlier versions.";
+        this.description = "Migrate deprecated APIs for Node.js 22 compatibility. Includes all migrations from Node.js 20, plus Node 21 and Node 22 deprecations.";
     }
     recipeList() {
         return __awaiter(this, void 0, void 0, function* () {
@@ -53,9 +52,10 @@ class UpgradeNode22 extends rewrite_1.Recipe {
                 new increase_node_engine_version_1.IncreaseNodeEngineVersion({ version: "22" }),
                 new increase_node_engine_version_in_github_actions_1.IncreaseNodeEngineVersionInGithubActions({ version: "22" }),
                 yield (0, rpc_1.prepareJavaRecipe)("org.openrewrite.nodejs.migrate.UpgradeNodeVersion", { version: "22" }),
+                new upgrade_node_20_1.UpgradeNode20(),
                 ...node22EolDeprecations,
                 ...node22RuntimeDeprecations,
-                ...olderDeprecations,
+                ...docOnlyDeprecations,
             ];
         });
     }

package/dist/migrate/upgrade-node-22.js.map

@@ -1 +1 @@
-{"version":3,"file":"upgrade-node-22.js","sourceRoot":"","sources":["../../src/migrate/upgrade-node-22.ts"],"names":[],"mappings":";;;;;;;;;;;;AAKA,kDAA4C;AAC5C,kDAA2D;AAC3D,iEAAgE;AAChE,uDAAqE;AACrE,+DAAgE;AAChE,iEAAgF;AAChF,6DAAkE;AAClE,+CAAgD;AAChD,iDAA4D;AAC5D,2DAAoE;AACpE,iFAAyE;AACzE,qHAA0G;AAC1G,+DAAwD;AACxD,2EAAmE;AAGnE,MAAM,qBAAqB,GAAa;IACpC,IAAI,oDAAkC,EAAE;IACxC,IAAI,uCAAiB,EAAE;IACvB,IAAI,kDAAsB,EAAE;CAC/B,CAAC;AAGF,MAAM,yBAAyB,GAAa;IACxC,IAAI,iDAA4B,EAAE;IAClC,IAAI,+BAAiB,EAAE;IACvB,IAAI,+CAAyB,EAAE;CAClC,CAAC;AAGF,MAAM,iBAAiB,GAAa;IAChC,IAAI,mDAA+B,EAAE;IACrC,IAAI,2CAA4B,EAAE;IAClC,IAAI,+DAAwC,EAAE;IAC9C,IAAI,+CAAwB,EAAE;CACjC,CAAC;AAEF,MAAa,aAAc,SAAQ,gBAAM;IAAzC;;QACa,SAAI,GAAG,8CAA8C,CAAC;QACtD,gBAAW,GAAG,uBAAuB,CAAC;QACtC,gBAAW,GAAG,sIAAsI,CAAC;IAYlK,CAAC;IAVS,UAAU;;YACZ,OAAO;gBACH,IAAI,wDAAyB,CAAC,EAAC,OAAO,EAAE,IAAI,EAAC,CAAC;gBAC9C,IAAI,yFAAwC,CAAC,EAAC,OAAO,EAAE,IAAI,EAAC,CAAC;gBAC7D,MAAM,IAAA,uBAAiB,EAAC,mDAAmD,EAAE,EAAC,OAAO,EAAE,IAAI,EAAC,CAAC;gBAC7F,GAAG,qBAAqB;gBACxB,GAAG,yBAAyB;gBAC5B,GAAG,iBAAiB;aACvB,CAAC;QACN,CAAC;KAAA;CACJ;AAfD,sCAeC"}
+{"version":3,"file":"upgrade-node-22.js","sourceRoot":"","sources":["../../src/migrate/upgrade-node-22.ts"],"names":[],"mappings":";;;;;;;;;;;;AAKA,kDAA4C;AAC5C,kDAA2D;AAC3D,iEAAgE;AAChE,uDAAqE;AACrE,+DAAgE;AAChE,iEAAgF;AAChF,6DAAkE;AAClE,+CAAgD;AAChD,iDAA4D;AAC5D,uDAAgD;AAChD,iFAAyE;AACzE,qHAA0G;AAC1G,+DAAwD;AACxD,2EAAmE;AAGnE,MAAM,qBAAqB,GAAa;IACpC,IAAI,oDAAkC,EAAE;IACxC,IAAI,uCAAiB,EAAE;IACvB,IAAI,kDAAsB,EAAE;CAC/B,CAAC;AAGF,MAAM,yBAAyB,GAAa;IACxC,IAAI,iDAA4B,EAAE;IAClC,IAAI,+BAAiB,EAAE;IACvB,IAAI,+CAAyB,EAAE;CAClC,CAAC;AAGF,MAAM,mBAAmB,GAAa;IAClC,IAAI,2CAA4B,EAAE;IAClC,IAAI,+DAAwC,EAAE;IAC9C,IAAI,+CAAwB,EAAE;CACjC,CAAC;AAEF,MAAa,aAAc,SAAQ,gBAAM;IAAzC;;QACa,SAAI,GAAG,8CAA8C,CAAC;QACtD,gBAAW,GAAG,uBAAuB,CAAC;QACtC,gBAAW,GAAG,uIAAuI,CAAC;IAanK,CAAC;IAXS,UAAU;;YACZ,OAAO;gBACH,IAAI,wDAAyB,CAAC,EAAC,OAAO,EAAE,IAAI,EAAC,CAAC;gBAC9C,IAAI,yFAAwC,CAAC,EAAC,OAAO,EAAE,IAAI,EAAC,CAAC;gBAC7D,MAAM,IAAA,uBAAiB,EAAC,mDAAmD,EAAE,EAAC,OAAO,EAAE,IAAI,EAAC,CAAC;gBAC7F,IAAI,+BAAa,EAAE;gBACnB,GAAG,qBAAqB;gBACxB,GAAG,yBAAyB;gBAC5B,GAAG,mBAAmB;aACzB,CAAC;QACN,CAAC;KAAA;CACJ;AAhBD,sCAgBC"}

package/dist/migrate/upgrade-node-26.d.ts

@@ -0,0 +1,8 @@
+import { Recipe } from "@openrewrite/rewrite";
+export declare class UpgradeNode26 extends Recipe {
+    readonly name = "org.openrewrite.node.migrate.upgrade-node-26";
+    readonly displayName = "Upgrade to Node.js 26";
+    readonly description = "Migrate deprecated APIs for Node.js 26 compatibility. Includes all migrations from Node.js 24, plus Node 25 and Node 26 deprecations.";
+    recipeList(): Promise<Recipe[]>;
+}
+//# sourceMappingURL=upgrade-node-26.d.ts.map

package/dist/migrate/upgrade-node-26.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-node-26.d.ts","sourceRoot":"","sources":["../../src/migrate/upgrade-node-26.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,MAAM,EAAC,MAAM,sBAAsB,CAAC;AAwB5C,qBAAa,aAAc,SAAQ,MAAM;IACrC,QAAQ,CAAC,IAAI,kDAAkD;IAC/D,QAAQ,CAAC,WAAW,2BAA2B;IAC/C,QAAQ,CAAC,WAAW,2IAA2I;IAEzJ,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAUxC"}

package/dist/migrate/upgrade-node-26.js

@@ -0,0 +1,53 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpgradeNode26 = void 0;
+const rewrite_1 = require("@openrewrite/rewrite");
+const rpc_1 = require("@openrewrite/rewrite/rpc");
+const upgrade_node_24_1 = require("./upgrade-node-24");
+const increase_node_engine_version_1 = require("./increase-node-engine-version");
+const increase_node_engine_version_in_github_actions_1 = require("./increase-node-engine-version-in-github-actions");
+const stream_internal_modules_1 = require("./stream-internal-modules");
+const server_response_write_header_1 = require("./server-response-write-header");
+const find_aead_decipheriv_without_auth_tag_length_1 = require("./find-aead-decipheriv-without-auth-tag-length");
+const find_duplex_to_web_type_1 = require("./find-duplex-to-web-type");
+const find_module_register_1 = require("./find-module-register");
+const node26EolDeprecations = [
+    new server_response_write_header_1.ReplaceServerResponseWriteHeader(),
+    new stream_internal_modules_1.ReplaceStreamInternalModules(),
+    new find_aead_decipheriv_without_auth_tag_length_1.FindAeadDecipherivWithoutAuthTagLength(),
+];
+const node26RuntimeDeprecations = [
+    new find_duplex_to_web_type_1.FindDuplexToWebType(),
+    new find_module_register_1.FindModuleRegister(),
+];
+class UpgradeNode26 extends rewrite_1.Recipe {
+    constructor() {
+        super(...arguments);
+        this.name = "org.openrewrite.node.migrate.upgrade-node-26";
+        this.displayName = "Upgrade to Node.js 26";
+        this.description = "Migrate deprecated APIs for Node.js 26 compatibility. Includes all migrations from Node.js 24, plus Node 25 and Node 26 deprecations.";
+    }
+    recipeList() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return [
+                new increase_node_engine_version_1.IncreaseNodeEngineVersion({ version: "26" }),
+                new increase_node_engine_version_in_github_actions_1.IncreaseNodeEngineVersionInGithubActions({ version: "26" }),
+                yield (0, rpc_1.prepareJavaRecipe)("org.openrewrite.nodejs.migrate.UpgradeNodeVersion", { version: "26" }),
+                new upgrade_node_24_1.UpgradeNode24(),
+                ...node26EolDeprecations,
+                ...node26RuntimeDeprecations,
+            ];
+        });
+    }
+}
+exports.UpgradeNode26 = UpgradeNode26;
+//# sourceMappingURL=upgrade-node-26.js.map

package/dist/migrate/upgrade-node-26.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-node-26.js","sourceRoot":"","sources":["../../src/migrate/upgrade-node-26.ts"],"names":[],"mappings":";;;;;;;;;;;;AAKA,kDAA4C;AAC5C,kDAA2D;AAC3D,uDAAgD;AAChD,iFAAyE;AACzE,qHAA0G;AAC1G,uEAAuE;AACvE,iFAAgF;AAChF,iHAAsG;AACtG,uEAA8D;AAC9D,iEAA0D;AAG1D,MAAM,qBAAqB,GAAa;IACpC,IAAI,+DAAgC,EAAE;IACtC,IAAI,sDAA4B,EAAE;IAClC,IAAI,qFAAsC,EAAE;CAC/C,CAAC;AAGF,MAAM,yBAAyB,GAAa;IACxC,IAAI,6CAAmB,EAAE;IACzB,IAAI,yCAAkB,EAAE;CAC3B,CAAC;AAEF,MAAa,aAAc,SAAQ,gBAAM;IAAzC;;QACa,SAAI,GAAG,8CAA8C,CAAC;QACtD,gBAAW,GAAG,uBAAuB,CAAC;QACtC,gBAAW,GAAG,uIAAuI,CAAC;IAYnK,CAAC;IAVS,UAAU;;YACZ,OAAO;gBACH,IAAI,wDAAyB,CAAC,EAAC,OAAO,EAAE,IAAI,EAAC,CAAC;gBAC9C,IAAI,yFAAwC,CAAC,EAAC,OAAO,EAAE,IAAI,EAAC,CAAC;gBAC7D,MAAM,IAAA,uBAAiB,EAAC,mDAAmD,EAAE,EAAC,OAAO,EAAE,IAAI,EAAC,CAAC;gBAC7F,IAAI,+BAAa,EAAE;gBACnB,GAAG,qBAAqB;gBACxB,GAAG,yBAAyB;aAC/B,CAAC;QACN,CAAC;KAAA;CACJ;AAfD,sCAeC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openrewrite/recipes-nodejs",
-  "version": "0.51.1",
+  "version": "0.51.2",
   "license": "Moderne Proprietary",
   "description": "OpenRewrite recipes for Node.js library migrations.",
   "homepage": "https://github.com/moderneinc/rewrite-node",
@@ -25,7 +25,7 @@
     "ci:test": "jest"
   },
   "dependencies": {
-    "@openrewrite/rewrite": "^8.93.0-20261008-033144",
+    "@openrewrite/rewrite": "^8.92.18",
     "mutative": "^1.1.0",
     "semver": "^7.7.3"
   },

package/src/index.ts

@@ -24,15 +24,22 @@ import {ReplaceOutgoingMessageHeaders} from "./migrate/outgoing-message-headers"
 import {ReplaceTlsInternalModules} from "./migrate/tls-internal-modules";
 import {ReplaceStreamInternalModules} from "./migrate/stream-internal-modules";
 import {RemoveNetSetSimultaneousAccepts} from "./migrate/net-set-simultaneous-accepts";
+import {UpgradeNode20} from "./migrate/upgrade-node-20";
 import {UpgradeNode22} from "./migrate/upgrade-node-22";
 import {UpgradeNode24} from "./migrate/upgrade-node-24";
+import {UpgradeNode26} from "./migrate/upgrade-node-26";
 import {IncreaseNodeEngineVersion} from "./migrate/increase-node-engine-version";
 import {IncreaseNodeEngineVersionInGithubActions} from "./migrate/increase-node-engine-version-in-github-actions";
 import {FindCryptoCreateCipher} from "./migrate/find-crypto-create-cipher";
+import {FindCryptoDefaultEncoding} from "./migrate/find-crypto-default-encoding";
 import {FindPunycodeUsage} from "./migrate/find-punycode-usage";
 import {FindProcessAssert} from "./migrate/find-process-assert";
 import {FindTlsSecurePair} from "./migrate/find-tls-secure-pair";
 import {FindTimersActive} from "./migrate/find-timers-active";
+import {ReplaceServerResponseWriteHeader} from "./migrate/server-response-write-header";
+import {FindAeadDecipherivWithoutAuthTagLength} from "./migrate/find-aead-decipheriv-without-auth-tag-length";
+import {FindDuplexToWebType} from "./migrate/find-duplex-to-web-type";
+import {FindModuleRegister} from "./migrate/find-module-register";
 import {MigrateFsExtraToNodeFs} from "./migrate/fs-extra/migrate-fs-extra-to-node-fs";
 import {ReplaceFsExtraRemove} from "./migrate/fs-extra/replace-fs-extra-remove";
 import {ReplaceFsExtraMkdirs} from "./migrate/fs-extra/replace-fs-extra-mkdirs";
@@ -100,15 +107,22 @@ export async function activate(marketplace: RecipeMarketplace): Promise<void> {
     await marketplace.install(ReplaceTlsInternalModules, Migrate);
     await marketplace.install(ReplaceStreamInternalModules, Migrate);
     await marketplace.install(RemoveNetSetSimultaneousAccepts, Migrate);
+    await marketplace.install(UpgradeNode20, Migrate);
     await marketplace.install(UpgradeNode22, Migrate);
     await marketplace.install(UpgradeNode24, Migrate);
+    await marketplace.install(UpgradeNode26, Migrate);
     await marketplace.install(IncreaseNodeEngineVersion, Migrate);
     await marketplace.install(IncreaseNodeEngineVersionInGithubActions, Migrate);
     await marketplace.install(FindCryptoCreateCipher, Migrate);
+    await marketplace.install(FindCryptoDefaultEncoding, Migrate);
     await marketplace.install(FindPunycodeUsage, Migrate);
     await marketplace.install(FindProcessAssert, Migrate);
     await marketplace.install(FindTlsSecurePair, Migrate);
     await marketplace.install(FindTimersActive, Migrate);
+    await marketplace.install(ReplaceServerResponseWriteHeader, Migrate);
+    await marketplace.install(FindAeadDecipherivWithoutAuthTagLength, Migrate);
+    await marketplace.install(FindDuplexToWebType, Migrate);
+    await marketplace.install(FindModuleRegister, Migrate);
     await marketplace.install(MigrateFsExtraToNodeFs, FsExtra);
     await marketplace.install(ReplaceFsExtraRemove, FsExtra);
     await marketplace.install(ReplaceFsExtraMkdirs, FsExtra);

package/src/migrate/find-aead-decipheriv-without-auth-tag-length.ts

@@ -0,0 +1,76 @@
+/*
+ * Copyright 2026 the original author or authors.
+ *
+ * Moderne Proprietary. Only for use by Moderne customers under the terms of a commercial contract.
+ */
+import {check, ExecutionContext, foundSearchResult, or, Recipe, TreeVisitor} from "@openrewrite/rewrite";
+import {JavaScriptVisitor, JS, MethodMatcher, usesMethod} from "@openrewrite/rewrite/javascript";
+import {J} from "@openrewrite/rewrite/java";
+
+export class FindAeadDecipherivWithoutAuthTagLength extends Recipe {
+    readonly name = "org.openrewrite.node.migrate.crypto.find-aead-decipheriv-without-auth-tag-length"
+    readonly displayName: string = "Find `crypto.createDecipheriv()` for AEAD ciphers without `authTagLength`";
+    readonly description: string = "Accepting shorter-than-default authentication tags for AEAD ciphers " +
+        "(`aes-*-gcm`, `aes-*-ccm`, `aes-*-ocb`, `chacha20-poly1305`) in `crypto.createDecipheriv()` is end-of-life in " +
+        "Node.js 26 (DEP0182). Pass an explicit `authTagLength` in the options so the tag length is validated at decipher " +
+        "construction instead of at `setAuthTag()` time.";
+    readonly tags: string[] = ["DEP0182"];
+
+    async editor(): Promise<TreeVisitor<any, ExecutionContext>> {
+        return check(or(
+            usesMethod("crypto createDecipheriv(..)"),
+            usesMethod("node:crypto createDecipheriv(..)"),
+        ), new class extends JavaScriptVisitor<ExecutionContext> {
+            matcher = new MethodMatcher("crypto createDecipheriv(..)");
+            nodeMatcher = new MethodMatcher("node:crypto createDecipheriv(..)");
+
+            private readonly aead = /^(aes-\d+-(gcm|ccm|ocb)|chacha20-poly1305)$/i;
+
+            private isAeadAlgorithm(expr: J): boolean {
+                if (expr.kind !== J.Kind.Literal) {
+                    return false;
+                }
+                const value = (expr as J.Literal).value;
+                return typeof value === "string" && this.aead.test(value);
+            }
+
+            private hasAuthTagLength(expr: J): boolean {
+                if (expr.kind !== J.Kind.NewClass || (expr as J.NewClass).class) {
+                    return false;
+                }
+                const obj = expr as J.NewClass;
+                const statements = obj.body?.statements ?? [];
+                for (const stmt of statements) {
+                    const element = stmt.element;
+                    if (element.kind !== JS.Kind.PropertyAssignment) {
+                        continue;
+                    }
+                    const name = (element as JS.PropertyAssignment).name.element;
+                    if (name.kind === J.Kind.Identifier && (name as J.Identifier).simpleName === "authTagLength") {
+                        return true;
+                    }
+                    if (name.kind === J.Kind.Literal && (name as J.Literal).value === "authTagLength") {
+                        return true;
+                    }
+                }
+                return false;
+            }
+
+            protected async visitMethodInvocation(m: J.MethodInvocation, p: ExecutionContext): Promise<J | undefined> {
+                const method = await super.visitMethodInvocation(m, p) as J.MethodInvocation;
+                if (!this.matcher.matches(method.methodType) && !this.nodeMatcher.matches(method.methodType)) {
+                    return method;
+                }
+                const args = method.arguments.elements;
+                if (args.length === 0 || !this.isAeadAlgorithm(args[0].element)) {
+                    return method;
+                }
+                if (args.length >= 4 && this.hasAuthTagLength(args[3].element)) {
+                    return method;
+                }
+                return foundSearchResult(method,
+                    "crypto.createDecipheriv() for AEAD ciphers without authTagLength is end-of-life (DEP0182). Pass authTagLength in options.");
+            }
+        });
+    }
+}

package/src/migrate/find-crypto-default-encoding.ts

@@ -0,0 +1,47 @@
+/*
+ * Copyright 2026 the original author or authors.
+ *
+ * Moderne Proprietary. Only for use by Moderne customers under the terms of a commercial contract.
+ */
+import {ExecutionContext, foundSearchResult, Recipe, TreeVisitor} from "@openrewrite/rewrite";
+import {JavaScriptVisitor} from "@openrewrite/rewrite/javascript";
+import {J, Type} from "@openrewrite/rewrite/java";
+
+const FQNS = new Set(["crypto", "node:crypto"]);
+
+export class FindCryptoDefaultEncoding extends Recipe {
+    readonly name = "org.openrewrite.node.migrate.find-crypto-default-encoding"
+    readonly displayName: string = "Find deprecated `crypto.DEFAULT_ENCODING` usage";
+    readonly description: string = "The `crypto.DEFAULT_ENCODING` property was deprecated in Node.js 10 (DEP0091) " +
+        "and removed in Node.js 20. Each API that accepted an encoding (hash, hmac, cipher, etc.) now requires " +
+        "the encoding to be passed explicitly. Occurrences must be reviewed and fixed by hand.";
+    readonly tags: string[] = ["DEP0091"];
+
+    async editor(): Promise<TreeVisitor<any, ExecutionContext>> {
+        return new class extends JavaScriptVisitor<ExecutionContext> {
+            private isCryptoReceiver(target: J | undefined): boolean {
+                if (!target || target.kind !== J.Kind.Identifier) {
+                    return false;
+                }
+                const type = (target as J.Identifier).type;
+                if (!type) {
+                    return (target as J.Identifier).simpleName === "crypto";
+                }
+                if (type.kind === Type.Kind.Class) {
+                    const fqn = (type as Type.Class).fullyQualifiedName;
+                    return FQNS.has(fqn);
+                }
+                return false;
+            }
+
+            protected async visitFieldAccess(fieldAccess: J.FieldAccess, p: ExecutionContext): Promise<J | undefined> {
+                const fa = await super.visitFieldAccess(fieldAccess, p) as J.FieldAccess;
+                if (fa.name.element.simpleName === "DEFAULT_ENCODING" && this.isCryptoReceiver(fa.target)) {
+                    return foundSearchResult(fa,
+                        "crypto.DEFAULT_ENCODING was removed in Node.js 20 (DEP0091). Pass the desired encoding explicitly to each crypto API instead.");
+                }
+                return fa;
+            }
+        };
+    }
+}

package/src/migrate/find-duplex-to-web-type.ts

@@ -0,0 +1,71 @@
+/*
+ * Copyright 2026 the original author or authors.
+ *
+ * Moderne Proprietary. Only for use by Moderne customers under the terms of a commercial contract.
+ */
+import {check, ExecutionContext, foundSearchResult, Recipe, TreeVisitor} from "@openrewrite/rewrite";
+import {JavaScriptVisitor, JS, usesType} from "@openrewrite/rewrite/javascript";
+import {J, Type} from "@openrewrite/rewrite/java";
+
+export class FindDuplexToWebType extends Recipe {
+    readonly name = "org.openrewrite.node.migrate.stream.find-duplex-to-web-type"
+    readonly displayName: string = "Find `Duplex.toWeb()` calls passing `options.type`";
+    readonly description: string = "Passing `options.type` to `stream.Duplex.toWeb()` is runtime-deprecated in Node.js 26 (DEP0201). " +
+        "The `type` field controls the readable-side ReadableStream chunk type; drop it from the options and set the type on the " +
+        "resulting `ReadableStream` instead.";
+    readonly tags: string[] = ["DEP0201"];
+
+    async editor(): Promise<TreeVisitor<any, ExecutionContext>> {
+        return check(usesType("Stream.Duplex"), new class extends JavaScriptVisitor<ExecutionContext> {
+
+            private isDuplexReceiver(select: J | undefined): boolean {
+                if (!select || select.kind !== J.Kind.Identifier) {
+                    return false;
+                }
+                const type = (select as J.Identifier).type;
+                if (type?.kind !== Type.Kind.Class) {
+                    return false;
+                }
+                return (type as Type.Class).fullyQualifiedName === "Stream.Duplex";
+            }
+
+            private hasTypeKey(expr: J): boolean {
+                if (expr.kind !== J.Kind.NewClass || (expr as J.NewClass).class) {
+                    return false;
+                }
+                const obj = expr as J.NewClass;
+                const statements = obj.body?.statements ?? [];
+                for (const stmt of statements) {
+                    const element = stmt.element;
+                    if (element.kind !== JS.Kind.PropertyAssignment) {
+                        continue;
+                    }
+                    const name = (element as JS.PropertyAssignment).name.element;
+                    if (name.kind === J.Kind.Identifier && (name as J.Identifier).simpleName === "type") {
+                        return true;
+                    }
+                    if (name.kind === J.Kind.Literal && (name as J.Literal).value === "type") {
+                        return true;
+                    }
+                }
+                return false;
+            }
+
+            protected async visitMethodInvocation(m: J.MethodInvocation, p: ExecutionContext): Promise<J | undefined> {
+                const method = await super.visitMethodInvocation(m, p) as J.MethodInvocation;
+                if (method.name.simpleName !== "toWeb" || !this.isDuplexReceiver(method.select?.element)) {
+                    return method;
+                }
+                const args = method.arguments.elements;
+                if (args.length < 2) {
+                    return method;
+                }
+                if (!this.hasTypeKey(args[1].element)) {
+                    return method;
+                }
+                return foundSearchResult(method,
+                    "Duplex.toWeb() options.type is runtime-deprecated (DEP0201). Drop it from the options and set the type on the resulting ReadableStream instead.");
+            }
+        });
+    }
+}

package/src/migrate/find-module-register.ts

@@ -0,0 +1,36 @@
+/*
+ * Copyright 2026 the original author or authors.
+ *
+ * Moderne Proprietary. Only for use by Moderne customers under the terms of a commercial contract.
+ */
+import {check, ExecutionContext, foundSearchResult, or, Recipe, TreeVisitor} from "@openrewrite/rewrite";
+import {JavaScriptVisitor, MethodMatcher, usesMethod} from "@openrewrite/rewrite/javascript";
+import {J} from "@openrewrite/rewrite/java";
+
+export class FindModuleRegister extends Recipe {
+    readonly name = "org.openrewrite.node.migrate.find-module-register"
+    readonly displayName: string = "Find `module.register()` usage";
+    readonly description: string = "`module.register()` for loading ESM loader hooks is runtime-deprecated in Node.js 26 (DEP0205). " +
+        "Use the `--import` CLI flag with a loader module instead.";
+    readonly tags: string[] = ["DEP0205"];
+
+    async editor(): Promise<TreeVisitor<any, ExecutionContext>> {
+        return check(or(
+            usesMethod("module register(..)"),
+            usesMethod("node:module register(..)"),
+        ), new class extends JavaScriptVisitor<ExecutionContext> {
+            moduleRegisterMatcher = new MethodMatcher("module register(..)");
+            nodeModuleRegisterMatcher = new MethodMatcher("node:module register(..)");
+
+            protected async visitMethodInvocation(m: J.MethodInvocation, p: ExecutionContext): Promise<J | undefined> {
+                const method = await super.visitMethodInvocation(m, p) as J.MethodInvocation;
+                if (this.moduleRegisterMatcher.matches(method.methodType) ||
+                    this.nodeModuleRegisterMatcher.matches(method.methodType)) {
+                    return foundSearchResult(method,
+                        "module.register() is runtime-deprecated (DEP0205). Use the --import CLI flag with a loader module instead.");
+                }
+                return method;
+            }
+        });
+    }
+}

package/src/migrate/server-response-write-header.ts

@@ -0,0 +1,51 @@
+/*
+ * Copyright 2026 the original author or authors.
+ *
+ * Moderne Proprietary. Only for use by Moderne customers under the terms of a commercial contract.
+ */
+import {check, ExecutionContext, or, Recipe, TreeVisitor} from "@openrewrite/rewrite";
+import {JavaScriptVisitor, template, usesType} from "@openrewrite/rewrite/javascript";
+import {J, Type} from "@openrewrite/rewrite/java";
+
+export class ReplaceServerResponseWriteHeader extends Recipe {
+    readonly name = "org.openrewrite.node.migrate.http.replace-server-response-write-header"
+    readonly displayName: string = "Replace `ServerResponse.writeHeader()` with `writeHead()`";
+    readonly description: string = "`ServerResponse.prototype.writeHeader()` was an undocumented alias for `writeHead()` " +
+        "that was deprecated in Node.js 11 (DEP0063) and removed in Node.js 26. The signatures are identical.";
+    readonly tags: string[] = ["DEP0063"];
+
+    async editor(): Promise<TreeVisitor<any, ExecutionContext>> {
+        return check(or(
+            usesType("http.ServerResponse"),
+            usesType("node:http.ServerResponse"),
+        ), new class extends JavaScriptVisitor<ExecutionContext> {
+
+            private isServerResponseType(type: Type | undefined): boolean {
+                if (!type) return false;
+                if (type.kind === Type.Kind.Class) {
+                    const fqn = (type as Type.Class).fullyQualifiedName;
+                    return fqn === "http.ServerResponse" || fqn === "node:http.ServerResponse";
+                }
+                if (type.kind === Type.Kind.Parameterized) {
+                    return this.isServerResponseType((type as Type.Parameterized).type);
+                }
+                return false;
+            }
+
+            protected async visitMethodInvocation(method: J.MethodInvocation, p: ExecutionContext): Promise<J | undefined> {
+                const m = await super.visitMethodInvocation(method, p) as J.MethodInvocation;
+
+                if (m.name.simpleName !== "writeHeader" || !m.select) {
+                    return m;
+                }
+                if (!this.isServerResponseType(m.select.element.type)) {
+                    return m;
+                }
+
+                const target = m.select.element;
+                const args = m.arguments.elements;
+                return await template`${target}.writeHead(${args})`.apply(m, this.cursor);
+            }
+        });
+    }
+}

package/src/migrate/upgrade-node-20.ts

@@ -0,0 +1,32 @@
+/*
+ * Copyright 2026 the original author or authors.
+ *
+ * Moderne Proprietary. Only for use by Moderne customers under the terms of a commercial contract.
+ */
+import {Recipe} from "@openrewrite/rewrite";
+import {prepareJavaRecipe} from "@openrewrite/rewrite/rpc";
+import {AvoidImplicitCoercionOfExitCode} from "./process-exit-code";
+import {FindCryptoDefaultEncoding} from "./find-crypto-default-encoding";
+import {IncreaseNodeEngineVersion} from "./increase-node-engine-version";
+import {IncreaseNodeEngineVersionInGithubActions} from "./increase-node-engine-version-in-github-actions";
+
+// Node 20 End-of-Life deprecations
+const node20EolDeprecations: Recipe[] = [
+    new AvoidImplicitCoercionOfExitCode(),  // DEP0164: process.exit(code) (v20 EOL)
+    new FindCryptoDefaultEncoding(),        // DEP0091: crypto.DEFAULT_ENCODING (v20 EOL)
+];
+
+export class UpgradeNode20 extends Recipe {
+    readonly name = "org.openrewrite.node.migrate.upgrade-node-20";
+    readonly displayName = "Upgrade to Node.js 20";
+    readonly description = "Migrate deprecated APIs for Node.js 20 compatibility. Addresses deprecations that are end-of-life in Node 20.";
+
+    async recipeList(): Promise<Recipe[]> {
+        return [
+            new IncreaseNodeEngineVersion({version: "20"}),
+            new IncreaseNodeEngineVersionInGithubActions({version: "20"}),
+            await prepareJavaRecipe("org.openrewrite.nodejs.migrate.UpgradeNodeVersion", {version: "20"}),
+            ...node20EolDeprecations,
+        ];
+    }
+}

package/src/migrate/upgrade-node-22.ts

@@ -12,7 +12,7 @@ import {RemoveUsageOfProcessFeaturesTlsConstants} from "./process-features-tls";
 import {UseNativeTypeCheckingMethods} from "./util-type-checking";
 import {ReplaceUtilExtend} from "./util-extend";
 import {ReplaceDeprecatedBufferSlice} from "./buffer-slice";
-import {AvoidImplicitCoercionOfExitCode} from "./process-exit-code";
+import {UpgradeNode20} from "./upgrade-node-20";
 import {IncreaseNodeEngineVersion} from "./increase-node-engine-version";
 import {IncreaseNodeEngineVersionInGithubActions} from "./increase-node-engine-version-in-github-actions";
 import {FindPunycodeUsage} from "./find-punycode-usage";
@@ -32,9 +32,8 @@ const node22RuntimeDeprecations: Recipe[] = [
     new ReplaceCryptoConstructors(),        // DEP0179, DEP0181: Hash/Hmac constructors
 ];
 
-// Deprecations from earlier versions (incl. EOL before v22)
-const olderDeprecations: Recipe[] = [
-    new AvoidImplicitCoercionOfExitCode(),  // DEP0164: process.exit(code) (v20 EOL)
+// Doc-only deprecations (no fixed EOL version) bundled with the v22 upgrade
+const docOnlyDeprecations: Recipe[] = [
     new ReplaceDeprecatedBufferSlice(),     // DEP0158: buffer.slice (doc-only)
     new RemoveUsageOfProcessFeaturesTlsConstants(), // DEP0189: process.features.tls_* (doc-only)
     new RemovePromisifyOnPromise(),         // DEP0174: promisify on promise (doc-only)
@@ -43,16 +42,17 @@ const olderDeprecations: Recipe[] = [
 export class UpgradeNode22 extends Recipe {
     readonly name = "org.openrewrite.node.migrate.upgrade-node-22";
     readonly displayName = "Upgrade to Node.js 22";
-    readonly description = "Migrate deprecated APIs for Node.js 22 compatibility. Addresses Node 22 runtime deprecations and deprecations from earlier versions.";
+    readonly description = "Migrate deprecated APIs for Node.js 22 compatibility. Includes all migrations from Node.js 20, plus Node 21 and Node 22 deprecations.";
 
     async recipeList(): Promise<Recipe[]> {
         return [
             new IncreaseNodeEngineVersion({version: "22"}),
             new IncreaseNodeEngineVersionInGithubActions({version: "22"}),
             await prepareJavaRecipe("org.openrewrite.nodejs.migrate.UpgradeNodeVersion", {version: "22"}),
+            new UpgradeNode20(),
             ...node22EolDeprecations,
             ...node22RuntimeDeprecations,
-            ...olderDeprecations,
+            ...docOnlyDeprecations,
         ];
     }
 }

package/src/migrate/upgrade-node-26.ts

@@ -0,0 +1,45 @@
+/*
+ * Copyright 2026 the original author or authors.
+ *
+ * Moderne Proprietary. Only for use by Moderne customers under the terms of a commercial contract.
+ */
+import {Recipe} from "@openrewrite/rewrite";
+import {prepareJavaRecipe} from "@openrewrite/rewrite/rpc";
+import {UpgradeNode24} from "./upgrade-node-24";
+import {IncreaseNodeEngineVersion} from "./increase-node-engine-version";
+import {IncreaseNodeEngineVersionInGithubActions} from "./increase-node-engine-version-in-github-actions";
+import {ReplaceStreamInternalModules} from "./stream-internal-modules";
+import {ReplaceServerResponseWriteHeader} from "./server-response-write-header";
+import {FindAeadDecipherivWithoutAuthTagLength} from "./find-aead-decipheriv-without-auth-tag-length";
+import {FindDuplexToWebType} from "./find-duplex-to-web-type";
+import {FindModuleRegister} from "./find-module-register";
+
+// Node 26 End-of-Life deprecations (fully removed in v26)
+const node26EolDeprecations: Recipe[] = [
+    new ReplaceServerResponseWriteHeader(),                 // DEP0063: ServerResponse.writeHeader() (v26 EOL)
+    new ReplaceStreamInternalModules(),                     // DEP0125: legacy _stream_* modules (v26 EOL)
+    new FindAeadDecipherivWithoutAuthTagLength(),           // DEP0182: short GCM auth tags (v26 EOL)
+];
+
+// Node 26 Runtime deprecations
+const node26RuntimeDeprecations: Recipe[] = [
+    new FindDuplexToWebType(),                              // DEP0201: Duplex.toWeb options.type
+    new FindModuleRegister(),                               // DEP0205: module.register()
+];
+
+export class UpgradeNode26 extends Recipe {
+    readonly name = "org.openrewrite.node.migrate.upgrade-node-26";
+    readonly displayName = "Upgrade to Node.js 26";
+    readonly description = "Migrate deprecated APIs for Node.js 26 compatibility. Includes all migrations from Node.js 24, plus Node 25 and Node 26 deprecations.";
+
+    async recipeList(): Promise<Recipe[]> {
+        return [
+            new IncreaseNodeEngineVersion({version: "26"}),
+            new IncreaseNodeEngineVersionInGithubActions({version: "26"}),
+            await prepareJavaRecipe("org.openrewrite.nodejs.migrate.UpgradeNodeVersion", {version: "26"}),
+            new UpgradeNode24(),
+            ...node26EolDeprecations,
+            ...node26RuntimeDeprecations,
+        ];
+    }
+}