Drop support for Node.js 18 and 20

.github/workflows/ci_static-analysis.yaml

@@ -11,5 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
+      - name: Upgrade setuptools
+        run: python -m pip install "setuptools<81"
       - name: not-grep
         uses: mattsb42-meta/not-grep@1.0.0

.github/workflows/shared-ci.yml

@@ -22,7 +22,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        node-version: ['18.x', '20.x', '22.x', 'latest']
+        node-version: ['22.x', 'latest']
         test-type: ['node', 'browser']
         # Determine test categories based on whether testing published packages or source code:
         # - Testing published packages: only run vector tests (don't have build artifacts to test coverage or compliance)

buildspec.yml

@@ -3,22 +3,10 @@ version: 0.2
 batch:
   fast-fail: false
   build-list:
-    - identifier: testNodejs20
-      buildspec: codebuild/nodejs20.yml
-      env:
-        image: aws/codebuild/standard:5.0
-    - identifier: testNodejs18
-      buildspec: codebuild/nodejs18.yml
-      env:
-        image: aws/codebuild/standard:5.0
     - identifier: testNodejs16
       buildspec: codebuild/nodejs16.yml
       env:
         image: aws/codebuild/standard:5.0
-    - identifier: testBrowser18
-      buildspec: codebuild/browser18.yml
-      env:
-        image: aws/codebuild/standard:5.0
     - identifier: compliance
       buildspec: codebuild/compliance.yml
       env:
@@ -29,21 +17,3 @@ batch:
         variables:
           PUBLISH_LOCAL: "true"
         image: aws/codebuild/standard:5.0
-    - identifier: testVectorsNodejs18
-      buildspec: codebuild/test_vectors/nodejs18.yml
-      env:
-        variables:
-          PUBLISH_LOCAL: "true"
-        image: aws/codebuild/standard:5.0
-    - identifier: testVectorsNodejs20
-      buildspec: codebuild/test_vectors/nodejs20.yml
-      env:
-        variables:
-          PUBLISH_LOCAL: "true"
-        image: aws/codebuild/standard:5.0
-    - identifier: testVectorsBrowser18
-      buildspec: codebuild/test_vectors/browser18.yml
-      env:
-        variables:
-          PUBLISH_LOCAL: "true"
-        image: aws/codebuild/standard:5.0

codebuild/release/prod-release.yml

@@ -9,22 +9,14 @@ batch:
       buildspec: codebuild/compliance.yml
 
 # Unit Tests
-    - identifier: testNodejs20
-      buildspec: codebuild/nodejs20.yml
+    - identifier: testNodejs16
+      buildspec: codebuild/nodejs16.yml
       env:
         image: aws/codebuild/standard:5.0
-    - identifier: testBrowser18
-      buildspec: codebuild/browser18.yml
 
 # Integration Tests
-    - identifier: testVectorsNodejs20
-      buildspec: codebuild/test_vectors/nodejs20.yml
-      env:
-        variables:
-          PUBLISH_LOCAL: "true"
-        image: aws/codebuild/standard:5.0
-    - identifier: testVectorsBrowser18
-      buildspec: codebuild/test_vectors/browser18.yml
+    - identifier: testVectorsNodejs16
+      buildspec: codebuild/test_vectors/nodejs16.yml
       env:
         variables:
           PUBLISH_LOCAL: "true"
@@ -34,10 +26,8 @@ batch:
     - identifier: version
       depend-on:
         - compliance
-        - testNodejs20
-        - testBrowser18
-        - testVectorsNodejs20
-        - testVectorsBrowser18
+        - testNodejs16
+        - testVectorsNodejs16
       buildspec: codebuild/release/version.yml
       env:
         image: aws/codebuild/standard:6.0
@@ -54,15 +44,7 @@ batch:
     - identifier: validateNodejs
       depend-on:
         - publish
-      buildspec: codebuild/test_vectors/nodejs20.yml
-      env:
-        variables:
-          PUBLISH_LOCAL: "false"
-        image: aws/codebuild/standard:5.0
-    - identifier: validateBrowser
-      depend-on:
-        - publish
-      buildspec: codebuild/test_vectors/browser18.yml
+      buildspec: codebuild/test_vectors/nodejs16.yml
       env:
         variables:
           PUBLISH_LOCAL: "false"

modules/web-crypto-backend/package.json

@@ -19,7 +19,6 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-crypto/ie11-detection": "4.0.0",
     "@aws-crypto/supports-web-crypto": "5.2.0",
     "@aws-sdk/util-locate-window": "3.310.0",
     "tslib": "^2.2.0"

modules/web-crypto-backend/src/backend-factory.ts

@@ -1,14 +1,12 @@
 // Copyright Amazon.com Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0
 
-import { isMsWindow } from '@aws-crypto/ie11-detection'
 import {
   supportsWebCrypto,
   supportsSubtleCrypto,
   supportsZeroByteGCM,
 } from '@aws-crypto/supports-web-crypto'
 import { generateSynchronousRandomValues } from './synchronous_random_values'
-import promisifyMsSubtleCrypto from './promisify-ms-crypto'
 
 type MaybeSubtleCrypto = SubtleCrypto | false
 export type WebCryptoBackend =
@@ -140,7 +138,6 @@ export function pluckSubtleCrypto(window: Window): MaybeSubtleCrypto {
   // if needed webkitSubtle check should be added here
   // see: https://webkit.org/blog/7790/update-on-web-cryptography/
   if (supportsWebCrypto(window)) return window.crypto.subtle
-  if (isMsWindow(window)) return promisifyMsSubtleCrypto(window.msCrypto.subtle)
   return false
 }
 

modules/web-crypto-backend/src/synchronous_random_values.ts

@@ -1,7 +1,6 @@
 // Copyright Amazon.com Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0
 
-import { isMsWindow } from '@aws-crypto/ie11-detection'
 import { supportsSecureRandom } from '@aws-crypto/supports-web-crypto'
 import { locateWindow } from '@aws-sdk/util-locate-window'
 
@@ -19,10 +18,6 @@ export function generateSynchronousRandomValues(
   return function synchronousRandomValues(byteLength: number): Uint8Array {
     if (supportsSecureRandom(globalScope)) {
       return globalScope.crypto.getRandomValues(new Uint8Array(byteLength))
-    } else if (isMsWindow(globalScope)) {
-      const values = new Uint8Array(byteLength)
-      globalScope.msCrypto.getRandomValues(values)
-      return values
     }
 
     throw new Error(`Unable to locate a secure random source.`)