Updating Node.js version for published Shopify apps

Hi,

We have an app published in Shopify App store running in Docker, and we need to update the Node.js version in our Dockerfiles due to the recently reported security vulnerability in node.

I’m wondering how best to handle this for apps that are already live.

  • Is it enough to update the Node.js version, rebuild the Docker image, and redeploy?
  • If the update breaks something in production, what would be the best way to handle the rollback?
  • Do we need to unlist the app or take any other steps in the Shopify Partner Dashboard?