chore: add github sponsors on supporters by bjohansebas · Pull Request #8531 · nodejs/nodejs.org

bjohansebas · 2026-01-09T17:08:43Z

Description

Note that there’s no REST API for GitHub Sponsors, only a GraphQL API. I’m still working on this.

Preview:

Validation

Related Issues

closes #8199

Check List

I have read the Contributing Guidelines and made commit messages that follow the guideline.
I have run pnpm format to ensure the code follows the style guide.
I have run pnpm test to check if all tests are passing.
I have run pnpm build to check if the website builds without errors.
I've covered new added functionality with unit tests if necessary.

vercel · 2026-01-09T17:08:47Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
nodejs-org	Ready	Preview	May 15, 2026 3:33pm

github-actions · 2026-01-09T17:08:53Z

👋 Codeowner Review Request

The following codeowners have been identified for the changed files:

Team reviewers: @nodejs/nodejs-website

Please review the changes when you have a chance. Thank you! 🙏

github-actions · 2026-01-09T17:16:24Z

📦 Build Size Comparison

Summary

Metric	Value
Old Total Size	3.51 MB
New Total Size	3.51 MB
Delta	5.00 B (0.00%)

Changes

➕ Added Assets (2)

Name	Size
`.next/static/chunks/4ab402c4ccfd82ec.js`	41.55 KB
`.next/static/chunks/9683dd9e3611b206.js`	197.63 KB

➖ Removed Assets (2)

Name	Size
`.next/static/chunks/46deeb46308b8a8b.js`	41.54 KB
`.next/static/chunks/3a4ee3cc36de6c5f.js`	197.63 KB

Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>

bjohansebas · 2026-02-08T04:21:29Z

@nodejs/web-infra I think the new environment variable should also be set in Vercel, since that’s where the website is built, both for production and for previews

Copilot

Pull request overview

Adds GitHub Sponsors as an additional data source for the “Supporters” section, alongside OpenCollective, by updating the data generator and wiring the UI/docs to the new combined dataset.

Changes:

Add GitHub Sponsors supporter type and update the Supporters UI to use a unified url field.
Add GitHub GraphQL endpoint constant and implement GitHub Sponsors GraphQL fetching + shuffling in the supporters data generator.
Update partners/supporters copy to mention GitHub Sponsors.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 13 comments.

Show a summary per file

File	Description
apps/site/types/supporters.ts	Introduces a GitHub sponsors supporter type alias.
apps/site/pages/en/about/partners.mdx	Updates “Supporters” copy to include GitHub Sponsors.
apps/site/next.constants.mjs	Adds GitHub GraphQL API endpoint constant.
apps/site/next-data/generators/supportersData.mjs	Expands generator to fetch/merge OpenCollective + GitHub Sponsors and shuffle results.
apps/site/components/Common/Supporters/index.tsx	Updates list rendering to use `url` (and support both sources).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>

… key handling

MattIPv4 · 2026-04-12T22:08:54Z

X-posting from Slack... the fine-grained token I generated did not work:

[{"type":"FORBIDDEN","path":["organization"],"extensions":{"saml_failure":false},"locations":[{"line":3,"column":5}],"message":"The 'Node.js' enterprise forbids access via a fine-grained personal access tokens if the token's lifetime is greater than 366 days. Please adjust your token's lifetime at the following URL: https://github.com/settings/personal-access-tokens/13409736"}]

I attempted switching the preview to a classic token with no permissions set, which also did not work:

[{"type":"INSUFFICIENT_SCOPES","locations":[{"line":6,"column":11}],"message":"Your token has not been granted the required scopes to execute this query. The 'id' field requires one of the following scopes: ['read:user', 'read:org'], but your token has only been granted the: [''] scopes. Please modify your token's scopes at: https://github.com/settings/tokens."},{"type":"INSUFFICIENT_SCOPES","locations":[{"line":17,"column":15}],"message":"Your token has not been granted the required scopes to execute this query. The 'databaseId' field requires one of the following scopes: ['read:org'], but your token has only been granted the: [''] scopes. Please modify your token's scopes at: https://github.com/settings/tokens."},{"type":"INSUFFICIENT_SCOPES","locations":[{"line":18,"column":15}],"message":"Your token has not been granted the required scopes to execute this query. The 'name' field requires one of the following scopes: ['read:org'], but your token has only been granted the: [''] scopes. Please modify your token's scopes at: https://github.com/settings/tokens."},{"type":"INSUFFICIENT_SCOPES","locations":[{"line":19,"column":15}],"message":"Your token has not been granted the required scopes to execute this query. The 'login' field requires one of the following scopes: ['read:org'], but your token has only been granted the: [''] scopes. Please modify your token's scopes at: https://github.com/settings/tokens."},{"type":"INSUFFICIENT_SCOPES","locations":[{"line":20,"column":15}],"message":"Your token has not been granted the required scopes to execute this query. The 'avatarUrl' field requires one of the following scopes: ['read:org'], but your token has only been granted the: [''] scopes. Please modify your token's scopes at: https://github.com/settings/tokens."},{"type":"INSUFFICIENT_SCOPES","locations":[{"line":21,"column":15}],"message":"Your token has not been granted the required scopes to execute this query. The 'url' field requires one of the following scopes: ['read:org'], but your token has only been granted the: [''] scopes. Please modify your token's scopes at: https://github.com/settings/tokens."},{"type":"INSUFFICIENT_SCOPES","locations":[{"line":22,"column":15}],"message":"Your token has not been granted the required scopes to execute this query. The 'websiteUrl' field requires one of the following scopes: ['read:org'], but your token has only been granted the: [''] scopes. Please modify your token's scopes at: https://github.com/settings/tokens."},{"type":"INSUFFICIENT_SCOPES","locations":[{"line":25,"column":11}],"message":"Your token has not been granted the required scopes to execute this query. The 'timestamp' field requires one of the following scopes: ['read:user', 'read:org'], but your token has only been granted the: [''] scopes. Please modify your token's scopes at: https://github.com/settings/tokens."},{"type":"INSUFFICIENT_SCOPES","locations":[{"line":27,"column":13}],"message":"Your token has not been granted the required scopes to execute this query. The 'monthlyPriceInDollars' field requires one of the following scopes: ['read:user', 'read:org'], but your token has only been granted the: [''] scopes. Please modify your token's scopes at: https://github.com/settings/tokens."},{"type":"INSUFFICIENT_SCOPES","locations":[{"line":28,"column":13}],"message":"Your token has not been granted the required scopes to execute this query. The 'isOneTime' field requires one of the following scopes: ['read:user', 'read:org'], but your token has only been granted the: [''] scopes. Please modify your token's scopes at: https://github.com/settings/tokens."}]

Given our security posture for this project is that anyone can submit a PR that will immediately be built on Vercel, anyone could extract this token, so I do not believe it is safe to grant read:user or read:org to this token, as this can access non-public information.

We could attempt using a fine-grained token that has an expiration date, to comply with the org requirement (even though the fine-grained token resource owner is not the org), but that then becomes a yearly maintenance burden for us to ensure it is regenerated before it expires and breaks this feature.

I feel like we may be at an impasse here, unless we want to try a classic token with those permissions, but production only, so that this feature will not work in preview deployments?

MattIPv4 · 2026-04-12T22:33:10Z

I have generated a new classic token for @openjs-vercel with just the read:org permission (this does include potential access to private information). As this contains more than just public access, this token is now only set in the Vercel production environment, and specifically for preview deployments of this branch only -- however, importantly, other preview deployments will not have access to the token and this feature will not work for them.

With that scope applied to the token, https://nodejs-org-git-githubsponsors-openjs.vercel.app/en/about/partners is showing sponsors 🎉

bjohansebas · 2026-04-12T22:35:47Z

Cool, so @nodejs/nodejs-website and @nodejs/web-infra, could you please review it?

Signed-off-by: Brian Muenzenmeyer <brian.muenzenmeyer@gmail.com>

bmuenzenmeyer

one clarifying point between a comment and a query
otherwise looks great!

bmuenzenmeyer · 2026-05-15T01:57:09Z

@nodejs/nodejs-website any final comments on this?

mikeesto

It would be good to see this land. I noticed there's at least one supporter with no avatar or url, so I'm unsure if there is much benefit in displaying these cases?

bmuenzenmeyer · 2026-05-15T15:11:36Z

It would be good to see this land. I noticed there's at least one supporter with no avatar or url, so I'm unsure if there is much benefit in displaying these cases?

I found one data display gap in d32eb79 but there may be more, let's see what the preview holds...mine was only in OC

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit d2d73ef. Configure here.}

This comment was marked as off-topic.

Sign in to view

bjohansebas commented Jan 9, 2026

View reviewed changes

Comment thread apps/site/next-data/generators/supportersData.mjs Outdated

feat: implement fetch for github sponsors sponsorhip

46d49e7

bjohansebas force-pushed the github_sponsors branch from 06c283f to 46d49e7 Compare January 25, 2026 15:07

vercel Bot deployed to Preview January 25, 2026 15:08 View deployment

fixup

00e81c5

vercel Bot deployed to Preview February 8, 2026 03:21 View deployment

feat: implement donations queary and fix links

309a8bb

Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>

vercel Bot deployed to Preview February 8, 2026 03:53 View deployment

feat: update text of supporters

70c5076

vercel Bot deployed to Preview February 8, 2026 04:01 View deployment

bjohansebas added 2 commits February 8, 2026 04:10

feat: include past sponsors

21655fa

Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>

feat: sort supporters

448e37e

Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>

bjohansebas marked this pull request as ready for review February 8, 2026 04:22

bjohansebas requested a review from a team as a code owner February 8, 2026 04:22

Copilot AI review requested due to automatic review settings February 8, 2026 04:22

Copilot started reviewing on behalf of bjohansebas February 8, 2026 04:22 View session

vercel Bot deployed to Preview February 8, 2026 04:23 View deployment

sentry Bot reviewed Feb 8, 2026

View reviewed changes

Comment thread apps/site/next-data/generators/supportersData.mjs Outdated

Comment thread apps/site/next-data/generators/supportersData.mjs Outdated

Comment thread apps/site/next-data/generators/supportersData.mjs

Copilot AI reviewed Feb 8, 2026

View reviewed changes

Update apps/site/next-data/generators/supportersData.mjs

0ad4e41

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>

vercel Bot deployed to Preview February 8, 2026 04:29 View deployment

sentry Bot reviewed Feb 8, 2026

View reviewed changes

Comment thread apps/site/next-data/generators/supportersData.mjs Outdated

bjohansebas commented Feb 8, 2026

View reviewed changes

Comment thread apps/site/next-data/generators/supportersData.mjs Outdated

Apply suggestion from @Copilot

6da91ff

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>

vercel Bot deployed to Preview February 8, 2026 04:41 View deployment

vercel Bot deployed to Preview April 12, 2026 19:23 View deployment

cursor Bot reviewed Apr 12, 2026

View reviewed changes

Comment thread apps/site/next-data/generators/supportersData.mjs

chore: standardize naming for GitHub sponsor supporter and update API…

512ba91

… key handling

bjohansebas requested a review from a team as a code owner April 12, 2026 19:42

github-advanced-security AI found potential problems Apr 12, 2026

View reviewed changes

Comment thread .github/workflows/playwright-cloudflare-open-next.yml Fixed

vercel Bot deployed to Preview April 12, 2026 19:43 View deployment

remove test

dfdf2ab

vercel Bot deployed to Preview April 12, 2026 19:50 View deployment

MattIPv4 mentioned this pull request Apr 12, 2026

Add NEXT_GITHUB_READ_API_TOKEN to PERMISSIONS.md nodejs/web-team#127

Merged

bjohansebas requested review from araujogui, avivkeller and ovflowd April 18, 2026 15:18

Merge branch 'main' into github_sponsors

4d0c924

Signed-off-by: Brian Muenzenmeyer <brian.muenzenmeyer@gmail.com>

vercel Bot deployed to Preview April 29, 2026 01:26 View deployment

bmuenzenmeyer approved these changes Apr 30, 2026

View reviewed changes

Comment thread apps/site/next-data/generators/supportersData.mjs

mikeesto reviewed May 15, 2026

View reviewed changes

capture at least the name or image, but omit if both are missing

d32eb79

vercel Bot deployed to Preview May 15, 2026 15:11 View deployment

Merge branch 'main' into github_sponsors

d2d73ef

vercel Bot deployed to Preview May 15, 2026 15:33 View deployment

cursor Bot reviewed May 15, 2026

View reviewed changes

Comment thread apps/site/next-data/generators/supportersData.mjs

bmuenzenmeyer added this pull request to the merge queue May 15, 2026

Merged via the queue into main with commit b5b8eff May 15, 2026
15 checks passed

bmuenzenmeyer deleted the github_sponsors branch May 15, 2026 16:08

Conversation

bjohansebas commented Jan 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Validation

Related Issues

Check List

Uh oh!

vercel Bot commented Jan 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jan 9, 2026

👋 Codeowner Review Request

Uh oh!

This comment was marked as off-topic.

github-actions Bot commented Jan 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

📦 Build Size Comparison

Summary

Changes

Uh oh!

Uh oh!

bjohansebas commented Feb 8, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

MattIPv4 commented Apr 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

MattIPv4 commented Apr 12, 2026

Uh oh!

bjohansebas commented Apr 12, 2026

Uh oh!

bmuenzenmeyer left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

bmuenzenmeyer commented May 15, 2026

Uh oh!

mikeesto left a comment

Choose a reason for hiding this comment

Uh oh!

bmuenzenmeyer commented May 15, 2026

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

9 participants

bjohansebas commented Jan 9, 2026 •

edited

Loading

vercel Bot commented Jan 9, 2026 •

edited

Loading

github-actions Bot commented Jan 9, 2026 •

edited

Loading

MattIPv4 commented Apr 12, 2026 •

edited

Loading