chore: bump minimum Node.js version to v24 (current LTS)

- Update package.json engines.node to >=24.x
- Update GitHub Actions workflow matrix to 24.x
- Update .travis.yml to test against 24.x
- Update .devcontainer.json to typescript-node:1-24
- Update v6.0 changelog with new minimum requirement

BREAKING CHANGE: Node.js >=24 is now required.

Author: jkyberneees

.devcontainer.json

@@ -1,4 +1,4 @@
 {
-  "image": "mcr.microsoft.com/devcontainers/typescript-node:0-18",
+  "image": "mcr.microsoft.com/devcontainers/typescript-node:1-24",
   "forwardPorts": [3000, 8080]
 }

.github/workflows/tests.yaml

@@ -6,7 +6,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [20.x, 22.x]
+        node-version: [24.x]
     steps:
       - uses: actions/checkout@v4
       - name: Setup Environment (Using NodeJS ${{ matrix.node-version }})

.travis.yml

@@ -1,8 +1,6 @@
 language: node_js
 node_js:
-  - "10"
-  - "12"
-  - "14"
+  - "24"
 
 script:
   - npx standard

docs/README.md

@@ -487,6 +487,9 @@ https://goo.gl/forms/qlBwrf5raqfQwteH3
 ## 6.0
 > Restana version 6.0 focuses on security hardening and reducing attack surface.
 
+Added:
+  - Minimum Node.js version is now v24.x (current LTS).
+
 Changed:
   - `TRACE` HTTP method is no longer supported by default. Removed from `methods.js` to prevent Cross-Site Tracing (XST) risks. Re-enable for debugging with `{ enableTrace: true }` in the service constructor.
   - `res.send(data, code, headers)` now validates the `headers` parameter. Security-sensitive and hop-by-hop headers (`transfer-encoding`, `content-length`, `connection`, `keep-alive`, `host`, `set-cookie`) are silently dropped. Invalid header key characters (CRLF, newlines) are caught and skipped instead of crashing with a 500 error.

package.json

@@ -22,7 +22,7 @@
     "service"
   ],
   "engines": {
-    "node": ">=10.x"
+    "node": ">=24.x"
   },
   "author": "Rolando Santamaria Maso <kyberneees@gmail.com>",
   "license": "MIT",