ci: run workflows on Node 24 with minimum 22 guard

Add setup-node 24 to all jobs (check previously had no explicit Node). Order setup-node before setup-bun for release so npm auth uses Node 24. Assert major >=22 in check, prerelease-pack, and release.

Author: AlbinoGeek

.github/workflows/ci.yml

@@ -11,6 +11,10 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "24"
+
       - uses: oven-sh/setup-bun@v2
         with:
           bun-version: 1.3.11
@@ -27,26 +31,32 @@ jobs:
       - name: Unit tests
         run: bun run test
 
+      - name: Assert Node.js version
+        run: node -e "const v=+process.version.slice(1).split('.')[0]; if(v<22)process.exit(1)"
+
   prerelease-pack:
     needs: check
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
 
-      - uses: oven-sh/setup-bun@v2
+      - uses: actions/setup-node@v4
         with:
-          bun-version: 1.3.11
+          node-version: "24"
 
-      - uses: actions/setup-node@v4
+      - uses: oven-sh/setup-bun@v2
         with:
-          node-version: "22"
+          bun-version: 1.3.11
 
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
       - name: Build
         run: bun run build
 
+      - name: Assert Node.js version
+        run: node -e "const v=+process.version.slice(1).split('.')[0]; if(v<22)process.exit(1)"
+
       - name: Pack npm tarball (prerelease snapshot)
         id: pack
         run: |

.github/workflows/release.yml

@@ -17,14 +17,17 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "24"
+          registry-url: "https://registry.npmjs.org"
+
       - uses: oven-sh/setup-bun@v2
         with:
           bun-version: 1.3.11
 
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "22"
-          registry-url: "https://registry.npmjs.org"
+      - name: Assert Node.js version
+        run: node -e "const v=+process.version.slice(1).split('.')[0]; if(v<22)process.exit(1)"
 
       - name: Install dependencies
         run: bun install --frozen-lockfile

HUMANS.md

@@ -86,7 +86,7 @@ bun run setup-hooks   # once per clone: use .githooks (pre-commit: check; pre-pu
 
 **Git hooks:** after `setup-hooks`, **pre-commit** runs `bun run check`; **pre-push** runs `bun install --frozen-lockfile`, `bun run build`, `bun run check`, and `bun run test` (same order as CI). Set **`SKIP_GIT_HOOKS=1`** or use **`--no-verify`** to bypass.
 
-**CI:** [`.github/workflows/ci.yml`](.github/workflows/ci.yml) runs on pull requests and pushes to `main`: `bun install --frozen-lockfile`, `bun run build`, `bun run check`, and `bun run test`. A follow-up job **`prerelease-pack`** builds the same tree and runs **`npm pack`**, then uploads a **prerelease `.tgz` artifact** (named with the commit SHA) you can download from the workflow run’s **Artifacts** section (retention 90 days). Match the check job locally before opening a PR.
+**CI:** [`.github/workflows/ci.yml`](.github/workflows/ci.yml) runs on pull requests and pushes to `main`: **`actions/setup-node` with Node 24** (minimum 22 asserted), then `bun install --frozen-lockfile`, `bun run build`, `bun run check`, and `bun run test`. A follow-up job **`prerelease-pack`** builds the same tree and runs **`npm pack`**, then uploads a **prerelease `.tgz` artifact** (named with the commit SHA) you can download from the workflow run’s **Artifacts** section (retention 90 days). Match the check job locally before opening a PR.
 
 ## Publishing