Moved the runtime and typings onto Node 24 alongside .nvmrc

The Renovate update only bumped .nvmrc, which nothing in CI or
production reads: the Cloud Run image and every test container come
from the Dockerfile FROM line, and our docker:disableMajor preset
means Renovate can never bump that base image major itself. Merged
alone, the repo would declare Node 24 while everything that actually
runs stayed on 22 — and a green build here would prove nothing, since
the tests execute inside the Node 22 image.

- Dockerfile base image → node:24.18.0-alpine, so tests and
  production genuinely move to 24
- @types/node → 24.13.3 and the renovate allowedVersions pin '<23' →
  '<25', per the lockstep rule documented in renovate.json5

Author: sagzy

.github/renovate.json5

@@ -36,16 +36,16 @@
       ]
     },
 
-    // Pin @types/node to the deployed Node runtime major (22.x, see Dockerfile
+    // Pin @types/node to the deployed Node runtime major (24.x, see Dockerfile
     // and .nvmrc). Bumping the typings ahead of the runtime lets the compiler
-    // accept Node-24-only APIs that won't exist in production. Bump
-    // allowedVersions in lockstep when the Node base image is upgraded.
+    // accept APIs that won't exist in production. Bump allowedVersions in
+    // lockstep when the Node base image is upgraded.
     {
       description: 'Pin @types/node to the deployed Node runtime major',
       matchPackageNames: [
         '@types/node',
       ],
-      allowedVersions: '<23',
+      allowedVersions: '<25',
     },
   ],
 }

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:22.23.1-alpine@sha256:16e22a550f3863206a3f701448c45f7912c6896a62de43add43bb9c86130c3e2
+FROM node:24.18.0-alpine@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff8c2a908f81e6f1a95432d679c54fbfd
 
 RUN apk add python3 g++ make
 RUN apk add --no-cache ca-certificates

package.json

@@ -50,7 +50,7 @@
     "@fedify/cli": "2.3.2",
     "@types/html-to-text": "9.0.4",
     "@types/jsonwebtoken": "9.0.10",
-    "@types/node": "22.20.1",
+    "@types/node": "24.13.3",
     "@types/node-jose": "1.1.13",
     "@types/sanitize-html": "2.16.1",
     "@types/sinon": "22.0.0",