Pin @types/node to the Node 24 runtime; stop Dependabot chasing newer majors

@types/node tracks the Node major version. We were on @types/node 20 (behind
our Node 24 runtime), and Dependabot kept proposing 25 (the current/odd Node
line) — which would expose Node 25 type defs for APIs our Node 24 runtime
doesn't have. Bump to ^24 to match the runtime, and ignore @types/node major
bumps in dependabot.yml so it stays in step with the Node we actually run.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: mtoy-googly-moogly

.github/dependabot.yml

@@ -5,6 +5,11 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 10
+    ignore:
+      # @types/node tracks the Node major; keep it pinned to our runtime (24)
+      # rather than chasing the current/odd Node line.
+      - dependency-name: "@types/node"
+        update-types: ["version-update:semver-major"]
     groups:
       duckdb:
         patterns:

package-lock.json

@@ -90,7 +90,7 @@
     "@malloydata/malloy-connections": "0.0.405",
     "@malloydata/malloy-sql": "0.0.405",
     "@types/jest": "^29.2.5",
-    "@types/node": "^20.14.8",
+    "@types/node": "^24.13.1",
     "@yao-pkg/pkg": "^6.20.0",
     "ajv": "^8.12.0",
     "axios": "^1.4.0",