Upgrade Node.js to v24 and update GitHub Actions (#457)

* Upgrade Node.js to v24 and modernize development tooling

Adopt the toolchain patterns from @seamapi/makenew-tsmodule v3.0.4, mirroring
the update already applied to seamapi/python, seamapi/javascript-http, and
seamapi/docs.

- Add engines and devEngines and drop .nvmrc. Node v24 is now the default in CI,
  with v22.11.0 still supported.
- Update the workflow action versions and install dependencies with
  npm ci --ignore-scripts followed by npm rebuild.
- Update the npm dependencies. Refreshing the lockfile also records the esbuild
  platform packages that npm tracks for tsx.
- Fix the tsconfig.json schema URL.

TypeScript v6 is already in place through @seamapi/smith v1.1.0, which declares
typescript, tsx, eslint, and jiti as peer dependencies and depends on
@types/node directly, so none of them are declared here.

@seamapi/blueprint is held at v1.1.0. Its v1.2.0 rejects the undocumented
submit_args property on /seam/connect_webview/v1/submit and fails the codegen
against the pinned @seamapi/types; the Dependabot seam group will take that
bump together with a compatible @seamapi/types.

The PHP toolchain is unchanged: Composer, PHPUnit, and the PHP version in CI
are untouched. Running the codegen produces byte for byte identical output
under the updated toolchain, including the Prettier v3.9.6 and php-parser
v3.7.0 upgrades.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019z4Rr236utqkdJ9HMYnAPd

* feat(deps-dev): Update npm dependencies

Bring every npm dependency to its latest release, including the major bump of
@prettier/plugin-php to v0.25.0 and the minor bump of @seamapi/blueprint to
v1.2.0. npm outdated is now empty.

@seamapi/blueprint v1.2.0 rejects properties that do not define a type, so it
requires @seamapi/types v1.985.0 to build. The two are bumped together here.

Regenerating against @seamapi/types v1.985.0 adds three purely additive
schema changes to the SDK:

- akiles_metadata on AcsCredential and on the ActionAttempt credential
- access_code and noise_threshold on ActionAttemptResult
- enforced_setpoint_range_celsius on DeviceSensiMetadata

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019z4Rr236utqkdJ9HMYnAPd

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: razor-x

.github/actions/setup/action.yml

@@ -5,7 +5,7 @@ inputs:
   node_version:
     description: The Node.js version.
     required: false
-    default: '20'
+    default: '24'
   registry_url:
     description: The Node.js package registry URL.
     required: false
@@ -19,19 +19,27 @@ runs:
   using: composite
   steps:
     - name: Setup Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v7
       if: inputs.install_dependencies == 'true'
       with:
-        cache: npm
         node-version: ${{ inputs.node_version }}
         registry-url: ${{ inputs.registry_url }}
     - name: Setup Node.js without cache
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v7
       if: inputs.install_dependencies == 'false'
       with:
         node-version: ${{ inputs.node_version }}
         registry-url: ${{ inputs.registry_url }}
     - name: Install dependencies
       if: inputs.install_dependencies == 'true'
       shell: bash
-      run: npm ci
+      run: npm ci --ignore-scripts
+    - name: Rebuild Node.js modules
+      shell: bash
+      run: npm rebuild
+    - name: Run postinstall script
+      shell: bash
+      run: npm run postinstall --if-present
+    - name: Run prepare script
+      shell: bash
+      run: npm run prepare --if-present

.github/workflows/generate.yml

@@ -14,12 +14,12 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.head_ref }}
           token: ${{ secrets.GH_TOKEN }}
       - name: Import GPG key
-        uses: crazy-max/ghaction-import-gpg@v6
+        uses: crazy-max/ghaction-import-gpg@v7
         with:
           git_user_signingkey: true
           git_commit_gpgsign: true
@@ -36,7 +36,7 @@ jobs:
       - name: Generate SDK
         run: npm run generate
       - name: Commit
-        uses: stefanzweifel/git-auto-commit-action@v5
+        uses: stefanzweifel/git-auto-commit-action@v7
         with:
           commit_message: 'ci: Generate code'
           commit_user_name: ${{ secrets.GIT_USER_NAME }}

.github/workflows/publish.yml

@@ -14,7 +14,7 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -24,11 +24,11 @@ jobs:
           mkdir tmp
           outfile=tmp/changelog.txt
           echo "outfile=${outfile}" >> $GITHUB_OUTPUT
-          npx standard-changelog@^2.0.0 --release-count 2 --infile $outfile.tmp --outfile $outfile.tmp
+          npx standard-changelog@^5.0.0 --release-count 2 --infile $outfile.tmp --outfile $outfile.tmp
           sed '1,3d' $outfile.tmp > $outfile
 
       - name: Create GitHub release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v3
         with:
           token: ${{ secrets.GH_TOKEN }}
           prerelease: ${{ contains(github.ref_name, '-') }}

.github/workflows/semantic-release.yml

@@ -22,12 +22,12 @@ jobs:
       new_release_version: ${{ steps.release.outputs.new_release_version }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: Semantic release
         id: release
-        uses: cycjimmy/semantic-release-action@v4
+        uses: cycjimmy/semantic-release-action@v6
         with:
           dry_run: true
   release:
@@ -38,7 +38,7 @@ jobs:
     if: needs.semantic.outputs.new_release_published == 'true' && needs.semantic.outputs.new_release_version != '1.0.0'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
       - name: Release version ${{ needs.semantic.outputs.new_release_version }} on ${{ github.ref_name }}

.github/workflows/test.yml

@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
         with:

.github/workflows/version.yml

@@ -17,11 +17,11 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           token: ${{ secrets.GH_TOKEN }}
       - name: Import GPG key
-        uses: crazy-max/ghaction-import-gpg@v6
+        uses: crazy-max/ghaction-import-gpg@v7
         with:
           git_user_signingkey: true
           git_commit_gpgsign: true