chore(ci): bump to node 24 + update dependencies + harden workflow (#77)

* bump to node lts 22

* bump CI actions

* bump to node 24 per https://docs.github.com/en/actions/reference/workflows-and-actions/metadata-syntax#runsusing-for-javascript-actions

* harden workflow

Author: zerosnacks

.github/workflows/check-dist.yml

@@ -1,28 +1,34 @@
 name: nodejs
 
-on: 
+permissions:
+  contents: read
+
+on:
   pull_request:
     branches:
       - master
     paths-ignore:
-      - '**.md'
+      - "**.md"
   push:
     branches:
       - master
     paths-ignore:
-      - '**.md'
+      - "**.md"
 
 jobs:
   check-dist:
     runs-on: ubuntu-latest
+    permissions:
+      actions: write
 
     steps:
-      - uses: actions/checkout@v4
-
-      - name: Use Node.js 20.x
-        uses: actions/[email protected]
+      - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
+      - name: Use Node.js 24.x
+        uses: actions/setup-node@v5
         with:
-          node-version: 20.x
+          node-version: 24.x
 
       - name: Install dependencies
         run: npm ci

.nvmrc

@@ -1 +1 @@
-v20.18.1
+v24.8.0