From 883c79bac4664025c6e51e63b7a0b69dde3b436a Mon Sep 17 00:00:00 2001
From: Ihab Soliman <2053386+ihabsoliman@users.noreply.github.com>
Date: Tue, 8 Sep 2026 12:40:22 -0600
Subject: [PATCH] chore(deps): keep @types/node aligned with the node24 action
 runtime

The action's JS runtime is fixed by `using: "node24"` in action.yml. The
GitHub Actions runner only ships node20 and node24 externals and rejects any
other `using:` value, so @types/node majors beyond 24 would type APIs that
throw on the runner.

Pin engines.node to "^24" instead of ">=24": all three workflows resolve their
Node via `node-version-file: package.json`, so the open-ended range let CI
build and test on a newer major than the published action actually runs on.

Tell dependabot to skip @types/node majors for the same reason, so the bump
does not land again every week.
---
 .github/dependabot.yml | 6 ++++++
 package.json           | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f8985d3..4931d83 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -17,6 +17,12 @@ updates:
     schedule:
       interval: "weekly"
     versioning-strategy: "increase"
+    ignore:
+      # @types/node must track the runner's JS runtime (action.yml `using: node24`),
+      # not npm latest. The runner only ships node20/node24 externals, so a major
+      # bump here would type APIs that throw at runtime.
+      - dependency-name: "@types/node"
+        update-types: ["version-update:semver-major"]
     commit-message:
       prefix: "chore"
       prefix-development: "chore"
diff --git a/package.json b/package.json
index 1e0cf6b..da1910a 100644
--- a/package.json
+++ b/package.json
@@ -24,7 +24,7 @@
     "setup"
   ],
   "engines": {
-    "node": ">=24"
+    "node": "^24"
   },
   "author": "Ihab Soliman",
   "license": "MIT",