[DEVA11Y-828] fix(security): install Node 22.23.4 instead of end-of-life Node 20 (#2)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Author: Crash0v3rrid3

.github/workflows/release.yml

@@ -31,7 +31,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: '22.23.4'
 
       # Bundle a dist/ IF the action grows JS entrypoints (esbuild pattern).
       # Guarded so the stub is a no-op for the current pure-composite action.
@@ -43,7 +43,7 @@ jobs:
             npm ci
             # Example bundling target for a future JS action entrypoint:
             #   npx esbuild src/index.ts --bundle --platform=node \
-            #     --target=node20 --outfile=dist/index.js
+            #     --target=node22 --outfile=dist/index.js
             npm run build
             echo "Bundled dist/ produced."
           else

action.yml

@@ -241,7 +241,7 @@ runs:
       if: steps.preflight.outputs.ready == 'true'
       uses: actions/setup-node@v4
       with:
-        node-version: '20'
+        node-version: '22.23.4'
 
     # ---------------------------------------------------------------------------
     # 6. Run the pinned, published CLI in PR-scan mode. The CLI resolves the