fix(deps): align Node 24 and overrides for Dependabot security CI

.github/workflows/ci.yml

@@ -22,7 +22,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           cache: pnpm
       - run: pnpm install --frozen-lockfile
       - run: pnpm lint
@@ -37,7 +37,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           cache: pnpm
       - run: pnpm install --frozen-lockfile
       - run: pnpm db:generate
@@ -56,7 +56,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           cache: pnpm
       - run: pnpm install --frozen-lockfile
       - run: pnpm build
@@ -77,7 +77,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           cache: pnpm
       - run: pnpm install --frozen-lockfile
       - run: pnpm db:generate
@@ -96,7 +96,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           cache: pnpm
       - run: pnpm install --frozen-lockfile
       - run: pnpm test:integration

.github/workflows/nightly-verification.yml

@@ -39,7 +39,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           cache: pnpm
       - run: pnpm install --frozen-lockfile
       - run: pnpm test:topology
@@ -73,7 +73,7 @@ jobs:
       - if: steps.gate.outputs.enabled == 'true'
         uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           cache: pnpm
       - if: steps.gate.outputs.enabled == 'true'
         run: pnpm install --frozen-lockfile

.github/workflows/playwright.yml

@@ -65,7 +65,7 @@ jobs:
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           cache: pnpm
       - run: pnpm install --frozen-lockfile
       - uses: actions/cache@v4

.github/workflows/publish-playwright-report.yml

@@ -53,7 +53,7 @@ jobs:
       - if: steps.s3.outputs.configured == 'true'
         uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           cache: pnpm
       - if: steps.s3.outputs.configured == 'true'
         run: pnpm install --frozen-lockfile

.github/workflows/release-desktop.yml

@@ -109,7 +109,7 @@ jobs:
       - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
-          node-version: 22
+          node-version: 24
       - run: pnpm install --frozen-lockfile
       - name: Build renderer and Electron main process
         run: pnpm --filter @sentrabot/web build && pnpm --filter @sentrabot/desktop build

.node-version

@@ -0,0 +1 @@
+24.21.0

apps/api/package.json

@@ -19,7 +19,7 @@
     "@sentrabot/core": "workspace:*",
     "@sentrabot/db": "workspace:*",
     "@sentrabot/memory": "workspace:*",
-    "hono": "^4.9.6"
+    "hono": "^4.13.7"
   },
   "devDependencies": {
     "typescript": "^5.9.2",

apps/desktop/package.json

@@ -20,7 +20,7 @@
   },
   "devDependencies": {
     "@playwright/test": "^1.55.0",
-    "electron": "^43.4.0",
+    "electron": "^43.5.0",
     "electron-builder": "^26.0.12",
     "typescript": "^5.9.2",
     "vitest": "^4.1.10"

apps/site/package.json

@@ -4,7 +4,7 @@
   "version": "1.0.0",
   "type": "module",
   "engines": {
-    "node": "22.x"
+    "node": "^24.21.0 || >=26.0.0"
   },
   "scripts": {
     "dev": "vite",

infra/sandboxes/supervisor/package.json

@@ -13,7 +13,7 @@
     "@hono/node-server": "^1.19.1",
     "@sentrabot/core": "workspace:*",
     "dockerode": "^4.0.7",
-    "hono": "^4.9.6",
+    "hono": "^4.13.7",
     "tsx": "^4.20.5",
     "zod": "^4.1.5"
   },

infra/updater/package.json

@@ -14,7 +14,7 @@
     "@hono/node-server": "^1.19.1",
     "@sentrabot/contracts": "workspace:*",
     "@sentrabot/core": "workspace:*",
-    "hono": "^4.9.6",
+    "hono": "^4.13.7",
     "tsx": "^4.20.5"
   },
   "devDependencies": {

package.json

@@ -6,7 +6,7 @@
   "license": "Apache-2.0",
   "packageManager": "pnpm@9.15.0",
   "engines": {
-    "node": "^22.22.2 || ^24.0.0 || >=26.0.0"
+    "node": "^24.21.0 || >=26.0.0"
   },
   "scripts": {
     "dev": "cross-env COREPACK_ENABLE_DOWNLOAD_PROMPT=0 turbo dev --filter=@sentrabot/api --filter=@sentrabot/worker --filter=@sentrabot/web --filter=@sentrabot/sandbox-supervisor",
@@ -44,7 +44,17 @@
       "deepmerge-ts": "8.0.2",
       "fast-uri": "3.1.8",
       "uuid": "14.0.2",
-      "undici@6.28.0": "6.28.1",
+      "hono": "4.13.13",
+      "compression": "1.8.2",
+      "http-cache-semantics": "4.3.0",
+      "ip-address": "10.7.3",
+      "proxy-addr": "2.0.8",
+      "source-map-js": "1.2.2",
+      "brace-expansion@1.1.18": "1.1.21",
+      "brace-expansion@2.1.4": "2.1.7",
+      "brace-expansion@5.0.9": "5.0.12",
+      "undici@6.28.0": "6.29.0",
+      "undici@6.28.1": "6.29.0",
       "undici@7.29.0": "7.29.1",
       "undici@8.10.0": "8.10.2"
     }