FD-672: Upgrade Node.js from v20 to v24

[KARSE22]

Summary

• Bumps Node.js from v20.18.1 to v24.15.0 across all environments
• Adds actions/setup-node@v4 to ci.yml and cd.yml (these were missing it; deploy.yml already had it)
• Updates Dockerfile to node:24-alpine (floating tag so OS security patches apply automatically)
• Updates package.json engines to >=24.0.0
• Fixes a pre-existing deprecated set-output command in cd.yml → uses $GITHUB_OUTPUT

[gemini-code-assist]

Code Review

This pull request updates the Node.js version from 20 to 24 across the project, including the .node-version file, the contract tests Dockerfile, and the package configuration files. The reviewer recommends pinning the Docker base image to the exact Node.js version (24.15.0-alpine) instead of using a floating tag to ensure build consistency and reproducibility.

[guardrails]

⚠️ We detected 19 security issues in this pull request:

Insecure Access Control (1)

Severity	Details	Docs
High	Title: Missing User Instruction lob-openapi/actions/contract_tests/Dockerfile Line 1 in a80ed7d FROM node:24.15.0-alpine	📚

More info on how to fix Insecure Access Control in Dockerfile.

---

Vulnerable Libraries (18)

Severity	Details
High	pkg:npm/css-minimizer-webpack-plugin@4.2.2 (t) upgrade to: > 4.2.2
Critical	pkg:npm/redoc-cli@0.13.21 (t) upgrade to: > 0.13.21
Medium	pkg:npm/css-loader@6.11.0 (t) upgrade to: > 6.11.0
Medium	pkg:npm/yaml@2.4.2 (t) upgrade to: 2.8.3,1.10.3
Critical	pkg:npm/@stoplight/prism-cli@4.14.1 (t) upgrade to: > 4.14.1
N/A	pkg:npm/ajv@8.13.0 (t) upgrade to: 8.18.0
Critical	pkg:npm/sass@1.77.2 (t) upgrade to: > 1.77.2
High	pkg:npm/webpack-cli@4.10.0 (t) upgrade to: > 4.10.0
Informational	pkg:npm/mini-css-extract-plugin@2.9.0 (t) upgrade to: > 2.9.0
High	pkg:npm/patch-package@6.5.1 (t) upgrade to: > 6.5.1
Critical	pkg:npm/@redocly/cli@1.12.2 (t) upgrade to: > 1.12.2
High	pkg:npm/@actions/core@1.10.1 (t) upgrade to: > 1.10.1
High	pkg:npm/ava@4.3.3 (t) upgrade to: > 4.3.3
Critical	pkg:npm/@slack/web-api@6.12.0 (t) upgrade to: > 6.12.0
High	pkg:npm/openapi-to-postmanv2@3.2.1 (t) upgrade to: > 3.2.1
Critical	pkg:npm/@stoplight/spectral-cli@6.11.1 (t) upgrade to: > 6.11.1
Low	pkg:npm/webpack@5.91.0 (t) upgrade to: 5.104.0
High	pkg:npm/webpack-dev-server@4.15.2 (t) upgrade to: 5.2.4

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

[kevinpjones]

LGTM, FWIW