feat(ci): test and publish on Node 24 LTS

Coverage: 94.75% (was 94.75%)

Author: ihor-sokoliuk

.github/workflows/ci.yml

@@ -16,6 +16,10 @@ jobs:
   test:
     name: Lint, Build, and Test
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        node-version: ['20', '24']
 
     steps:
       - name: Checkout code
@@ -24,7 +28,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
-          node-version: '20'
+          node-version: ${{ matrix.node-version }}
           cache: 'npm'
 
       - name: Install dependencies

.github/workflows/npm-publish.yml

@@ -20,15 +20,15 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
-          node-version: '20'
+          node-version: '24'
           registry-url: 'https://registry.npmjs.org/'
 
       # ──────────────────────────────────────────────────────────────────────
       # ⚠️  DO NOT REMOVE / DO NOT "SIMPLIFY" THIS STEP. It is load-bearing.
       #
       # Tokenless OIDC "trusted publishing" (used below — `npm publish --provenance`
-      # with NO NODE_AUTH_TOKEN) requires npm >= 11.5.1, but the GitHub-hosted
-      # Node 20 runner ships npm ~10. Without this upgrade the publish fails with:
+      # with NO NODE_AUTH_TOKEN) requires npm >= 11.5.1.
+      # GitHub-hosted runner images may bundle a different npm version. Without this exact pin the publish fails with:
       #     npm error 404  'mcp-searxng@<version>' is not in this registry
       # This exact regression shipped in v1.6.0 — see SEC-015 in TODO-done.md.
       #
@@ -82,7 +82,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
-          node-version: '20'
+          node-version: '24'
           registry-url: 'https://registry.npmjs.org/'
 
       - name: Install and verify mcp-publisher