chore(publish-npm): default Node.js runtime to 24

Upgrade the publish-npm and publish-npm-packages action defaults from
Node 20 to Node 24 so OIDC publishing can use current npm without a
Node 20 engine pin.

Co-authored-by: Ryan Zhu <zhuhaoyu0909@icloud.com>

Author: cursoragent

.github/blocks/publish-npm-packages/action.yaml

@@ -12,7 +12,7 @@ inputs:
   node-version:
     description: '[string] Node.js version'
     required: false
-    default: '20'
+    default: '24'
   tag:
     description: "[string] NPM tag (e.g., 'latest', 'beta')"
     required: false

.github/blocks/publish-npm/action.yaml

@@ -9,7 +9,7 @@ inputs:
   node-version:
     description: '[string] Node.js version'
     required: false
-    default: '20'
+    default: '24'
   working-directory:
     description: '[string] Directory containing package.json'
     required: false
@@ -46,9 +46,10 @@ runs:
         node-version: ${{ inputs.node-version }}
         registry-url: 'https://registry.npmjs.org'
 
-    # npm OIDC Trusted Publishing requires npm >= 11.5.1, but Node 20 ships
-    # npm 10.x. Without this, the OIDC publish below signs provenance yet can't
-    # authenticate tokenlessly, so it publishes unauthenticated and 404s.
+    # npm OIDC Trusted Publishing requires npm >= 11.5.1. Node's bundled npm
+    # can be older (e.g. Node 20 ships npm 10.x). Without this, the OIDC publish
+    # below signs provenance yet can't authenticate tokenlessly, so it publishes
+    # unauthenticated and 404s.
     - name: Upgrade npm for OIDC Trusted Publishing
       shell: bash
       run: |

README.md

@@ -1103,7 +1103,7 @@ Builds and publishes multiple monorepo packages to npm in dependency order. Supp
 |-------|------|----------|---------|-------------|
 | `changed-packages` | string | Yes | — | JSON array of packages in topological order |
 | `bun-version` | string | No | `latest` | Bun version |
-| `node-version` | string | No | `20` | Node.js version |
+| `node-version` | string | No | `24` | Node.js version |
 | `tag` | string | No | `latest` | npm dist-tag |
 | `build-command` | string | No | `bun run build` | Per-package build command (ignored if `root-build-command` is set) |
 | `root-build-command` | string | No | `""` | Build once at repo root (e.g., `turbo build`) |
@@ -1254,7 +1254,7 @@ Publishes a single package to npm (installs dependencies, builds, publishes). Tr
 | Input | Type | Required | Default | Description |
 |-------|------|----------|---------|-------------|
 | `bun-version` | string | No | `latest` | Bun version |
-| `node-version` | string | No | `20` | Node.js version |
+| `node-version` | string | No | `24` | Node.js version |
 | `working-directory` | string | No | `.` | Directory containing `package.json` |
 | `build-command` | string | No | `bun run build` | Build command |
 | `tag` | string | No | `latest` | npm dist-tag |