Chore/update node fix audit (#9893)

Author: deleonio

.github/actions/pnpm-setup/action.yml

@@ -9,7 +9,7 @@ runs:
     - name: Use Node.js
       uses: actions/setup-node@v5
       with:
-        node-version: 22
+        node-version: 24
         cache: 'pnpm'
     - name: Install dependencies
       run: pnpm install

.github/workflows/auto-dependency-updater.yml

@@ -34,46 +34,39 @@ jobs:
         with:
           ref: ${{ matrix.base }}
           persist-credentials: false
+      - name: Remove overrides before install
+        run: |
+          if grep -q '^overrides:' pnpm-workspace.yaml; then
+            sed -i '/^overrides:/,$ d' pnpm-workspace.yaml
+          fi
       - uses: actions/setup-node@v6
         with:
           # cache: pnpm
-          node-version: 22
+          node-version: 24
       - uses: pnpm/action-setup@v5
         id: pnpm-install
         with:
           version: 10
           run_install: false
-      - name: Get pnpm store directory
-        id: pnpm-cache
-        shell: bash
-        run: echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
-      - uses: actions/cache@v5
-        with:
-          path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
-          key: ${{ runner.os }}-pnpm-store
-          restore-keys: |
-            ${{ runner.os }}-pnpm-store
-
-      - name: Remove overrides before install
-        run: |
-          if grep -q '^overrides:' pnpm-workspace.yaml; then
-            sed -i '/^overrides:/,$ d' pnpm-workspace.yaml
-          fi
       - name: Install
-        run: pnpm i --no-frozen-lockfile
+        run: pnpm i --ignore-scripts --no-frozen-lockfile
       - name: Update dependencies (minor)
         run: |
           pnpm ncu:minor
           # Run the recursive update twice so peer and dev dependency bumps align after the first pass adjusts peer ranges.
           pnpm ncu:minor
+      - name: Clear pnpm store
+        run: pnpm store prune
       - name: Reinstall dependencies (prepare for fix)
-        run: pnpm i --no-frozen-lockfile
+        run: pnpm i --ignore-scripts --no-frozen-lockfile
       - name: Try to fix audit issues
         run: pnpm audit --audit-level high --fix --production
+      - name: Clear pnpm store
+        run: pnpm store prune
       - name: Reinstall dependencies (final lock file)
-        run: pnpm i --no-frozen-lockfile
+        run: pnpm i --ignore-scripts --no-frozen-lockfile
       - name: Fix format
-        run: pnpm -r format -w
+        run: pnpm format -w
 
       - name: Check for changes
         id: verify-changed-files

.github/workflows/cve-overview.yml

@@ -36,7 +36,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
       - uses: pnpm/action-setup@v5
         id: pnpm-install
         with:
@@ -76,7 +76,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
       - uses: pnpm/action-setup@v5
         id: pnpm-install
         with:

.github/workflows/draft-deploy.yml

@@ -30,7 +30,7 @@ jobs:
       - name: Install Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
       - name: Install pnpm
         uses: pnpm/action-setup@v5
         id: pnpm-install

.github/workflows/manage-npm-tags.yml

@@ -70,7 +70,7 @@ jobs:
       - name: Install Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           registry-url: https://registry.npmjs.org
 
       - name: ${{ github.event.inputs.action }} tag "${{ github.event.inputs.tag }}" for ${{ matrix.package }}

.github/workflows/publish.yml

@@ -62,7 +62,7 @@ jobs:
       - name: Install Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           registry-url: https://registry.npmjs.org
 
       - name: Install pnpm
@@ -238,7 +238,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           registry-url: https://npm.pkg.github.com
 
       - name: Publish sample react

.github/workflows/security-scan-schedule.yml

@@ -31,7 +31,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           cache: 'pnpm'
 
       - name: Run security scans

.github/workflows/security-scan.yml

@@ -43,7 +43,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
 
       - name: Run security scans
         uses: public-ui/kolibri/.github/actions/security-scan@develop

.github/workflows/snyk-major-scan.yml

@@ -27,7 +27,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
 
       - name: Install Snyk CLI
         run: |

.github/workflows/test-deploy.yml

@@ -31,7 +31,7 @@ jobs:
       - name: Install Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
       - name: Install pnpm
         uses: pnpm/action-setup@v5
         id: pnpm-install