Update to use Node 24 with local artifact package and security fixes

README.md

@@ -41,7 +41,7 @@ See also [download-artifact](https://github.com/actions/download-artifact).
 ## v4 - What's new
 
 > [!IMPORTANT]
-> upload-artifact@v4+ is not currently supported on GitHub Enterprise Server (GHES) yet. If you are on GHES, you must use [v3](https://github.com/actions/upload-artifact/releases/tag/v3).
+> upload-artifact@v4+ is not currently supported on GHES yet. If you are on GHES, you must use [v3](https://github.com/actions/upload-artifact/releases/tag/v3).
 
 The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.
 

merge/action.yml

@@ -61,5 +61,5 @@ outputs:
     description: >
       SHA-256 digest for the artifact that was just uploaded. Empty if the artifact upload failed.
 runs:
-  using: 'node20'
+  using: 'node24'
   main: '../dist/merge/index.js'

package.json

@@ -28,6 +28,9 @@
     "url": "https://github.com/actions/upload-artifact/issues"
   },
   "homepage": "https://github.com/actions/upload-artifact#readme",
+  "engines": {
+    "node": ">=24"
+  },
   "dependencies": {
     "@actions/artifact": "file:../packages/artifact",
     "@actions/core": "^1.11.1",
@@ -52,7 +55,7 @@
     "ts-jest": "^29.0.3",
     "typescript": "^5.2.2"
   },
-  "overrides": {
+    "overrides": {
     "uri-js": "npm:uri-js-replace@^1.0.1"
   }
 }