build: pin Node.js 24.20.0 LTS

CHANGES.md

@@ -9,6 +9,6 @@ PastureStack has modified this Apache-2.0-licensed work as follows:
 - renamed the project-brand glyph to `pasture-stack` (`icon-pasture-stack` in CSS);
 - renamed the font family, generated files, package metadata, and demo branding;
 - replaced the historical release tooling with a reproducible local build and audit workflow.
-- pinned the build to Node.js 24.19.0 LTS and npm 12.0.2, added registry, integrity, lifecycle-script, and dependency-vulnerability gates.
+- pinned the build to Node.js 24.20.0 LTS and npm 12.0.2, added registry, integrity, lifecycle-script, and dependency-vulnerability gates.
 
 These changes do not claim authorship of the compatibility API or Lucide/Feather artwork. The existing root `LICENSE`, the Lucide/Feather notices under `LICENSES/`, and the contributor acknowledgment in `UPSTREAM_ATTRIBUTION.md` are retained. The GitHub fork preserves the upstream history unchanged; this notice describes only the PastureStack integration commit and its current tree.

PROVENANCE.md

@@ -21,7 +21,7 @@ Product-like legacy compatibility aliases map to neutral Lucide symbols. No Appl
 
 ## Build toolchain and dependency integrity
 
-- Runtime: Node.js 24.19.0 LTS
+- Runtime: Node.js 24.20.0 LTS
 - Package manager: npm 12.0.2
 - Lock format: npm lockfile version 3
 - Registry allowlist: `registry.npmjs.org`

README.md

@@ -8,7 +8,7 @@ PastureStack is an independent community effort to preserve, audit, and moderniz
 
 ## Local validation
 
-The build toolchain is pinned to Node.js 24.19.0 LTS and npm 12.0.2. Use those exact versions so the lockfile, native WOFF2 converter, and generated font artifacts are reproducible.
+The build toolchain is pinned to Node.js 24.20.0 LTS and npm 12.0.2. Use those exact versions so the lockfile, native WOFF2 converter, and generated font artifacts are reproducible.
 
 ```sh
 npm ci

package.json

@@ -37,13 +37,13 @@
   "license": "SEE LICENSE IN LICENSES/README.md",
   "packageManager": "npm@12.0.2",
   "engines": {
-    "node": "24.19.0",
+    "node": "24.20.0",
     "npm": "12.0.2"
   },
   "devEngines": {
     "runtime": {
       "name": "node",
-      "version": "24.19.0",
+      "version": "24.20.0",
       "onFail": "error"
     },
     "packageManager": {

scripts/audit.mjs

@@ -84,9 +84,9 @@ const packageJson = JSON.parse(await readFile(path.join(root, "package.json"), "
 const packageLock = JSON.parse(await readFile(path.join(root, "package-lock.json"), "utf8"));
 if (
   packageJson.packageManager !== "npm@12.0.2" ||
-  packageJson.engines?.node !== "24.19.0" ||
+  packageJson.engines?.node !== "24.20.0" ||
   packageJson.engines?.npm !== "12.0.2" ||
-  packageJson.devEngines?.runtime?.version !== "24.19.0" ||
+  packageJson.devEngines?.runtime?.version !== "24.20.0" ||
   packageJson.devEngines?.packageManager?.version !== "12.0.2"
 ) {
   throw new Error("The Node.js LTS and npm build toolchain must remain exactly pinned");