chore: upgrade Node 22→24, asyncapi-generator 2→3, fix tar vuln

- CI and release workflows: node-version 22 → 24 (Node 24 is Active LTS)
- Root engines field: >=20 → >=24
- @asyncapi/generator: ^2.8.4 → ^3.2.1 (requires Node 24+)
- scripts/generate-asyncapi-html.mjs: use named import { Generator }
- pnpm override tar >=7.5.8: forces patched tar across sqlite3@5.1.7 chain
- sync-versions: bump wallet-toolbox deps from ^2.1.22 → ^2.1.24

Eliminates all 6 high-severity audit findings (tar CVEs). Remaining 9
are moderate/low in dev-only toolchain with no patches available upstream.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: sirdeggen

.github/workflows/ci.yml

@@ -12,7 +12,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        node-version: [22.x]
+        node-version: [24.x]
 
     steps:
       - uses: actions/checkout@v6
@@ -53,7 +53,7 @@ jobs:
       - uses: pnpm/action-setup@v6
       - uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           cache: pnpm
 
       - run: pnpm install --ignore-scripts

.github/workflows/release.yml

@@ -20,7 +20,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           registry-url: https://registry.npmjs.org
           cache: pnpm
 

package.json

@@ -16,18 +16,19 @@
     "docs:preview": "pnpm --filter docs-site preview"
   },
   "devDependencies": {
-    "@asyncapi/generator": "^2.8.4",
+    "@asyncapi/generator": "^3.2.1",
     "@asyncapi/html-template": "^3.5.6"
   },
   "engines": {
-    "node": ">=20",
+    "node": ">=24",
     "pnpm": ">=9"
   },
   "packageManager": "pnpm@9.0.0",
   "pnpm": {
     "overrides": {
       "jest-environment-node": "^30.3.0",
-      "jest-mock": "^30.3.0"
+      "jest-mock": "^30.3.0",
+      "tar": ">=7.5.8"
     }
   }
 }

packages/helpers/fund-wallet/package.json

@@ -22,7 +22,7 @@
   },
   "dependencies": {
     "@bsv/sdk": "^2.0.14",
-    "@bsv/wallet-toolbox": "^2.1.22",
+    "@bsv/wallet-toolbox": "^2.1.24",
     "chalk": "^5.4.1",
     "crypto": "^1.0.1",
     "dotenv": "^16.5.0",

packages/helpers/simple/package.json

@@ -45,7 +45,7 @@
   "dependencies": {
     "@bsv/message-box-client": "^2.1.1",
     "@bsv/sdk": "^2.0.14",
-    "@bsv/wallet-toolbox": "^2.1.22",
+    "@bsv/wallet-toolbox": "^2.1.24",
     "@bsv/wallet-toolbox-client": "^2.1.18"
   },
   "overrides": {

packages/helpers/ts-templates/package.json

@@ -52,7 +52,7 @@
   },
   "homepage": "https://github.com/bsv-blockchain/ts-templates#readme",
   "devDependencies": {
-    "@bsv/wallet-toolbox": "^2.1.22",
+    "@bsv/wallet-toolbox": "^2.1.24",
     "@types/jest": "^30.0.0",
     "jest": "^30.3.0",
     "ts-jest": "^29.4.9",

packages/wallet/wallet-toolbox-examples/package.json

@@ -53,6 +53,6 @@
   },
   "dependencies": {
     "@bsv/sdk": "^2.0.14",
-    "@bsv/wallet-toolbox": "^2.1.22"
+    "@bsv/wallet-toolbox": "^2.1.24"
   }
 }