fix: pin @types/node to CI runtime major and block Dependabot major bumps

Add a Dependabot ignore for @types/node semver-major updates so
Dependabot stops proposing wrong-direction major bumps that would
reference APIs absent at runtime. Pin the package from ^25 (odd,
non-LTS) to ^24, matching the Node major that runs cdk synth/tsc
in CI. tsc --noEmit passes cleanly.

.github/dependabot.yml

@@ -6,6 +6,14 @@ updates:
       interval: weekly
     assignees:
       - amoussa1229
+    ignore:
+      # @types/node must track the runtime Node major, not the latest release.
+      # Pure-CDK repo: the runtime is the Node that runs `cdk synth`/`tsc` in CI.
+      # Dependabot can't see that and a too-new types major still compiles (passes
+      # CI, wrong at runtime). Sanctioned exception to the no-blanket-ignore rule
+      # (engineering-handbook github-standards Pinning Principle). Minor/patch flow.
+      - dependency-name: "@types/node"
+        update-types: ["version-update:semver-major"]
 
   - package-ecosystem: github-actions
     directory: /

package-lock.json

@@ -16,7 +16,7 @@
         "app": "bin/app.js"
       },
       "devDependencies": {
-        "@types/node": "^25.9.3",
+        "@types/node": "^24",
         "aws-cdk": "^2.1129.0",
         "source-map-support": "^0.5.21",
         "typescript": "~6.0.3"
@@ -84,13 +84,13 @@
       }
     },
     "node_modules/@types/node": {
-      "version": "25.9.3",
+      "version": "24.13.2",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-25.9.3.tgz",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.13.2.tgz",
-      "integrity": "sha512-603BddQMv3pUcr4U2dhujk83N2tTDVr/34wII2B6bJy6g+8WD6yUb11jszNs0gdi4PesVWl7ABt8nYMVpnLUcg==",
+      "integrity": "sha512-fRa09kZTgu8o71KFcDjUFuc7F+dEbZYZmkI0mg5YBTRs0yMKjYHsq/c0urDKeDb+D5qVgXOdFcuu+DZPKOITwA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "undici-types": ">=7.24.0 <7.24.7"
+        "undici-types": "~7.18.0"
       }
     },
     "node_modules/aws-cdk": {
@@ -525,9 +525,9 @@
       }
     },
     "node_modules/undici-types": {
-      "version": "7.24.6",
+      "version": "7.18.2",
-      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.24.6.tgz",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.18.2.tgz",
-      "integrity": "sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg==",
+      "integrity": "sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==",
       "dev": true,
       "license": "MIT"
     }

package.json

@@ -12,7 +12,7 @@
     "diff": "cdk diff"
   },
   "devDependencies": {
-    "@types/node": "^25.9.3",
+    "@types/node": "^24",
     "aws-cdk": "^2.1129.0",
     "source-map-support": "^0.5.21",
     "typescript": "~6.0.3"