[jamespsterling]

Summary

Moves setup-node in ci.yaml (5 jobs) and bump-openrouter-sdk.yaml from 22 to 24, so these jobs match the publish workflow, which already runs on Node 24. Node 24 gets security fixes until 2028-04-30. The pre-commit hook (pnpm run lint && pnpm run typecheck) passed on the commit.

Link to Devin session: https://openrouter.devinenterprise.com/sessions/6be9aa5a8eb04f0f861a6b128fdec3f9
Open in Devin Desktop: https://openrouter.devinenterprise.com/desktop/session/6be9aa5a8eb04f0f861a6b128fdec3f9?variant=devin
Requested by: @jamespsterling

---

[devin-ai-integration]

I'll fix CI failures and address comments from users with write access that start with 'Devin'.

• Disable automatic comment, CI, and merge conflict monitoring

---

Original prompt from James

SYSTEM:
<latest_message>
James Sterling (U09LUTAUYSH) [ts=1793816635.983679]: @Devin anything from <https://nodejs.org/en/blog/vulnerability/november-2026-security-releases|nodejs.org/en/blog/vulnerability/november-2026-security-releases> we need to be prepared for?
</latest_message>

=== BEGIN THREAD HISTORY (in #security) ===
James Sterling (U09LUTAUYSH) [ts=1793816635.983679]: @Devin anything from <https://nodejs.org/en/blog/vulnerability/november-2026-security-releases|nodejs.org/en/blog/vulnerability/november-2026-security-releases> we need to be prepared for?
=== END THREAD HISTORY ===
Channel ID: C06PWJG9P4J
Thread URL: https://openrouter.slack.com/archives/C06PWJG9P4J/p1793816635983679?thread_ts=1793816635.983679&amp;cid=C06PWJG9P4J

The <latest_message> is the message that you should use to guide your goals + task for this session, and you should use the rest of the slack thread as context.
A [ts=...] marker on a Slack message is that message's timestamp. To act on a specific message with the slack tool (e.g. adding an emoji reaction via the reaction command), pass that value as timestamp along with the Channel ID — no extra lookup call is needed.

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.