feat!: bump engines requirement to Node 22

[erickzhao]

BREAKING CHANGE: bumps required Node.js version to >=22.12.0. ESM-only.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	array-buffer-byte-length@​1.0.0 ⏵ 1.0.2			+3
	which-collection@​1.0.2
	has-tostringtag@​1.0.0 ⏵ 1.0.2			+1
	object.groupby@​1.0.1 ⏵ 1.0.3	+1
	is-set@​2.0.3
	is-weakmap@​2.0.2
	is-map@​2.0.3
	set-function-length@​1.1.1 ⏵ 1.2.2			+1
	object.fromentries@​2.0.7 ⏵ 2.0.8
	is-negative-zero@​2.0.2 ⏵ 2.0.3			+4
	available-typed-arrays@​1.0.5 ⏵ 1.0.7			+4
	typed-array-buffer@​1.0.0 ⏵ 1.0.3			+3
	unbox-primitive@​1.0.2 ⏵ 1.1.0			+1
	get-symbol-description@​1.0.0 ⏵ 1.1.0			+1
	is-date-object@​1.0.5 ⏵ 1.1.0			+1
	safe-regex-test@​1.0.0 ⏵ 1.1.0			+3
	arraybuffer.prototype.slice@​1.0.2 ⏵ 1.0.4	+1
	is-shared-array-buffer@​1.0.2 ⏵ 1.0.4			+2
	array.prototype.flat@​1.3.2 ⏵ 1.3.3
	is-bigint@​1.0.4 ⏵ 1.1.0
	safe-array-concat@​1.0.1 ⏵ 1.1.3			+1
	es-set-tostringtag@​2.0.1 ⏵ 2.1.0			+6
	is-weakset@​2.0.4
	side-channel@​1.0.4 ⏵ 1.1.0			+22
	typed-array-length@​1.0.4 ⏵ 1.0.7			+1
	internal-slot@​1.0.5 ⏵ 1.1.0			+1
	array.prototype.flatmap@​1.3.2 ⏵ 1.3.3	+1		+1
	string.prototype.trim@​1.2.8 ⏵ 1.2.10			+1
	object.values@​1.1.7 ⏵ 1.2.1
	array.prototype.findlastindex@​1.2.3 ⏵ 1.2.6
	is-generator-function@​1.1.0
	array-includes@​3.1.7 ⏵ 3.1.9
See 134 more rows in the dashboard

View full report

[erickzhao]

After @erikian's latest round of reviews, a few things have changed in the implementation purely due to tightening up the types:

• createSignOpts for macOS and Windows no longer takes in undefined.
• Missing continueOnError option added to Windows.
• We pass in identity: undefined instead of identity: null as a default for macOS since that's what the types expect for @electron/osx-sign.
• More explicit control flow in createSignOpts.

These are all improvements that can be separated out of this PR as well if we think this is too scope-creepy.