Node >= 24.16.0 introduced a stream-lifecycle change that exposes a
long-standing bug in yauzl@2.10.0's vendored fd-slicer: its custom
`destroy()` collides with Node's native readable-stream destroy and
the deflate read stream stops emitting `data`/`end` partway through
a sufficiently-large entry. The outer Promise never settles, so
`ck new` hangs at "Extracting files... this may take a while" with
the spinner spinning indefinitely on Linux.

`extract-zip@2.0.1` is unmaintained (6 years stale) and still pins
`yauzl@^2.10.0`. The fix landed upstream in yauzl@3.3.1 but is not
reachable through extract-zip.

This mirrors the existing macOS handling: route Linux through the
system unzip binary first and only fall back to the JS path if the
binary is missing. On WSL2/Linux this replaces a >2-minute hang
with a ~300ms native extraction.

Refs:
- nodejs/node#63487  (Node 24.16.0 regression)
- thejoshwolfe/yauzl#169  (fd-slicer destroy collision)
- thejoshwolfe/yauzl#170  (fix shipped in yauzl@3.3.1)
- max-mapper/extract-zip#154  (unmaintained, no fix coming)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Electron's postinstall silently fails on Node 24.16.0 due to a bug in
yauzl (used by extract-zip) that causes zip extraction to hang without
error. Override yauzl to ^3.3.1 which contains the upstream fix
(thejoshwolfe/yauzl#170). This resolves electron/electron#51619.

Also remove --silent from npm install commands in the Makefile so that
install errors are visible in CI output instead of being suppressed.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* chore: update Node.js to 24

Upgrade all CI workflow Node.js version references to Node 24 (LTS).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* fix: resolve Electron install failure on Node 24

Electron's postinstall silently fails on Node 24.16.0 due to a bug in
yauzl (used by extract-zip) that causes zip extraction to hang without
error. Override yauzl to ^3.3.1 which contains the upstream fix
(thejoshwolfe/yauzl#170). This resolves electron/electron#51619.

Also remove --silent from npm install commands in the Makefile so that
install errors are visible in CI output instead of being suppressed.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* chore: update package-lock.json for yauzl override

Regenerate lockfile to resolve yauzl to v3.3.2 (via the override added
in the previous commit). This fixes the Electron binary extraction
failure on Node 24.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

…Node 24.16.0+ (nexu-io#3584)

fd-slicer's custom destroy() collides with Node 24.16.0's stream
lifecycle change, causing extract-zip to silently hang at 97% during
Electron binary extraction. yauzl 3.x drops fd-slicer entirely.
extract-zip is unmaintained and pins yauzl ^2.10.0, so the fix can
only flow through a pnpm override.

Refs: thejoshwolfe/yauzl#170, nodejs/node#63487

Co-authored-by: jeremeioss <jeremeibg@gmail.com>