chore(release): default semantic-release to v25

[taprile314]

What

Bumps the default semantic-release-version input in release.yml from 24 to 25.

Split out from the Dependabot actions bump (#25) on purpose: that PR upgrades cycjimmy/semantic-release-action to v6, but the semantic-release version itself is pinned via this input, so moving to v25 is an independent decision and is tracked here.

⚠️ Before merging — Node version

semantic-release v25 raised the Node floor:

• Minimum Node 22.14
• On the Node 24 line specifically, >= 24.10.0

This reusable workflow defaults node-version to '24', which resolves to the latest 24.x on ubuntu-latest and satisfies the floor. But any caller that overrides node-version to an older release (e.g. '20', or a 22.x below 22.14) will fail to run semantic-release.

• Audit caller repos for node-version overrides below the floor before merging
• Confirm whether callers pin this workflow at @v1 (change lands on next release) or @main (lands immediately)
• Smoke test: run a dummy release on one repo to validate tagging + publish

Other v25 breaking changes (assessed, low risk for us)

• npm plugin → npm v11 for publishing. Aligned with our setup — the OIDC Trusted Publishing path already forces npm >= 11.5.1 (npm-version default 11.6.2). GitHub Packages path publishes fine on npm 11.
• Internal dep bumps (yargs 18, hosted-git-info 9, official plugins to stable) — no config surface we use.

Extra plugins — all compatible with v25

Plugin	Version	Peer range
@semantic-release/changelog	6.0.3	>=18
@semantic-release/git	10.0.1	>=18
@semantic-release/exec	7.1.0	>=24.1

https://claude.ai/code/session_01Ee1r9bN64AbykXDUQXYiS9