[fabracht]

Bumps lint-staged 16.4.0 → 17.6.0, the last remaining update from the Dependabot npm-major group (#56/#61) after vitest 5 (#60) and TypeScript 7 + oxlint (#62) landed.

Changes

• lint-staged ^16.4.0 → ^17.6.0
• engines.node >=22.12 → >=22.22.1 — lint-staged 17's floor is >=22.22.1, the binding constraint over vitest 5's ^22.12.0 || ^24 || >=26
• lockfile synced (−371 net lines; lint-staged 16's transitive deps trimmed)
• CHANGELOG Unreleased Node-floor bullet updated to >=22.22.1 with lint-staged 17 as co-driver

Verification

• npm run check green: type-check, oxlint, format, 40/40 tests
• lint-staged 17 pre-commit pipeline (prettier --write then oxlint --fix) exercised and passing; engines is a warn-only npm check, no runtime hard-fail
• esbuild's 26 cross-platform lockfile entries intact
• 0 vulnerabilities

The pre-commit hook pipeline is unchanged; no @laboverwire/stitch runtime or type surface changes.