chore(deps): landable major dependency bumps

[kimjh96]

What

Consolidates the Renovate major bumps that land cleanly within the current toolchain:

• globals 16→17, jsdom 25→29, size-limit + @size-limit/preset-small-lib 11→12, lint-staged 16→17, fumadocs-mdx 14→15
• pin actions/create-github-app-token to a commit SHA (remaining piece of the pin-dependencies PR)
• Node: CI workflows to 24.16.0, @types/node ^24.13.1, engines.node >=24.16.0

Why

Clear the rest of the Renovate backlog. Each bump here passes the full gate locally; the ones that don't (see below) are left open for dedicated migration PRs.

Impact

• Published @flemo/* packages: no runtime/peer/engines change (engines is root-only, libraries declare none), so consumers are unaffected.
• engines.node for the monorepo rises to >=24.16.0 — drops node 20/22 for local dev/CI. Flagging this as the one opinionated change; revert that hunk if you want to keep node 20+ dev support.
• @flemo/web: fumadocs-mdx 15 (docs build toolchain), patch changeset included.

Deferred (left open — real blockers, each needs its own PR)

• fix(deps): update eslint (major) #86 eslint 10 — eslint-plugin-react/import/jsx-a11y still call context.getFilename() (removed in eslint 10); plugins not yet compatible.
• chore(deps): update dependency typescript to v6 #79 typescript 6 — baseUrl is now a hard error (deprecated, removed in TS 7); needs a tsconfig/path-alias migration in @flemo/tsconfig.
• chore(deps): update vite (major) #84 vite 8 + vitest 4 — vitest 4 fails useNavigate "plain pop never relabels" (spy called 2x); two-major test-runner jump needs investigation.
• chore(deps): update pnpm to v11 #82 pnpm 11 — pnpm.onlyBuiltDependencies must move to pnpm-workspace.yaml, and build-script approval / deps-status flow changes; non-trivial.

Test plan

• CI=true pnpm turbo run typecheck lint test build — all 14 tasks pass (on node 24 locally). pnpm size passes with size-limit 12.

Rollback

• Revert the squash commit; Renovate reopens the individual PRs.

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
flemo-web	Ready	Preview, Comment	Jun 8, 2026 7:52am

[changeset-bot]

🦋 Changeset detected

Latest commit: 05c798f

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@flemo/web	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/@flemo/core@91

npm i https://pkg.pr.new/@flemo/react@91

npm i https://pkg.pr.new/@flemo/react-layout@91

commit: 05c798f

[github-actions]

size-limit report 📦

Path	Size
@flemo/core	10.33 KB (0%)
@flemo/react	8.95 KB (0%)
@flemo/react-layout	562 B (0%)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 84.23%. Comparing base (cf01904) to head (05c798f).

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #91   +/-   ##
=======================================
  Coverage   84.23%   84.23%           
=======================================
  Files          41       41           
  Lines        2227     2227           
  Branches      326      326           
=======================================
  Hits         1876     1876           
  Misses        344      344           
  Partials        7        7           

Flag	Coverage Δ
unittests	84.23% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.