Update dependencies to latest and drop Node 20 (5.2.0)

[terehov]

Brings development's dependency work into master ahead of the 5.2.0 release.

Security

• picomatch 2.3.2 / 4.0.7 and minimatch 10.2.6 (supersedes Bump minimatch from 10.1.2 to 10.2.6 #371 and Bump picomatch from 2.3.1 to 2.3.2 #372, whose npm 11 lockfiles broke npm ci on Node 20/22).
• tmp override raised to ^0.2.7 and js-yaml 4.3.2; npm audit reports 0 vulnerabilities for the root and docs/.

Node 20 dropped

• engines.node is >=22; the CI matrix is 22/24/26/latest with coverage on 22. .nvmrc is 22 (was 16).
• README, migration guide, AGENTS.md and the 5.2.0 changelog say 22+ and point Node 20 users to 5.1.0.

Dependencies to latest

• Vitest 5, esbuild 0.28, graphql 17, bson 7, np 12, Biome 2.5, Playwright 1.63, @types/node 26, Starlight 0.42, plus minor bumps.
• The build uses tsc from stable typescript@7.0.2 instead of the discontinued @typescript/native-preview dev builds. TS 7 has no JS compiler API, so the bundler tests run ts-loader and @rollup/plugin-typescript against a typescript-6 install.
• Biome 2.5 config migration and export ordering; TS 6 fixture tsconfigs (moduleResolution: "bundler").
• Full browser bundle budget 22,200 -> 22,400 B gzip: esbuild 0.28 emits TS parameter properties as class fields (~40 B, no source change), and CI already measured exactly 22,200 before.

Verified locally: Node 24/22 and Bun (1675 tests, 100% coverage under Vitest 5), Deno adapter, Playwright on Chromium/Firefox/WebKit, Next.js and TanStack Start E2E, build, bundle size, side-effects audit, doc-sync, docs build, npm ci with npm 10 and 11.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (4cc8dd2) to head (eb183f6).

Additional details and impacted files

@@            Coverage Diff            @@
##            master      #374   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           53        53           
  Lines         4628      4628           
  Branches      1361      1416   +55     
=========================================
  Hits          4628      4628           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.