chore: deps bump 2026 07

[nikitachapovskii-dev]

Applies the pending Renovate updates as one tested batch, plus the fixes needed to keep CI green.

Dependency bumps

• TypeScript 6 (chore(deps): update dependency typescript to v6 #267)
• @apify/tsconfig 0.2.0 — moves the base to nodenext / module: node20 (chore(deps): update dependency @apify/tsconfig to ^0.2.0 #303)
• patch/minor deps (chore(deps): update patch/minor dependencies #262)
• CI runners → ubuntu-24.04 (chore(deps): update dependency ubuntu to v24 #258)

Fixes to build under TS6 + nodenext

• rootDir added to every build tsconfig (TS6 now requires it explicitly)
• actor tsconfigs use moduleResolution: bundler (matches the existing sitemap setup).
• types condition added to @apify/scraper-tools exports so its named types resolve (it ships both ESM and CJS)
• sitemap: lib: ["ESNext"] the 0.2.0 base dropped lib to ES2023, but the actor uses Array.fromAsync (ES2024)

puppeteer / Renovate config

• root puppeteer kept at 25.2.0: it's version-locked to the Docker base image's bundled Chrome, and chore(deps): update patch/minor dependencies #262 bumped only the root devDep, splitting puppeteer-core and breaking types
• renovate.json: root package.json added to the puppeteer and playwright browser-stack groups, so its pin now moves atomically with the base image

CI

• ubuntu-24.04 restricts unprivileged user namespaces, which breaks Chrome's sandbox in the browser-launch tests. Re-enabled it on the runner, a runner-only setting, production runs in the apify docker are unaffected.

Supersedes #258, #262, #267, #303.

follow up: reconfigure renovate