chore: update workspace dependencies

[sonofmagic]

Summary

• Upgrade the workspace's patch/minor dependencies to current releases.
• Keep repoctl 5.4.4 and TypeScript 6 unchanged.
• Regenerate pnpm-lock.yaml and pin project-controlled vulnerable transitive packages to patched versions.

Direct dependency updates

• @commitlint/config-conventional 21.2.2
• @commitlint/prompt-cli 21.2.2
• @icebreakers/commitlint-config 4.0.5
• @icebreakers/eslint-config 7.1.0
• @icebreakers/stylelint-config 5.0.6
• @types/lodash 4.17.25
• conventional-changelog-conventionalcommits 10.4.0
• execa 10.0.1
• postcss 8.5.26
• type-fest 5.9.0

The pnpm overrides cover project-controlled PostCSS/build-chain packages (nanoid, rollup, svgo, vite, picomatch, fast-uri, and js-yaml) at patched versions. repoctl's bundled pnpm dependencies (cross-spawn, uuid, adm-zip, js-yaml 3, and related brace-expansion paths) remain upstream risks and were not force-overridden.

Validation

• pnpm install --frozen-lockfile passed
• pnpm exec repo doctor passed
• pnpm exec repo check passed
• pnpm typecheck passed
• pnpm build passed
• pnpm lint passed with the existing ts/no-use-before-define warning
• pnpm test passed: 252 tests
• pnpm check:cjs passed
• pnpm tsd completed with no configured tasks
• pnpm outdated reports only TypeScript 7.0.2, intentionally deferred
• Audit residuals are limited to repoctl/upstream configuration paths and eslint-config brace-expansion paths

TypeScript 7 evaluation

In an isolated worktree, TypeScript 7.0.2 passed doctor, typecheck, build, tests, and CJS checks. Lint fails because typescript-eslint 8.68.0 does not support TypeScript 7.0, and repoctl/unbuild/tsconfck peer ranges do not include it. TypeScript 7 is therefore deferred to a separate upgrade.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 9e419bb

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR