chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@commitlint/cli (source)	20.4.1 → 20.4.3
@commitlint/config-conventional (source)	20.4.1 → 20.4.3
@pnpm/workspace.find-packages (source)	1000.0.59 → 1000.0.62
es-toolkit (source)	1.44.0 → 1.45.1
eslint (source)	9.39.2 → 9.39.3
knip (source)	5.83.1 → 5.85.0
lefthook	2.1.1 → 2.1.2

---

Release Notes

conventional-changelog/commitlint (@​commitlint/cli)

v20.4.3

Compare Source

Bug Fixes

• footer parser does not escape special chars for regex #​4560 (#​4634) (8ff7c7f)

v20.4.2

Compare Source

Note: Version bump only for package @​commitlint/cli

conventional-changelog/commitlint (@​commitlint/config-conventional)

v20.4.3

Compare Source

Bug Fixes

• footer parser does not escape special chars for regex #​4560 (#​4634) (8ff7c7f)

v20.4.2

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

toss/es-toolkit (es-toolkit)

v1.45.1

Compare Source

Released on March 4th, 2026.

• Reverted the return type of sample to not include undefined.
• Fixed Deno install command to include jsr: prefix. ([#​1627])

We sincerely thank @​mwln for their contributions. We appreciate your great efforts!

v1.45.0

Compare Source

Released on March 2nd, 2026.

• Fixed findIndex to add missing default parameter for doesMatch. ([#​1373])
• Fixed sample to include undefined in return union type. ([#​1302])
• Fixed cloneDeep to support cloning Error objects.
• Fixed retry to correctly match retry count with the retries option.
• Fixed missing Map and Set in check-dist entrypoints.
• Fixed missing packages in publishConfig. ([#​1597])
• Reverted the overload for runtime-determined key arrays in omit. ([#​1595])
• Added AI Integration page with llms.txt documentation to docs.

We sincerely thank @​D-Sketon, @​dayongkr, @​matthiasfeist, @​raon0211, and @​screendriver for their contributions. We appreciate your great efforts!

eslint/eslint (eslint)

v9.39.3

Compare Source

Bug Fixes

• 791bf8d fix: restore TypeScript 4.0 compatibility in types (#​20504) (sethamus)

Chores

• 8594a43 chore: upgrade @​eslint/js@​9.39.3 (#​20529) (Milos Djermanovic)
• 9ceef92 chore: package.json update for @​eslint/js release (Jenkins)
• af498c6 chore: ignore /docs/v9.x in link checker (#​20453) (Milos Djermanovic)

webpro-nl/knip (knip)

v5.85.0: Release 5.85.0

Compare Source

• Fix require.context regex matching for path-aware patterns (#​1547) (c33d93a) - thanks @​jstaab!
• Make knip compatible with erasableSyntaxOnly (#​1541) (f63089b) - thanks @​wojtekmaj!
• feat: add Payload CMS plugin (#​1546) (58d99de) - thanks @​Robot-Inventor!
• Look everywhere for manifest/robots file in next plugin (9da6205)
• Merge some next glob patterns (8c5f35f)
• Add SAP & Google Gemini to projects using Knip (c8ab895)
• Bump remark-preset-webpro & dedupe (b9372cd)
• Document CLI usage for LS (97fe1cf)
• fix: tsdown entry compatibility issues #​1550 (#​1554) (95051eb) - thanks @​huijiewei!
• Fix incorrect coverage provider being reported (#​1552) (2d0b5cd) - thanks @​rexxars!
• Temp disable npmx in ecosystem run (a5cd986)
• Fix OOM in gitignore walk for large monorepos (f192a6b)
• Release knip@​5.85.0 (e28a3e7)

v5.84.1: Release 5.84.1

Compare Source

• Fix false positives for arrow-wrapped dynamic imports assigned to variables (#​1544) (75a42c3) - thanks @​jantimon!
• Improve pnpm arg handling (df8c353)
• Ignore module.register if 2nd arg is not import.meta.url (#​1535) (970fdb1)

v5.84.0: Release 5.84.0

Compare Source

• Post-release shenanigans (e7965cb)
• Move most compilers to plugins & register from there (61beafe)
• Minor refactor (e20a682)
• Fix lint issues (d2bbc13)
• Add missing catalog property to rules in JSON schema (#​1518) (5d49dea) - thanks @​Mohmdev!
• feat(plugins): add @​typescript/native-preview (tsgo) support (#​1513) (babfb10) - thanks @​jgoux!
• Fix up quoting for spaced args (resolve #​1515) (2b735cb)
• Switch to tsconfig-aware module resolver in input handler (634d0f6)
• Use bun test positionals as entry points (resolve #​1521) (da94725)
• Edit docs (327726f)
• Minor refactor while at it (dc87e8e)
• Add config hints for unused ignore and ignoreFiles items (a4989ee)
• Accept known bins only behind double-dash (resolve #​1524) (b9214e3)
• feat(plugins): add support for bun test preloaded files (#​1525) (14ee32a) - thanks @​jgoux!
• Add date to IGNORED_GLOBAL_BINARIES (#​1476) (f08f92b) - thanks @​duci9y!
• Fix edge case for binaries in scripts (82331ee)
• Report ignore/files config hints only if sure & relevant (4c3bd08)
• Add consistent repository fields (781a0fd)
• Add language-server bin (13d7845)
• Use --stdio if no transport provided (bedb21a)
• Refactor from "enabled" to "deferSession" (resolve #​1499) (15e3360)
• Use initializationOptions.config or default fallback config obj (resolve #​1503) (0abe568)
• Also publish ls + mcp with pkg-pr-new (7806526)
• Auto-format (51b7dc1)
• Remove chdir shenanigans (close #​1516) (0cbee8f)
• Bind console.* to distinguish internal↔ external logs (3eac278)
• Add early bail-outs for changed files we can ignore (36c2dd5)
• Avoid unnecessary module graph updates for unmodified files (f94c41f)
• Fix typo in pkg-pr-new-pkg-dir (7e7a8b0)
• Add .DS_Store to .gitignore (#​1530) (40fe5cc) - thanks @​wojtekmaj!
• Ignore RNC CLI and metro internals in react-native projects (#​1528) (0f892ae) - thanks @​wojtekmaj!
• Support nested _generated dirs in Convex plugin (#​1531) (bd75e9f) - thanks @​kvnwolf!
• Housekeep cli help output (c24e746)
• Fix up gitignore test (6bc640c)
• Introduce isFilterTransitiveDependencies flag (close #​1507, close #​1101) (8678df2)
• Housekeep webpack plugin (2cc1306)
• Move up plugin.setup & tear down plugin.teardown (4dbf23d)
• Skip config file loading if only external re-exports (ab775b1)
• Improve & optimize ignore pattern handling (c3d3912)
• Housekeep compiler registration (2aaf9fc)
• Edit docs re. config file location (79bfb35)
• Register visitors from plugins (9b059f8)
• importMetaGlobCall visitor for Vite plugin (1874b19)
• Extend registerVisitors with script visitor support (728c814)
• Move execa script visitor to execa plugin (71c739a)
• Move zx script visitor to zx plugin (5ac24c7)
• Add require.context visitor to webpack plugin (100f174)
• Add module.register() visitor for Node.js loader API (resolve #​1535) (742407c)
• Add .DS_Store in fixtures to .gitignore (#​1534) (90fa677) - thanks @​wojtekmaj!
• Mention that depcheck recommends knip (#​1536) (75d00ff) - thanks @​ArtskydJ!
• Remove @source matcher from tailwind plugin (resolve #​1537) (b7149b6)
• Fix -w → -W flag for Yarn (f305250)
• Update AGENTS.md (ec83887)
• Extract and extend react-native plugin (#​1538) (9fd04a8)
• Add pm2 plugin (#​1540) (3bb4203) - thanks @​wojtekmaj!
• Fix Yarn (Berry) plugins and binaries reported as unused (#​1523) (4f0a307) - thanks @​wojtekmaj!
• Update docs (ed23dd2)
• Minor refactor while at it (4115b97)
• Add @​knip/create-config to release script (1135b82)

evilmartians/lefthook (lefthook)

v2.1.2

Compare Source

• feat: introduce setup hook option (#​1326) by @​mrexox
• refactor: recovering logic for changesets (#​1324) by @​mrexox
• fix: rollback auto-staged changes if unwanted changes detected (#​1251) by @​tuchfarber
• docs: improve docs ui (#​1323) by @​mrexox
• docs: additional skip example and note about reinstallation (#​1319) by @​iloveitaly
• docs: fix incorrect --verbose usage (#​1318) by @​iloveitaly
• pkg: fix python packages publishing by @​mrexox

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Progress: resolved 1, reused 0, downloaded 0, added 0
 WARN  deprecated syncpack@14.0.0: pnpm users: upgrade to 14.0.2 or newer
Progress: resolved 26, reused 0, downloaded 0, added 0
Progress: resolved 69, reused 0, downloaded 0, added 0
Progress: resolved 161, reused 0, downloaded 0, added 0
Progress: resolved 270, reused 0, downloaded 0, added 0
 ERR_PNPM_TRUST_DOWNGRADE  High-risk trust downgrade for "@pnpm/config@1004.10.2" (possible package takeover)

This error happened while installing the dependencies of @pnpm/workspace.find-packages@1000.0.62
 at @pnpm/cli-utils@1001.3.7

Trust checks are based solely on publish date, not semver. A package cannot be installed if any earlier-published version had stronger trust evidence. Earlier versions had trusted publisher, but this version has no trust evidence. A trust downgrade may indicate a supply chain incident.