🔧 chore(deps): refresh safe dependencies

[xdanger]

Summary

• refresh the lint toolchain within existing major versions
• update pnpm from 11.20.0 to 11.27.0 without adopting the breaking v12 release

Validation

• pnpm install --frozen-lockfile
• ESLint and Prettier checks pass for the changed files
• pnpm audit reports 0 vulnerabilities
• pnpm outdated reports no remaining direct updates

Existing issue

The full pnpm run lint still reports the unchanged README.md; Prettier 3.9.6 on main reports the same pre-existing formatting issue.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-19T22:06:45.673333Z	7f8340a	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[Copilot]

Copilot review overview

🟢 Approval recommended

The dependency and lockfile updates are consistent, and no blocking issues were identified.

Review effort: Lite
Findings: None

What changed in this PR

Refreshes the repository’s linting toolchain and pins pnpm to 11.27.0 while preserving existing major versions.

Changes:

• Updates ESLint, TypeScript ESLint, globals, lint-staged, and Prettier.
• Regenerates the pnpm lockfile with corresponding transitive dependency updates.
• Updates the package manager pin from pnpm 11.20.0 to 11.27.0.

File	Description
package.json	Updates package manager and lint-tool dependencies.
pnpm-lock.yaml	Records the refreshed dependency graph and integrity hashes.

Files not reviewed (1)

• pnpm-lock.yaml: Generated file

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[greptile-apps]

Confidence Score: 5/5

此 PR 看起来可以安全合并，未发现由依赖刷新引入的可执行问题。

Summary

此 PR 在现有 major version 范围内刷新本地 lint/format 工具链，并将 pnpm 从 11.20.0 更新至 11.27.0。

• package.json 中的 pnpm pin、开发依赖版本与完整性哈希已更新。
• pnpm-lock.yaml 与 manifest 保持一致，并正确记录新增及升级的传递依赖。
• 未发现由本次依赖更新引入的具体功能、安全或工作流问题。

_{Reviews (1) · Last reviewed commit: "🔧 chore(deps): refresh safe dependencie..."}

[claude]

✅ Approved

New findings: none.

Assessment

Pure dependency refresh — package.json + pnpm-lock.yaml only, no source changes.

Checks performed:

• Specifier/lock consistency: every bumped specifier matches its resolved version (eslint 10.8.0→10.11.0, globals 17.9.0→17.12.0, lint-staged 17.3.0→17.5.1, prettier 3.9.6→3.9.8, typescript-eslint 8.66.0→8.70.0).
• No stale entries: no residual references to the old versions or to dropped packages (keyv@4.5.4, flat-cache@4.0.1, file-entry-cache@8.0.0, json-buffer).
• Complete graph: the new transitives pulled in by eslint@10.11.0 (cacheable, qified, hashery, hookified, @keyv/bigmap, @keyv/serialize, @cacheable/*) are present in both packages: and snapshots:.
• Semver risk: all bumps are minor/patch within the same major. eslint.config.mjs only uses stable surface (defineConfig, globalIgnores, tseslint.configs.strict*/stylistic*/disableTypeChecked), so no config breakage expected.
• Engines/CI: no engine-range regressions relative to the previous set, and code-review.yml never runs pnpm install, so there is no Node/pnpm version conflict introduced here.

One item I could not verify in this environment (no registry access): the packageManager integrity hash for pnpm@11.27.0. Worth confirming a corepack/pnpm install succeeds on a clean checkout before merge, since a bad hash there fails every subsequent install.