chore(deps-dev): bump lint-staged 16.2.7 → 16.4.0

[h0lybyte]

Summary

• Bumps lint-staged from 16.2.7 to 16.4.0
• Supersedes Dependabot PR chore(deps-dev): bump lint-staged from 16.2.7 to 16.3.2 #7818 (can be closed after this merges)
• Minor version bump with bug fixes and improvements
• Verified lint-staged runs correctly with existing config

Test plan

• pnpm install succeeds with clean lockfile
• npx lint-staged --version returns 16.4.0
• Lint-staged runs successfully on commit
• CI lint + test pass

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/commander	14.0.3	🟢 7	Details Check Score Reason Maintained 🟢 10 7 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 8 Found 8/9 approved changesets -- score normalized to 8 Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions 🟢 9 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 1 dependency not pinned by hash detected -- score normalized to 1 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Signed-Releases ⚠️ -1 no releases found SAST 🟢 10 SAST tool is run on all commits
npm/lint-staged	16.4.0	Unknown	Unknown
npm/tinyexec	1.0.4	Unknown	Unknown

Scanned Files

• pnpm-lock.yaml