Deps: lefthook 2.1.17 and typescript-eslint 8.71.1

[vvillait88]

Summary

Dependency sweep: takes the two dev-tool patches available, lefthook 2.1.17 and typescript-eslint 8.71.1. Nothing else in bun outdated is behind except eslint 10 and TypeScript 7, both held org-wide in the dependency holds registry; their lift conditions were re-tested today and still hold (eslint-plugin-import's eslint peer stops at ^9; typescript-eslint caps TypeScript below 6.1). The lockfile scans clean with osv-scanner. Dev dependencies only, so nothing shipped changes and no release follows.

Type of change

• Bug fix (no breaking change)
• New feature (no breaking change)
• Breaking change (existing callers must update)
• Docs, tests, or internal maintenance only

Public API

None.

Test plan

Lint, typecheck, knip, the full test suite and the build all pass locally on the bumped lock, and a second bun install is a no-op.

Worked with

Varun

Out of scope / what I did not do

• eslint 10 and TypeScript 7: held org-wide by the dependency holds registry, lift conditions re-tested today and unmet.

Checklist

• Tests cover the new behavior, and the suite passes locally
• Lint, format, and type checks pass
• Docs and README examples updated if the public surface changed
• No secrets, credentials, or personal data in the diff or the tests