build(deps-dev): bump lint-staged from 16.4.0 to 17.4.1

[claude]

Before: lint-staged is pinned at ^16.4.0, which pulls in a large transitive tree into yarn.lock.

After: lint-staged is ^17.4.1, which drops most of that tree, thinning yarn.lock by 146 lines.

Part of an ecosystem-wide bump requested by @dsanders11 (see the earlier batch in the other electron repos).

How: bumped the devDependency and regenerated yarn.lock with the repo's pinned Yarn; no other dependencies changed.

🤖 Generated with Claude Code

https://claude.ai/code/session_01FYHE9pAHKgNagai4AYyBbH

---

Generated by Claude Code

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	lint-staged@​16.4.0 ⏵ 17.4.1	+1			+1

View full report

[coveralls]

coverage: 87.336%. remained the same — lint-staged-17.4.1 into main

[claude]

Looks good, straightforward dependency bump. Checked that package.json and yarn.lock changes match the stated version bump (lint-staged ^16.4.0 to ^17.4.1) with no other dependency or source code changes, and no bugs were reported by the hunt.

Extended reasoning...

Overview

This PR bumps the lint-staged devDependency from ^16.4.0 to ^17.4.1 in package.json, with a corresponding regeneration of yarn.lock. I confirmed via git diff that package.json only changes this single line, and no other dependencies or source files are touched.

Security risks

None identified. This is a devDependency (lint-staged, used for git pre-commit linting) that does not ship in production builds or runtime code paths. No auth, crypto, or data-handling code is affected.

Level of scrutiny

Low. Version bumps of devDependencies with mechanical lockfile regeneration are inherently low-risk and don't require deep review of transitive dependency internals, especially since lint-staged only runs in local dev/CI tooling, not in the shipped product.

Other factors

No bug hunter findings were reported. The change is small, self-contained, and matches the PR's stated description exactly. No CODEOWNERS or CLAUDE.md conventions apply to these files.