build: update dependency @conventional-changelog/git-client to v2

[angular-robot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@conventional-changelog/git-client (source)	1.0.1 → 2.6.0

---

Release Notes

conventional-changelog/conventional-changelog (@​conventional-changelog/git-client)

v2.6.0

Features

• use utils from simple-libs (#​1432) (7d27d06)

v2.5.1

Bug Fixes

• checkout methods format fix (993c1fd)

v2.5.0

Features

• new git methods and migration to @​simple-libs/child-process-utils (#​1378) (abad2f2)

v2.4.0

Features

• git tags params were added (f7e4f68)

v2.3.0

Features

• init method was added, allowEmpty param was added to commit method (5724d53)

v2.2.0

Features

• tags and followTags params are added to push method (61a1e34)

v2.1.0

Features

• getDefaultBranch was added (1518d81)
• safe parameter for verify method (2f07b29)
• verify and getConfig methods are added to GitClient (#​1348) (3ba2198)

Bug Fixes

• cleanup branch name in getDefaultBranch (7c80d81)
• throw error only when spawned child exits with non-zero result (0253545)

v2.0.0

⚠ BREAKING CHANGES

• git-client: ability to pass additional git params is removed

Bug Fixes

• conventional-changelog-writer,git-client: move @types/semver to dev dependencies (#​1268) (4ca2b86)
• git-client: ability to pass additional git params is removed by security reasons (#​1325) (d95c9ff)
• git-client: close the generator used by getLastSemverTag (#​1281) (a1764d6)
• git-client: match semver better in unstable tag regex (#​1277) (9f0895b)

---

• If you want to rebase/retry this PR, check this box

[gemini-code-assist]

Code Review

This pull request updates the @conventional-changelog/git-client dependency to v2. This is a major update which includes a significant breaking change: the ability to pass additional git parameters has been removed for security reasons. While reviewing the related files, I discovered a potential bug in ng-dev/utils/version-check.ts concerning the parsing of pnpm-lock.yaml. The logic for extracting the @angular/ng-dev version appears to be incorrect and may not function as intended. I'm noting this here as the file is not part of the diff and cannot be commented on directly.

_{Note: Security Review did not run due to the size of the PR.}

[josephperrott]

LGTM

[josephperrott]

This PR was merged into the repository. The changes were merged into the following branches:

• main: 6659b1f