feat(dependencies): add conventional-commits-parser and update verification script

- Added `conventional-commits-parser` version 6.4.0 to `package.json` and `pnpm-lock.yaml` for improved commit message parsing.
- Updated the commit verification script to utilize the new parser, enhancing error handling for unparseable commit messages.
- Adjusted CI workflow to run the verification script using `pnpm exec` for consistency in package execution.

scripts/commit/verify-release-commits.mjs

@@ -4,7 +4,9 @@
  * Exit 0 always — semantic-release still decides release/no-op.
  */
 import { execSync } from 'node:child_process';
-import parser from 'conventional-commits-parser';
+import { CommitParser } from 'conventional-commits-parser';
+
+const parser = new CommitParser();
 
 const RELEASABLE = new Set(['feat', 'fix', 'perf', 'ci', 'refactor']);
 
@@ -32,8 +34,14 @@ const unparseable = [];
 const releasable = [];
 
 for (const { hash, subject } of commits) {
-	const parsed = parser.sync(subject);
-	if (!parsed.type) {
+	let parsed;
+	try {
+		parsed = parser.parse(subject);
+	} catch {
+		unparseable.push({ hash: hash.slice(0, 7), subject });
+		continue;
+	}
+	if (!parsed?.type) {
 		unparseable.push({ hash: hash.slice(0, 7), subject });
 		continue;
 	}