chore(deps): bump ky from 1.14.3 to 2.0.2

[dependabot]

Bumps ky from 1.14.3 to 2.0.2.

Release notes

Sourced from ky's releases.

v2.0.2

• Fix init hook URLSearchParams deletions add0703
• Fix tuple searchParams mutations leaking across init-hook requests (#861) 346f898

---

sindresorhus/ky@v2.0.1...v2.0.2

v2.0.1

• Improve compatibility with custom fetch implementations (#858) 2971991
• Fix fetch option forwarding 2df9b7e

---

sindresorhus/ky@v2.0.0...v2.0.1

v2.0.0

Breaking

• Require Node.js 22 f1da0fc
• Unify hook signatures around a single state object (#827) ecdd45e
  • All hooks now receive a single {request, options, retryCount, ...} state object instead of separate arguments.
• Rename prefixUrl to prefix, and allow leading slashes in input (#606) 1f2ad7f
• Make beforeError hook receive all errors, not just HTTPError (#829) 101c74b
• Make .json() throw on empty bodies and 204 responses instead of returning an empty string (#854) 1b8e1ff
• Merge searchParams with input URL instead of replacing (#840) 29e78fe
• Strip Ky-specific properties from normalized options passed to hooks (#826) 433febd
• Treat hook errors as fatal outside retry handling (#834) 90c6d00

New

• Add totalTimeout option for an overall timeout across all retries (#848) c20d7c7
• Add baseUrl option for standard URL resolution (#606) 1f2ad7f
  • baseUrl uses standard URL resolution: /users means origin-root, users means relative to the base path.
  • prefix does simple string joining first, so /users and users both append to the prefix the same way. Use it only when you want that behavior.
• Add data property to HTTPError with pre-parsed response body (#823) 1341f5c
  • The response body is automatically consumed and parsed, fixing resource leaks and making error details immediately available without awaiting (#642).
• Add init hook (#841) 87c6740
• Add NetworkError class and tighten retry logic (#842) eaf0b80
• Add Standard Schema validation for .json() (#830) 94741a9
• Add replaceOption helper for .extend() (#846) bb8412e
• Add request and options to beforeError hook state (#835) 01e0b85
• Add request/response context to parseJson option (#849) 3713ce8
• Don't throw HTTPError for opaque responses from no-cors requests (#847) 1d15eb6
• Gracefully ignore onUploadProgress when request streams are unsupported (#845) 1e38ff4

Fixes

• Fix beforeRequest hooks being skipped when a Request is returned (#832) aec65db
• Ignore non-Errors returned by beforeError hooks (#833) a541fc0

... (truncated)

Commits

• 0a24c44 2.0.2
• add0703 Fix init hook URLSearchParams deletions
• 8f28eac Tweaks
• 346f898 Fix tuple searchParams mutations leaking across init-hook requests (#861)
• e9eeb35 2.0.1
• 2971991 Improve compatibility with custom fetch implementations (#858)
• 4ba8c15 Fix flaky test
• 2df9b7e Fix hook state leaks and fetch option forwarding
• 7f2eade Readme tweaks
• 7d23d68 2.0.0
• Additional commits viewable in compare view

---

Note

Medium Risk
Major-version bump of the shared HTTP client used by ServiceClient and RPC code; v2 breaking API/behavior changes can affect request URL building and response parsing even though no source files changed in this PR.

Overview
Bumps the ky HTTP client in @polymarket/client from 1.14.3 to 2.0.2 and refreshes pnpm-lock.yaml to resolve ky@2.0.2 (Node ≥22 for that package; the client already targets Node ≥24).

This is a major ky release with breaking behavior (hook signatures, prefixUrl → prefix, stricter .json() on empty/204 bodies, searchParams merging, etc.). The PR does not change application code—only the declared dependency—so reviewers should confirm builds/tests pass and that existing ky.create({ prefixUrl: ... }) usage in ServiceClient remains valid under v2 or needs a follow-up migration.

^{Reviewed by Cursor Bugbot for commit 82a9eeb. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 7017d32. Configure here.}

[cursor]

Ky v2 breaks ServiceClient

High Severity

Bumping ky to v2 without updating ServiceClient leaves ky.create using the removed prefixUrl option (renamed to prefix in v2). The service root is likely ignored, so relative API paths may resolve incorrectly and Polymarket HTTP calls can fail or hit the wrong host.

 

^{Reviewed by Cursor Bugbot for commit 7017d32. Configure here.}