chore(deps-dev): bump @commitlint/cli from 21.0.1 to 21.0.2

[dependabot]

Bumps @commitlint/cli from 21.0.1 to 21.0.2.

Release notes

Sourced from @​commitlint/cli's releases.

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

• fix: emit actionable error when --edit cannot find COMMIT_EDITMSG (#589) by @​escapedcat in conventional-changelog/commitlint#4755
• fix: apply oxfmt formatting to get-edit-commit.ts by @​escapedcat in conventional-changelog/commitlint#4768
• fix(read): fail when --from and --to share no merge-base #4555 by @​CervEdin in conventional-changelog/commitlint#4754
• fix: disallow same commit hash for --from and --to by @​knocte in conventional-changelog/commitlint#4773

Chore/CI

• ci: have renovate rebase stale PRs before merging by @​escapedcat in conventional-changelog/commitlint#4782
• chore: have renovate hold PRs for 3 days after release by @​escapedcat in conventional-changelog/commitlint#4788
• chore: anchor vite 8 by @​escapedcat in conventional-changelog/commitlint#4790
• ci: run commitlint once per same-repo PR by @​escapedcat in conventional-changelog/commitlint#4795

New Contributors

• @​CervEdin made their first contribution in conventional-changelog/commitlint#4754

Full Changelog: conventional-changelog/commitlint@v21.0.1...v21.0.2

Changelog

Sourced from @​commitlint/cli's changelog.

21.0.2 (2026-05-29)

Bug Fixes

• disallow same commit hash for --from and --to (#4773) (121005e)

Commits

• 8069048 v21.0.2
• 121005e fix: disallow same commit hash for --from and --to (#4773)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[carlos-alm]

@greptileai

[greptile-apps]

Greptile Summary

Routine dev-dependency patch update generated by Dependabot. Only package-lock.json is modified — no source code changes.

• Bumps @commitlint/cli and its sibling packages (@commitlint/lint, @commitlint/load, @commitlint/read, @commitlint/is-ignored, @commitlint/parse, @commitlint/rules, @commitlint/message, @commitlint/top-level) from 21.0.1 to 21.0.2; the patch fixes edge-case CLI errors (missing COMMIT_EDITMSG, identical --from/--to hashes).
• Also bumps the transitive dev dependency es-toolkit from 1.46.1 to 1.47.0 (minor version, no breaking changes expected).

Confidence Score: 5/5

Safe to merge — only lockfile entries for dev-only tooling are updated.

All changes are confined to package-lock.json and affect only dev dependencies (@commitlint/* and es-toolkit). These packages are used exclusively at commit-time for linting commit messages and have no runtime presence. The upstream patch release contains bug fixes with no breaking changes.

No files require special attention.

Important Files Changed

Filename	Overview
package-lock.json	Bumps @commitlint/cli and related sub-packages from 21.0.1 to 21.0.2, plus a transitive bump of es-toolkit from 1.46.1 to 1.47.0 — all dev dependencies, no runtime impact.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[package-lock.json] --> B[commitlint/cli v21.0.2]
    B --> C[commitlint/lint v21.0.2]
    B --> D[commitlint/load v21.0.2]
    B --> E[commitlint/read v21.0.2]
    C --> F[commitlint/is-ignored v21.0.2]
    C --> G[commitlint/parse v21.0.2]
    C --> H[commitlint/rules v21.0.2]
    H --> I[commitlint/message v21.0.2]
    E --> J[commitlint/top-level v21.0.2]
    A --> K[es-toolkit v1.47.0]

Loading

_{Reviews (1): Last reviewed commit: "Merge branch 'main' into dependabot/npm_..." | Re-trigger Greptile}

[carlos-alm]

Routine Dependabot patch update. Only package-lock.json is modified — no source code changes. All CI checks pass. Greptile review scores 5/5 (safe to merge). The @commitlint/cli bump from 21.0.1 to 21.0.2 is a patch release fixing edge-case CLI errors; es-toolkit minor bump has no breaking changes.