chore(deps-dev): bump the release-tools group with 2 updates - #269
Conversation
Bumps the release-tools group with 2 updates: [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) and [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional). Updates `@commitlint/cli` from 21.2.1 to 21.2.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.2/@commitlint/cli) Updates `@commitlint/config-conventional` from 21.2.0 to 21.2.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.2/@commitlint/config-conventional) --- updated-dependencies: - dependency-name: "@commitlint/cli" dependency-version: 21.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: release-tools - dependency-name: "@commitlint/config-conventional" dependency-version: 21.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: release-tools ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dhensby
left a comment
dhensby
left a comment
There was a problem hiding this comment.
Approving — dev-only patch bump, verified.
Scope: package-lock.json only.
Version sanity check: @commitlint/cli 21.2.1→21.2.2 and @commitlint/config-conventional 21.2.0→21.2.2. The asymmetry is genuine — commitlint versions its packages independently and config-conventional has no 21.2.1 on npm.
Supply chain: both published 2026-08-13 by escapedcat, a long-standing commitlint maintainer, unchanged from the previous release. No npm provenance, but 21.2.0/21.2.1 had none either — the project's steady state, not a regression.
On the diff shape: nested meow trees are dropped because commitlint swapped its arg parser to argue-cli (MIT, TrigenSoftware/Argue, maintainer dangreen, npm record since 2014). I have seen this identical change land independently in several repos on the same bump, which corroborates it as a genuine upstream refactor.
CI: all checks green.
1 participant
Bumps the release-tools group with 2 updates: @commitlint/cli and @commitlint/config-conventional.
Updates
@commitlint/clifrom 21.2.1 to 21.2.2Release notes
Sourced from @commitlint/cli's releases.
Changelog
Sourced from @commitlint/cli's changelog.
Commits
d00d190v21.2.2f2e8daechore: update dependency typescript to v7 (#4886)5769d9fdocs: fix typos in comments and JSDoc (#4880)Updates
@commitlint/config-conventionalfrom 21.2.0 to 21.2.2Release notes
Sourced from @commitlint/config-conventional's releases.
Changelog
Sourced from @commitlint/config-conventional's changelog.
Commits
d00d190v21.2.23146d04docs(config-conventional): document rules that go beyond the spec (#4910)f2e8daechore: update dependency typescript to v7 (#4886)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions