build(deps-dev): bump @commitlint/config-conventional from 20.5.3 to 21.0.2

[dependabot]

Bumps @commitlint/config-conventional from 20.5.3 to 21.0.2.

Release notes

Sourced from @​commitlint/config-conventional's releases.

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

• fix: emit actionable error when --edit cannot find COMMIT_EDITMSG (#589) by @​escapedcat in conventional-changelog/commitlint#4755
• fix: apply oxfmt formatting to get-edit-commit.ts by @​escapedcat in conventional-changelog/commitlint#4768
• fix(read): fail when --from and --to share no merge-base #4555 by @​CervEdin in conventional-changelog/commitlint#4754
• fix: disallow same commit hash for --from and --to by @​knocte in conventional-changelog/commitlint#4773

Chore/CI

• ci: have renovate rebase stale PRs before merging by @​escapedcat in conventional-changelog/commitlint#4782
• chore: have renovate hold PRs for 3 days after release by @​escapedcat in conventional-changelog/commitlint#4788
• chore: anchor vite 8 by @​escapedcat in conventional-changelog/commitlint#4790
• ci: run commitlint once per same-repo PR by @​escapedcat in conventional-changelog/commitlint#4795

New Contributors

• @​CervEdin made their first contribution in conventional-changelog/commitlint#4754

Full Changelog: conventional-changelog/commitlint@v21.0.1...v21.0.2

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

• fix(load): only resolve relative formatter paths by @​escapedcat in conventional-changelog/commitlint#4761
• fix(types): add presetConfig to ParserPreset interface by @​SAY-5 in conventional-changelog/commitlint#4749

CI

• ci: stop spawning schedule jobs on contributors' forks by @​knocte in conventional-changelog/commitlint#4753
• ci: add weekly non-blocking pnpm audit by @​escapedcat in conventional-changelog/commitlint#4766

New Contributors

• @​SAY-5 made their first contribution in conventional-changelog/commitlint#4749

Full Changelog: conventional-changelog/commitlint@v21.0.0...v21.0.1

v21.0.0

Heads-up: --legacy-output is a transitional escape hatch. It will be removed in a future major release. Plan to migrate your parsers / snapshots to the new format during the v21 lifecycle.

... (truncated)

Changelog

Sourced from @​commitlint/config-conventional's changelog.

21.0.2 (2026-05-29)

Note: Version bump only for package @​commitlint/config-conventional

21.0.1 (2026-05-12)

Note: Version bump only for package @​commitlint/config-conventional

21.0.0 (2026-05-08)

• chore!: minimum node version v22 (#4679) (ac2b3f4), closes #4679

BREAKING CHANGES

• drop node v18 and v20 support

• Bump engines to >=v22 in all 39 package.json files
• Update @​types/node to ^22.0.0
• Update CI matrix to [22, 24]
• Update Ubuntu baseline job to ubuntu:26.04
• Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json
• Update pre-commit hook to use --ignore-engines
• Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) [email protected]

Commits

• 8069048 v21.0.2
• db8d7d6 v21.0.1
• 1329a25 chore: migrate to pnpm (#4762)
• 6099ae5 chore: replace eslint with oxlint (#4756)
• f081a8e v21.0.0
• 44c3174 chore: update dependency yargs to v18 #4432 (#4686)
• ac2b3f4 chore!: minimum node version v22 (#4679)
• See full diff in compare view

[greptile-apps]

Greptile Summary

This is a dependabot-generated bump of @commitlint/config-conventional from 20.5.3 to 21.0.2, a major version jump that drops Node v18/v20 support and requires Node >=22.12.0 — safely satisfied by the project's existing >=24.0.0 engine constraint.

• The new engine floor (>=22.12.0) is fully compatible with the project's declared and CI-enforced Node 24 environment.
• The lock file now carries a nested @commitlint/[email protected] under config-conventional while @commitlint/cli still resolves the top-level @commitlint/[email protected], reflecting the split introduced by keeping the two commitlint packages on different major versions.

Confidence Score: 4/5

The bump itself is low-risk mechanically, but @commitlint/cli and @commitlint/config-conventional now sit on different major versions, which can cause the CLI to misinterpret the config object at runtime.

The Node engine floor raised by v21 (>=22.12.0) is already satisfied by the project's >=24.0.0 constraint, so that breaking change is harmless here. The remaining concern is that @commitlint/cli was not bumped alongside config-conventional: the CLI at v20 will load a config shaped by v21 tooling, and the two packages share internal type contracts.

package.json — the @commitlint/cli version should be reviewed for alignment with @commitlint/config-conventional@21.

Important Files Changed

Filename	Overview
package.json	Bumps @commitlint/config-conventional to ^21.0.2 while @commitlint/cli remains at ^20.5.3, creating a cross-major version split between two tightly-coupled commitlint packages.
package-lock.json	Lock file updated to reflect v21.0.2; introduces a nested @commitlint/[email protected] under config-conventional while the top-level @commitlint/types remains at v20.x for the CLI. Node engine requirement for the new package is >=22.12.0, which is satisfied by the project's existing >=24.0.0 constraint.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["@commitlint/cli@^20.5.3"] --> B["@commitlint/[email protected]\n(top-level)"]
    C["@commitlint/config-conventional@^21.0.2"] --> D["@commitlint/[email protected]\n(nested / deduplicated separately)"]
    C --> E["conventional-changelog-conventionalcommits@^9.2.0"]
    A & C --> F["commitlint runtime\n(CLI v20 interprets config from v21)"]
    style A fill:#f0ad4e,color:#000
    style C fill:#5cb85c,color:#000
    style B fill:#f0ad4e,color:#000
    style D fill:#5cb85c,color:#000
    style F fill:#d9534f,color:#fff

Loading

_{Reviews (3): Last reviewed commit: "build(deps-dev): bump @commitlint/config..." | Re-trigger Greptile}

[greptile-apps]

Cross-major version mismatch between commitlint packages

@commitlint/cli stays at ^20.5.3 while @commitlint/config-conventional is promoted to ^21.0.2. These packages ship from the same monorepo and are designed to be used at the same major version. The lock file shows the consequence: @commitlint/config-conventional@21 pulls in its own nested @commitlint/[email protected], while the CLI still consumes the top-level @commitlint/[email protected]. At runtime, the config object that config-conventional v21 produces is interpreted by CLI v20 tooling that expects the v20 type shapes — this can manifest as silent misconfig or outright errors when running commitlint. The safe path is to bump @commitlint/cli to ^21.0.2 in the same PR so both packages move together.