build(deps-dev): bump @commitlint/cli from 20.5.3 to 21.0.2

[dependabot]

Bumps @commitlint/cli from 20.5.3 to 21.0.2.

Release notes

Sourced from @​commitlint/cli's releases.

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

• fix: emit actionable error when --edit cannot find COMMIT_EDITMSG (#589) by @​escapedcat in conventional-changelog/commitlint#4755
• fix: apply oxfmt formatting to get-edit-commit.ts by @​escapedcat in conventional-changelog/commitlint#4768
• fix(read): fail when --from and --to share no merge-base #4555 by @​CervEdin in conventional-changelog/commitlint#4754
• fix: disallow same commit hash for --from and --to by @​knocte in conventional-changelog/commitlint#4773

Chore/CI

• ci: have renovate rebase stale PRs before merging by @​escapedcat in conventional-changelog/commitlint#4782
• chore: have renovate hold PRs for 3 days after release by @​escapedcat in conventional-changelog/commitlint#4788
• chore: anchor vite 8 by @​escapedcat in conventional-changelog/commitlint#4790
• ci: run commitlint once per same-repo PR by @​escapedcat in conventional-changelog/commitlint#4795

New Contributors

• @​CervEdin made their first contribution in conventional-changelog/commitlint#4754

Full Changelog: conventional-changelog/commitlint@v21.0.1...v21.0.2

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

• fix(load): only resolve relative formatter paths by @​escapedcat in conventional-changelog/commitlint#4761
• fix(types): add presetConfig to ParserPreset interface by @​SAY-5 in conventional-changelog/commitlint#4749

CI

• ci: stop spawning schedule jobs on contributors' forks by @​knocte in conventional-changelog/commitlint#4753
• ci: add weekly non-blocking pnpm audit by @​escapedcat in conventional-changelog/commitlint#4766

New Contributors

• @​SAY-5 made their first contribution in conventional-changelog/commitlint#4749

Full Changelog: conventional-changelog/commitlint@v21.0.0...v21.0.1

v21.0.0

Heads-up: --legacy-output is a transitional escape hatch. It will be removed in a future major release. Plan to migrate your parsers / snapshots to the new format during the v21 lifecycle.

... (truncated)

Changelog

Sourced from @​commitlint/cli's changelog.

21.0.2 (2026-05-29)

Bug Fixes

• disallow same commit hash for --from and --to (#4773) (121005e)

21.0.1 (2026-05-12)

Note: Version bump only for package @​commitlint/cli

21.0.0 (2026-05-08)

• chore!: minimum node version v22 (#4679) (ac2b3f4), closes #4679

BREAKING CHANGES

• drop node v18 and v20 support

• Bump engines to >=v22 in all 39 package.json files
• Update @​types/node to ^22.0.0
• Update CI matrix to [22, 24]
• Update Ubuntu baseline job to ubuntu:26.04
• Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json
• Update pre-commit hook to use --ignore-engines
• Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) [email protected]

Commits

• 8069048 v21.0.2
• 121005e fix: disallow same commit hash for --from and --to (#4773)
• db8d7d6 v21.0.1
• 1329a25 chore: migrate to pnpm (#4762)
• db39968 chore: pre pnpm cleanup (#4759)
• 6099ae5 chore: replace eslint with oxlint (#4756)
• f081a8e v21.0.0
• 40d7e36 feat!: show input from a new line (#4727)
• 44c3174 chore: update dependency yargs to v18 #4432 (#4686)
• ac01464 chore: replace dependencies with Node 22 built-ins (#4681)
• Additional commits viewable in compare view

[greptile-apps]

Greptile Summary

This is a dependabot PR bumping @commitlint/cli from v20.5.3 to v21.0.2, a major version release that drops Node v18/v20 support in favour of >=22.12.0. The project already declares "engines": {"node": ">=24.0.0"} and CI runs on Node 24, so the engine constraint is satisfied.

• @commitlint/cli and all its internal sub-packages (@commitlint/lint, @commitlint/load, @commitlint/read, etc.) are updated to v21; @commitlint/config-conventional remains at ^20.5.3, requiring npm to install duplicate nested copies of @commitlint/types (v20 at root, v21 nested under each v21 package) to satisfy both versions simultaneously.
• Transitive updates include conventional-commits-parser 6.3→6.4, es-toolkit 1.46→1.47, yargs 17→18 (scoped under the CLI), and removal of minimist and import-meta-resolve from the v21 dependency tree.

Confidence Score: 4/5

Safe to merge for CI/tooling purposes — Node 24 satisfies the new engine requirement — but the cross-major mismatch between @commitlint/cli v21 and @commitlint/config-conventional v20 means commitlint may silently mis-apply or reject rules until config-conventional is co-bumped.

The CLI's major-version jump to v21 is fully compatible with the project's Node 24 environment, and all internal @commitlint/* sub-packages are consistently updated. The outstanding concern is that @commitlint/config-conventional was not co-bumped: the v21 loader now resolves a v20 preset, and any type-level or API-level divergence between the two major versions could cause commitlint to behave incorrectly without a clear error.

package.json — the @commitlint/config-conventional version should be reviewed for a companion bump to v21.

Important Files Changed

Filename	Overview
package.json	Bumps @commitlint/cli to ^21.0.2 while @commitlint/config-conventional remains at ^20.5.3, creating a cross-major version dependency pairing
package-lock.json	Lock file updated to reflect the v21 CLI tree; npm resolves the v20/v21 @commitlint/types split via nested installs under each package, adding several duplicate copies of @commitlint/[email protected]

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["@commitlint/cli v21.0.2"] --> B["@commitlint/load v21"]
    A --> C["@commitlint/lint v21"]
    A --> D["@commitlint/read v21"]
    A --> E["@commitlint/format v21"]
    B --> F["@commitlint/resolve-extends v21"]
    B --> G["@commitlint/config-validator v21"]
    B --> H["@commitlint/types v21 (nested)"]
    C --> I["@commitlint/rules v21"]
    C --> J["@commitlint/is-ignored v21"]
    K["@commitlint/config-conventional v20.5.3 (unchanged)"] --> L["@commitlint/types v20 (root)"]
    style K fill:#f9a,stroke:#c66
    style L fill:#f9a,stroke:#c66
    style H fill:#adf,stroke:#66c

Loading

_{Reviews (4): Last reviewed commit: "build(deps-dev): bump @commitlint/cli fr..." | Re-trigger Greptile}

[greptile-apps]

Major version mismatch: @commitlint/config-conventional not co-bumped

@commitlint/cli was updated to v21 while @commitlint/config-conventional remains at ^20.5.3. Commitlint publishes all its packages in lock-step from a single monorepo, so mixing major versions can cause type mismatches or unexpected runtime behavior when the CLI attempts to load the v20 config preset through its v21 internal loader (@commitlint/load). A companion PR or manual bump of @commitlint/config-conventional to ^21.0.x should be included.