Skip to content

build(deps-dev): bump @commitlint/cli from 20.5.0 to 20.5.3#175

Merged
erode-release[bot] merged 1 commit intomainfrom
dependabot/npm_and_yarn/commitlint/cli-20.5.3
May 6, 2026
Merged

build(deps-dev): bump @commitlint/cli from 20.5.0 to 20.5.3#175
erode-release[bot] merged 1 commit intomainfrom
dependabot/npm_and_yarn/commitlint/cli-20.5.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 6, 2026

Bumps @commitlint/cli from 20.5.0 to 20.5.3.

Release notes

Sourced from @​commitlint/cli's releases.

v20.5.3

20.5.3 (2026-04-30)

Refactor

Docs

New Contributors

Full Changelog: conventional-changelog/commitlint@v20.5.2...v20.5.3

v20.5.2

20.5.2 (2026-04-25)

Just minor dep updates before the next breaking change

Chore & Docs

New Contributors

Full Changelog: conventional-changelog/commitlint@v20.5.1...v20.5.2

v20.5.1

20.5.1 (2026-03-31)

Bug Fixes

Reverts

... (truncated)

Changelog

Sourced from @​commitlint/cli's changelog.

20.5.3 (2026-04-30)

Note: Version bump only for package @​commitlint/cli

20.5.2 (2026-04-25)

Note: Version bump only for package @​commitlint/cli

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 6, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 6, 2026 17:38
@erode-release erode-release Bot enabled auto-merge (squash) May 6, 2026 17:39
@greptile-apps
Copy link
Copy Markdown

greptile-apps Bot commented May 6, 2026

Greptile Summary

This PR bumps @commitlint/cli from 20.5.0 to 20.5.3, pulling in patch-level updates across the @commitlint/* ecosystem. The most notable upstream change is the replacement of five individual lodash.* packages with es-toolkit, which reduces the dependency footprint.

  • @commitlint/ensure, @commitlint/load, and @commitlint/resolve-extends drop all lodash sub-packages in favour of es-toolkit@1.46.1.
  • global-directory is bumped from v4 to v5, raising its Node.js engine requirement to >=20; the project's own >=24.0.0 constraint already satisfies this.
  • cosmiconfig-typescript-loader moves from 6.2.0 to 6.3.0 and pins jiti to exactly 2.6.1.

Confidence Score: 5/5

Safe to merge — routine patch-level bump confined entirely to dev tooling with no application code changes.

The changes are confined to dev tooling (commitlint). The main upstream refactor swaps lodash sub-packages for es-toolkit, a well-tested drop-in replacement. Transitive Node.js engine requirement increases (global-directory v5, ini v6) are fully covered by the project's existing >=24.0.0 constraint.

No files require special attention.

Important Files Changed

Filename Overview
package.json Single-line version bump of @commitlint/cli from ^20.5.0 to ^20.5.3; no other changes.
package-lock.json Lock file updated to reflect new @commitlint/* versions, removal of lodash sub-packages, addition of es-toolkit@1.46.1, and bumped transitive deps (global-directory v4→v5, ini v4→v6, ajv 8.18→8.20, cosmiconfig-typescript-loader 6.2→6.3).

Reviews (4): Last reviewed commit: "build(deps-dev): bump @commitlint/cli fr..." | Re-trigger Greptile

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/commitlint/cli-20.5.3 branch from f0c3a30 to 00fdc0e Compare May 6, 2026 17:41
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/commitlint/cli-20.5.3 branch from 00fdc0e to e9f6700 Compare May 6, 2026 17:43
Bumps [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) from 20.5.0 to 20.5.3.
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v20.5.3/@commitlint/cli)

---
updated-dependencies:
- dependency-name: "@commitlint/cli"
  dependency-version: 20.5.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/commitlint/cli-20.5.3 branch from e9f6700 to 67edd85 Compare May 6, 2026 17:46
@erode-release erode-release Bot merged commit 7b169ec into main May 6, 2026
3 checks passed
@erode-release erode-release Bot deleted the dependabot/npm_and_yarn/commitlint/cli-20.5.3 branch May 6, 2026 17:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants