Skip to content

build(deps-dev): bump @commitlint/cli from 20.5.0 to 20.5.2#3526

Merged
github-actions[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/commitlint/cli-20.5.2
Apr 27, 2026
Merged

build(deps-dev): bump @commitlint/cli from 20.5.0 to 20.5.2#3526
github-actions[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/commitlint/cli-20.5.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps @commitlint/cli from 20.5.0 to 20.5.2.

Release notes

Sourced from @​commitlint/cli's releases.

v20.5.2

20.5.2 (2026-04-25)

Just minor dep updates before the next breaking change

Chore & Docs

New Contributors

Full Changelog: conventional-changelog/commitlint@v20.5.1...v20.5.2

v20.5.1

20.5.1 (2026-03-31)

Bug Fixes

Reverts

Core & co

Full Changelog: conventional-changelog/commitlint@v20.5.0...v20.5.1

Changelog

Sourced from @​commitlint/cli's changelog.

20.5.2 (2026-04-25)

Note: Version bump only for package @​commitlint/cli

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) from 20.5.0 to 20.5.2.
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v20.5.2/@commitlint/cli)

---
updated-dependencies:
- dependency-name: "@commitlint/cli"
  dependency-version: 20.5.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 27, 2026
@github-actions github-actions Bot enabled auto-merge (squash) April 27, 2026 04:03
@github-actions github-actions Bot merged commit f37fb73 into master Apr 27, 2026
3 of 4 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/commitlint/cli-20.5.2 branch April 27, 2026 04:03
@codacy-production
Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results
Complexity 0
Duplication 0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

Run reviewer

TIP This summary will be updated as you push new changes.

Copy link
Copy Markdown

@codacy-production codacy-production Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates @commitlint/cli from 20.5.0 to 20.5.2. Although the direct change is a patch update, the package-lock.json reveals that this triggers major version upgrades for transitive dependencies global-directory@5.0.0 and ini@6.0.0.

These updates introduce restrictive Node.js engine requirements (requiring Node.js >= 20.17.0 or >= 22.9.0). This change will likely cause installation failures if the project's CI or developer environments are still using Node 18 (which is currently in LTS) or older versions of Node 20. This should be considered a breaking change for the development environment.

About this PR

  • The transient dependency updates for 'global-directory' and 'ini' introduce significantly more restrictive Node.js engine requirements. If this project currently supports Node 18 or early releases of Node 20/22, this PR will cause installation failures.

Test suggestions

  • Confirm commitlint functionality by running a lint check on a valid and invalid commit message.
  • Verify compatibility with the current project Node.js environment, given the increased engine requirements in transient dependencies.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Confirm commitlint functionality by running a lint check on a valid and invalid commit message.
2. Verify compatibility with the current project Node.js environment, given the increased engine requirements in transient dependencies.

TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback

Comment thread package.json
},
"devDependencies": {
"@commitlint/cli": "^20.5.0",
"@commitlint/cli": "^20.5.2",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 MEDIUM RISK

This update introduces transitive dependencies with restrictive Node.js engine requirements: global-directory@5.0.0 requires >=20 and ini@6.0.0 requires ^20.17.0 || >=22.9.0. This will cause installation or execution failures in environments running Node 18, 19, 21, or versions of Node 20/22 older than the specified patches.

Try running the following prompt in your coding agent:

Check the project's CI configuration (e.g., GitHub Actions workflows), .nvmrc, and development documentation for Node.js version requirements. If Node 18 support is still required, revert the @commitlint/cli update or upgrade the environment's Node.js version to meet the new requirements.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants