chore(deps-dev): bump @commitlint/cli and config-conventional to v20#242
Merged
AbongileBoja merged 1 commit intodevelopfrom Apr 28, 2026
Merged
chore(deps-dev): bump @commitlint/cli and config-conventional to v20#242AbongileBoja merged 1 commit intodevelopfrom
AbongileBoja merged 1 commit intodevelopfrom
Conversation
Bumps both `@commitlint/cli` and `@commitlint/config-conventional` from v19 to v20 in lockstep so the linter and preset stay on the same major. Dependabot's PR (#209) only bumped the preset, which split the major version between cli (v19) and preset (v20) and forced npm to install two copies of @commitlint/types side-by-side. v20.0.0 has a single breaking change (#4486): body-max-line-length now ignores lines that contain URLs. This is a relaxation, not a regression, and is welcome behaviour for human commits that paste links. Validated locally with the new toolchain: - Real grouped dependabot commit (#211 head): passes (ignored predicate fires). - 200-char human body line: still rejected with body-max-line-length. - Long URL in body line: passes (v20 URL-skip). - Normal short human commit: passes. Closes the version-drift concern flagged on #209.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Replaces dependabot PR #209 with a coupled bump that keeps
@commitlint/cliand@commitlint/config-conventionalon the same major.Why not just merge #209
Dependabot only bumped the preset (
config-conventional) to v20 while leaving the cli on v19. That split the major version between linter and preset and produced a lockfile with two copies of@commitlint/types(v19 for cli, v20 for preset) installed side-by-side. Even though npm tolerates this, it is the kind of drift that causes silent rule/types mismatches in the future. Lockstep bumps are the enterprise-grade answer.What changed in v20
Single breaking change:
body-max-line-lengthnow ignores lines that contain URLs (commitlint #4486). This is a relaxation — human commits that paste long links no longer get flagged. No impact on the dependabot exemption (#241) since the predicate fires before any rule runs.Test plan
Local validation with the new toolchain (
@commitlint/cli@20.5.2):Signed-off-by: dependabot[bot]predicate fires.body-max-line-length.npm audit: 0).Closes