build(deps-dev): bump @commitlint/cli from 20.5.3 to 21.0.2

[dependabot]

Bumps @commitlint/cli from 20.5.3 to 21.0.2.

Release notes

Sourced from @​commitlint/cli's releases.

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

• fix: emit actionable error when --edit cannot find COMMIT_EDITMSG (#589) by @​escapedcat in conventional-changelog/commitlint#4755
• fix: apply oxfmt formatting to get-edit-commit.ts by @​escapedcat in conventional-changelog/commitlint#4768
• fix(read): fail when --from and --to share no merge-base #4555 by @​CervEdin in conventional-changelog/commitlint#4754
• fix: disallow same commit hash for --from and --to by @​knocte in conventional-changelog/commitlint#4773

Chore/CI

• ci: have renovate rebase stale PRs before merging by @​escapedcat in conventional-changelog/commitlint#4782
• chore: have renovate hold PRs for 3 days after release by @​escapedcat in conventional-changelog/commitlint#4788
• chore: anchor vite 8 by @​escapedcat in conventional-changelog/commitlint#4790
• ci: run commitlint once per same-repo PR by @​escapedcat in conventional-changelog/commitlint#4795

New Contributors

• @​CervEdin made their first contribution in conventional-changelog/commitlint#4754

Full Changelog: conventional-changelog/commitlint@v21.0.1...v21.0.2

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

• fix(load): only resolve relative formatter paths by @​escapedcat in conventional-changelog/commitlint#4761
• fix(types): add presetConfig to ParserPreset interface by @​SAY-5 in conventional-changelog/commitlint#4749

CI

• ci: stop spawning schedule jobs on contributors' forks by @​knocte in conventional-changelog/commitlint#4753
• ci: add weekly non-blocking pnpm audit by @​escapedcat in conventional-changelog/commitlint#4766

New Contributors

• @​SAY-5 made their first contribution in conventional-changelog/commitlint#4749

Full Changelog: conventional-changelog/commitlint@v21.0.0...v21.0.1

v21.0.0

Heads-up: --legacy-output is a transitional escape hatch. It will be removed in a future major release. Plan to migrate your parsers / snapshots to the new format during the v21 lifecycle.

... (truncated)

Changelog

Sourced from @​commitlint/cli's changelog.

21.0.2 (2026-05-29)

Bug Fixes

• disallow same commit hash for --from and --to (#4773) (121005e)

21.0.1 (2026-05-12)

Note: Version bump only for package @​commitlint/cli

21.0.0 (2026-05-08)

• chore!: minimum node version v22 (#4679) (ac2b3f4), closes #4679

BREAKING CHANGES

• drop node v18 and v20 support

• Bump engines to >=v22 in all 39 package.json files
• Update @​types/node to ^22.0.0
• Update CI matrix to [22, 24]
• Update Ubuntu baseline job to ubuntu:26.04
• Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json
• Update pre-commit hook to use --ignore-engines
• Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com

Commits

• 8069048 v21.0.2
• 121005e fix: disallow same commit hash for --from and --to (#4773)
• db8d7d6 v21.0.1
• 1329a25 chore: migrate to pnpm (#4762)
• db39968 chore: pre pnpm cleanup (#4759)
• 6099ae5 chore: replace eslint with oxlint (#4756)
• f081a8e v21.0.0
• 40d7e36 feat!: show input from a new line (#4727)
• 44c3174 chore: update dependency yargs to v18 #4432 (#4686)
• ac01464 chore: replace dependencies with Node 22 built-ins (#4681)
• Additional commits viewable in compare view

[greptile-apps]

Greptile Summary

This dependabot PR upgrades @commitlint/cli from v20.5.3 to v21.0.2. The new major version drops Node.js < 22 support and upgrades several internal dependencies (yargs v17→v18, @commitlint/types v21), which is compatible with the project's own engines constraint of >=24.0.0.

• package.json: @commitlint/cli range bumped to ^21.0.2; @commitlint/config-conventional remains at ^20.5.3, creating a cross-major mismatch already noted in a prior review thread.
• package-lock.json: Updated to resolve @commitlint/cli@21.0.2 along with its updated transitive dependencies (yargs@18, cliui@9, babel helpers, etc.).

Confidence Score: 4/5

The upgrade itself is mechanically sound and Node.js version requirements are fully compatible, but the companion @commitlint/config-conventional package has not been co-bumped to v21, leaving the CLI and its preset at different major versions.

@commitlint/cli is now at v21 while @commitlint/config-conventional remains at ^20.5.3. These packages are published in lock-step from the same monorepo, and the CLI's internal @commitlint/load uses the v21 API to load the preset. A cross-major mismatch here can cause type incompatibilities or runtime failures when commitlint resolves the config-conventional preset through its v21 loader.

package.json — @commitlint/config-conventional should be bumped to ^21.0.x alongside the CLI upgrade

Important Files Changed

Filename	Overview
package.json	Bumps @commitlint/cli to ^21.0.2 while @commitlint/config-conventional stays at ^20.5.3 — a cross-major mismatch for packages that are published in lock-step
package-lock.json	Lock file correctly resolves @commitlint/cli@21.0.2 and its updated transitive deps (yargs@18, cliui@9, babel@7.29.x); no unexpected resolutions

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    CLI["@commitlint/cli@21.0.2\n(this PR)"]
    CFG["@commitlint/config-conventional@^20.5.3\n(unchanged)"]
    LOAD["@commitlint/load@^21.0.2"]
    LINT["@commitlint/lint@^21.0.2"]
    FMT["@commitlint/format@^21.0.1"]
    READ["@commitlint/read@^21.0.2"]
    TYPES["@commitlint/types@^21.0.1"]
    YARGS["yargs@18"]

    CLI --> LOAD
    CLI --> LINT
    CLI --> FMT
    CLI --> READ
    CLI --> TYPES
    CLI --> YARGS
    LOAD -->|extends| CFG
    CFG -.->|v20 major mismatch| LOAD

    style CFG fill:#ffcc00,stroke:#ff8800
    style CLI fill:#90ee90,stroke:#228b22

Loading

_{Reviews (5): Last reviewed commit: "build(deps-dev): bump @commitlint/cli fr..." | Re-trigger Greptile}

[greptile-apps]

Major version mismatch: @commitlint/config-conventional not co-bumped

@commitlint/cli was updated to v21 while @commitlint/config-conventional remains at ^20.5.3. Commitlint publishes all its packages in lock-step from a single monorepo, so mixing major versions can cause type mismatches or unexpected runtime behavior when the CLI attempts to load the v20 config preset through its v21 internal loader (@commitlint/load). A companion PR or manual bump of @commitlint/config-conventional to ^21.0.x should be included.