chore(deps-dev): bump @commitlint/config-conventional from 21.0.1 to 21.0.2

[dependabot]

Bumps @commitlint/config-conventional from 21.0.1 to 21.0.2.

Release notes

Sourced from @​commitlint/config-conventional's releases.

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

• fix: emit actionable error when --edit cannot find COMMIT_EDITMSG (#589) by @​escapedcat in conventional-changelog/commitlint#4755
• fix: apply oxfmt formatting to get-edit-commit.ts by @​escapedcat in conventional-changelog/commitlint#4768
• fix(read): fail when --from and --to share no merge-base #4555 by @​CervEdin in conventional-changelog/commitlint#4754
• fix: disallow same commit hash for --from and --to by @​knocte in conventional-changelog/commitlint#4773

Chore/CI

• ci: have renovate rebase stale PRs before merging by @​escapedcat in conventional-changelog/commitlint#4782
• chore: have renovate hold PRs for 3 days after release by @​escapedcat in conventional-changelog/commitlint#4788
• chore: anchor vite 8 by @​escapedcat in conventional-changelog/commitlint#4790
• ci: run commitlint once per same-repo PR by @​escapedcat in conventional-changelog/commitlint#4795

New Contributors

• @​CervEdin made their first contribution in conventional-changelog/commitlint#4754

Full Changelog: conventional-changelog/commitlint@v21.0.1...v21.0.2

Changelog

Sourced from @​commitlint/config-conventional's changelog.

21.0.2 (2026-05-29)

Note: Version bump only for package @​commitlint/config-conventional

Commits

• 8069048 v21.0.2
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[carlos-alm]

@greptileai

[greptile-apps]

Greptile Summary

Patch bump of the dev dependency @commitlint/config-conventional from 21.0.1 to 21.0.2, touching only package-lock.json to update the resolved URL and integrity hash.

• The 21.0.2 release is a bug-fix-only patch: improved error messaging when --edit cannot find COMMIT_EDITMSG, better handling of --from/--to with no shared merge-base, and a fix disallowing the same commit hash for both flags.
• This is a devDependency used solely for commit message linting; it has no runtime or build impact.

Confidence Score: 5/5

Safe to merge — only the lockfile entry for a dev-only commit-linting tool is updated.

The change is limited to updating the resolved URL and integrity hash for a devDependency that runs only during commit message validation. The patch release contains bug fixes to edge cases in the CLI reading logic and carries no API or configuration changes that would affect this project.

No files require special attention.

Important Files Changed

Filename	Overview
package-lock.json	Updates @commitlint/config-conventional lockfile entry from 21.0.1 to 21.0.2 with new resolved URL and integrity hash; no other changes.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[dependabot detects new patch release] --> B["@commitlint/config-conventional 21.0.1 → 21.0.2"]
    B --> C[package-lock.json updated]
    C --> D[New resolved URL]
    C --> E[New integrity hash]
    D & E --> F[No runtime / build impact\ndev dependency only]

Loading

_{Reviews (1): Last reviewed commit: "Merge branch 'main' into dependabot/npm_..." | Re-trigger Greptile}

[carlos-alm]

Dependabot patch bump of @commitlint/config-conventional from 21.0.1 to 21.0.2. CI is fully green across all platforms. Greptile reviewed with 5/5 confidence — lockfile-only change to a devDependency with no runtime or build impact. Safe to merge.