[dependabot]

Bumps the dev-dependencies group with 6 updates in the / directory:

Package	From	To
@commitlint/cli	20.5.3	21.2.3
@commitlint/config-conventional	20.5.3	21.2.3
@types/node	25.9.4	26.6.5
conventional-changelog-conventionalcommits	9.3.1	10.4.1
semantic-release	25.0.5	25.0.9
typescript	5.9.3	7.0.2

Updates @commitlint/cli from 20.5.3 to 21.2.3

Release notes

Sourced from @​commitlint/cli's releases.

v21.2.3

21.2.3 (2026-09-19)

Bug Fixes

• fix(types): correct breaking-change-exclamation-mark rule config type by @​lazerg in conventional-changelog/commitlint#4954
• fix(config-nx-scopes): read scopes from the nx project graph by @​dylanpulver in conventional-changelog/commitlint#4957
• fix(lint): trim trailing whitespace off the message handed to ignore matchers by @​dylanpulver in conventional-changelog/commitlint#4960
• fix(load): detect dynamic await support on node majors above 20 by @​dylanpulver in conventional-changelog/commitlint#4961
• fix(rules): report the case that matched in case rule failure messages by @​dylanpulver in conventional-changelog/commitlint#4962
• fix(load): run the parser factory of scoped conventional-changelog presets by @​maximilliangrand in conventional-changelog/commitlint#4968

Refactor

• refactor(load): drop the node version check gating cosmiconfig loaders by @​dylanpulver in conventional-changelog/commitlint#4972

Chore, ci, build, etc.

• build: install pnpm via npm instead of corepack by @​escapedcat in conventional-changelog/commitlint#4948
• build: retire the docker compose dev environment by @​escapedcat in conventional-changelog/commitlint#4949
• build: verify pnpm tarball against the packageManager sha512 pin by @​escapedcat in conventional-changelog/commitlint#4952
• ci: stabilize Windows CI by raising Vitest default timeout by @​escapedcat with @​Copilot in conventional-changelog/commitlint#4959
• docs: drop the Node 24 config-loading workaround note by @​escapedcat in conventional-changelog/commitlint#4976
• chore: move pnpm settings from .npmrc to pnpm-workspace.yaml by @​escapedcat in conventional-changelog/commitlint#4977
• chore: swap pnpm resolutionMode time-based for minimumReleaseAge by @​escapedcat in conventional-changelog/commitlint#4984

New Contributors

• @​lazerg made their first contribution in conventional-changelog/commitlint#4954
• @​escapedcat with @​Copilot made their first contribution in conventional-changelog/commitlint#4959
• @​dylanpulver made their first contribution in conventional-changelog/commitlint#4957
• @​maximilliangrand made their first contribution in conventional-changelog/commitlint#4968

Full Changelog: conventional-changelog/commitlint@v21.2.2...v21.2.3

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

• parse: require colon after note keywords (conventional-commits-parser 7.1.2) (#4927) (b83c515), closes conventional-changelog/conventional-changelog#1517
• fix(container): resolve packages from TypeScript configs by @​Guflly in conventional-changelog/commitlint#4914
• fix(resolve-extends): support Yarn Plug'n'Play by @​Guflly in conventional-changelog/commitlint#4933

Chore, docs, etc.

• docs: fix typos in comments and JSDoc by @​maxtaran2010 in conventional-changelog/commitlint#4880

... (truncated)

Changelog

Sourced from @​commitlint/cli's changelog.

21.2.3 (2026-09-19)

Bug Fixes

• lint: trim trailing whitespace off the message handed to ignore matchers (#4960) (a6f279b)

21.2.2 (2026-08-13)

Note: Version bump only for package @​commitlint/cli

21.2.1 (2026-07-08)

Note: Version bump only for package @​commitlint/cli

21.2.0 (2026-06-30)

Features

• resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#4859) (fdb566f)

21.1.0 (2026-06-23)

Features

• cli: add --default-config flag to lint without a config file (#4805) (7af27ba), closes #3662

21.0.2 (2026-05-29)

Bug Fixes

... (truncated)

Commits

• 95d4056 v21.2.3
• a6f279b fix(lint): trim trailing whitespace off the message handed to ignore matchers...
• d00d190 v21.2.2
• f2e8dae chore: update dependency typescript to v7 (#4886)
• 5769d9f docs: fix typos in comments and JSDoc (#4880)
• 6e20041 v21.2.1
• 1b4e5bc v21.2.0
• fdb566f feat(resolve-extends): resolve pure-ESM presets (conventional-changelog v7/v9...
• 6f1c0af v21.1.0
• 7af27ba feat(cli): add --default-config flag to lint without a config file (#4805)
• Additional commits viewable in compare view

Updates @commitlint/config-conventional from 20.5.3 to 21.2.3

Release notes

Sourced from @​commitlint/config-conventional's releases.

v21.2.3

21.2.3 (2026-09-19)

Bug Fixes

• fix(types): correct breaking-change-exclamation-mark rule config type by @​lazerg in conventional-changelog/commitlint#4954
• fix(config-nx-scopes): read scopes from the nx project graph by @​dylanpulver in conventional-changelog/commitlint#4957
• fix(lint): trim trailing whitespace off the message handed to ignore matchers by @​dylanpulver in conventional-changelog/commitlint#4960
• fix(load): detect dynamic await support on node majors above 20 by @​dylanpulver in conventional-changelog/commitlint#4961
• fix(rules): report the case that matched in case rule failure messages by @​dylanpulver in conventional-changelog/commitlint#4962
• fix(load): run the parser factory of scoped conventional-changelog presets by @​maximilliangrand in conventional-changelog/commitlint#4968

Refactor

• refactor(load): drop the node version check gating cosmiconfig loaders by @​dylanpulver in conventional-changelog/commitlint#4972

Chore, ci, build, etc.

• build: install pnpm via npm instead of corepack by @​escapedcat in conventional-changelog/commitlint#4948
• build: retire the docker compose dev environment by @​escapedcat in conventional-changelog/commitlint#4949
• build: verify pnpm tarball against the packageManager sha512 pin by @​escapedcat in conventional-changelog/commitlint#4952
• ci: stabilize Windows CI by raising Vitest default timeout by @​escapedcat with @​Copilot in conventional-changelog/commitlint#4959
• docs: drop the Node 24 config-loading workaround note by @​escapedcat in conventional-changelog/commitlint#4976
• chore: move pnpm settings from .npmrc to pnpm-workspace.yaml by @​escapedcat in conventional-changelog/commitlint#4977
• chore: swap pnpm resolutionMode time-based for minimumReleaseAge by @​escapedcat in conventional-changelog/commitlint#4984

New Contributors

• @​lazerg made their first contribution in conventional-changelog/commitlint#4954
• @​escapedcat with @​Copilot made their first contribution in conventional-changelog/commitlint#4959
• @​dylanpulver made their first contribution in conventional-changelog/commitlint#4957
• @​maximilliangrand made their first contribution in conventional-changelog/commitlint#4968

Full Changelog: conventional-changelog/commitlint@v21.2.2...v21.2.3

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

• parse: require colon after note keywords (conventional-commits-parser 7.1.2) (#4927) (b83c515), closes conventional-changelog/conventional-changelog#1517
• fix(container): resolve packages from TypeScript configs by @​Guflly in conventional-changelog/commitlint#4914
• fix(resolve-extends): support Yarn Plug'n'Play by @​Guflly in conventional-changelog/commitlint#4933

Chore, docs, etc.

• docs: fix typos in comments and JSDoc by @​maxtaran2010 in conventional-changelog/commitlint#4880

... (truncated)

Changelog

Sourced from @​commitlint/config-conventional's changelog.

21.2.3 (2026-09-19)

Bug Fixes

• rules: report the case that matched in case rule failure messages (#4962) (9f5f7bc)

21.2.2 (2026-08-13)

Note: Version bump only for package @​commitlint/config-conventional

21.2.0 (2026-06-30)

Features

• resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#4859) (fdb566f)

21.1.0 (2026-06-23)

Note: Version bump only for package @​commitlint/config-conventional

21.0.2 (2026-05-29)

Note: Version bump only for package @​commitlint/config-conventional

21.0.1 (2026-05-12)

Note: Version bump only for package @​commitlint/config-conventional

... (truncated)

Commits

• 95d4056 v21.2.3
• 9f5f7bc fix(rules): report the case that matched in case rule failure messages (#4962)
• d00d190 v21.2.2
• 3146d04 docs(config-conventional): document rules that go beyond the spec (#4910)
• f2e8dae chore: update dependency typescript to v7 (#4886)
• 1b4e5bc v21.2.0
• fdb566f feat(resolve-extends): resolve pure-ESM presets (conventional-changelog v7/v9...
• 6f1c0af v21.1.0
• 8069048 v21.0.2
• db8d7d6 v21.0.1
• Additional commits viewable in compare view

Updates @types/node from 25.9.4 to 26.6.5

Commits

• See full diff in compare view

Updates conventional-changelog-conventionalcommits from 9.3.1 to 10.4.1

Release notes

Sourced from conventional-changelog-conventionalcommits's releases.

conventional-changelog-conventionalcommits: v10.4.1

Bug Fixes

• declare DEFAULT_COMMIT_TYPES and format function exports (#1552) (4ba1e91)

conventional-changelog-conventionalcommits: v10.4.0

Features

• fail loudly when a preset is rendered by an old writer (#1539) (341e3f0), closes #1495

conventional-changelog-conventionalcommits: v10.3.0

Features

• format references in breaking change notes (#1529) (a8ef1ed), closes #631
• group notes by their keyword (#1533) (7be33d4), closes #815

Bug Fixes

• use current host url paths (#1534) (612d368), closes #986

conventional-changelog-conventionalcommits: v10.2.1

Bug Fixes

• point package homepages and docs to documentation website (04796e2)

conventional-changelog-conventionalcommits: v10.2.0

Features

• support changelog preamble partial (#1491) (e93dbe4)

conventional-changelog-conventionalcommits: v10.1.0

Features

• support changelog preamble (#1489) (7d9794f)

conventional-changelog-conventionalcommits: v10.0.0

⚠ BREAKING CHANGES

• the commit type effect property replaces the hidden commit type property and the bumpStrict preset option for controlling changelog visibility and version bumps.

Fixes #1476.

• Handlebars template strings and partial files were replaced with render functions.
• packages now require Node.js 22 or newer.

Features

• replace handlebars templates with render functions (#1477) (55e6716)
• require node 22 (de5e136)
• support commit type effects (#1484) (78761ae)

... (truncated)

Changelog

Sourced from conventional-changelog-conventionalcommits's changelog.

10.4.1 (2026-10-05)

Bug Fixes

• declare DEFAULT_COMMIT_TYPES and format function exports (#1552) (4ba1e91)

10.4.0 (2026-08-18)

Features

• fail loudly when a preset is rendered by an old writer (#1539) (341e3f0), closes #1495

10.3.0 (2026-08-10)

Features

• format references in breaking change notes (#1529) (a8ef1ed), closes #631
• group notes by their keyword (#1533) (7be33d4), closes #815

Bug Fixes

• use current host url paths (#1534) (612d368), closes #986

10.2.1 (2026-07-04)

Bug Fixes

• point package homepages and docs to documentation website (04796e2)

10.2.0 (2026-06-27)

Features

• support changelog preamble partial (#1491) (e93dbe4)

10.1.0 (2026-06-27)

Features

• support changelog preamble (#1489) (7d9794f)

10.0.0 (2026-06-26)

⚠ BREAKING CHANGES

• the commit type effect property replaces the hidden commit type property and the bumpStrict preset option for controlling changelog visibility and version bumps.

Fixes #1476.

• Handlebars template strings and partial files were replaced with render functions.
• packages now require Node.js 22 or newer.

... (truncated)

Commits

• d99dfae chore(release): monorepo release (#1556)
• a06cee8 fix(conventional-commits-parser): parse reference actions of footers followed...
• 4ba1e91 fix(conventional-changelog-conventionalcommits): declare DEFAULT_COMMIT_TYPES...
• 340ad83 chore(release): monorepo release (#1540)
• 341e3f0 feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...
• cbd52fb chore(release): monorepo release (#1530)
• 612d368 fix(conventional-changelog,conventional-changelog-writer,conventional-changel...
• 7be33d4 feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...
• a8ef1ed feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...
• 18332e8 test: remove duplicate repository fields from fixtures (#1527)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for conventional-changelog-conventionalcommits since your current version.

Updates semantic-release from 25.0.5 to 25.0.9

Release notes

Sourced from semantic-release's releases.

v25.0.9

25.0.9 (2026-08-05)

Bug Fixes

• do not expose the authenticated repository URL in EGITNOPERMISSION errors (#4283) (8d905a5)

v25.0.8

25.0.8 (2026-07-18)

Bug Fixes

• handle potential null values in commit message and gitTags trimming (0a60004)
• hide-sensitive: mask key/auth/webhook env vars (973d763)
• mask sensitive environment variables and improve commit handling (#4252) (1bfdc52)
• prevent template evaluation syntax in branch expansion and tag formatting (f121540)

v25.0.7

25.0.7 (2026-07-13)

Bug Fixes

• argument Injection via repositoryUrl in package.json (#4245) (c46dbda)

v25.0.6

25.0.6 (2026-07-10)

Bug Fixes

• ensure encoded secrets get masked (8e28dd3)

Commits

• 8d905a5 fix: do not expose the authenticated repository URL in EGITNOPERMISSION error...
• e176eb7 ci(action): update github/codeql-action action to v4.37.6 (#4282)
• d27db1b chore(deps): update dependency js-yaml to v4.3.1 (#4279)
• 55beeac ci(action): update github/codeql-action action to v4.37.5 (#4277)
• 7bf348d chore(deps): update dependency nock to v14.0.17 (#4275)
• 2ec3ba2 chore(deps): update dependency mockserver-client to v7.5.0 (#4274)
• d3b7724 chore(deps): update npm to v12.0.2 (#4273)
• 514dc5f chore(deps): update dependency npm-run-all2 to v9.0.3 (#4271)
• f25b716 ci(action): update github/codeql-action action to v4.37.4 (#4270)
• 1114416 chore: remove 'next version' badge from README (#4265)
• Additional commits viewable in compare view

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).
• fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

• npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

• npm

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).

Downloads are available on:

• npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

• fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

• npm

Commits

• 1e4744d Merge branch 'main' into ts7-release
• a5a219cmicrosoft/typescript-go#4558
• ecfe30d Update status localization
• 5de25b5 Hide executable name in TypeScript status
• d7ce74a Show bundled TypeScript version for packaged servers
• 29be66a Correct TS 7 release version to 7.0.2
• ed2bd1b Merge branch 'main' into ts7-release
• 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
• 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
• d4eaca5microsoft/typescript-go#4549
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

[DrRataplan]

@dependabot rebase

[github-actions]

Visit the preview URL for this PR (updated for commit bd44718):

https://prettier-plugin-xquery-demo--pr137-dependabot-npm-and-e2rktl2x.web.app

_{(expires Mon, 02 Nov 2026 06:57:47 GMT)}

_{🔥 via Firebase Hosting GitHub Action 🌎}

_{Sign: 05f844b4fde774e8f22615c0409beb01474e9378}