Skip to content

chore(deps-dev): bump release-it from 18.1.2 to 21.1.2 - #1245

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/release-it-21.1.2
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/release-it-21.1.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 15, 2026 •

Copy link
Copy Markdown
Contributor

Bumps release-it from 18.1.2 to 21.1.2.

Release notes

Sourced from release-it's releases.

Release 21.1.2

  • Update pnpm to 11.28.10 (3112b7a569de3c807e72fb0fd5465d6a577cfe4e)
  • Map ssh.github.com to github.com for release URLs (resolve #1344) (ce51fd14290e8ef95006ae198ffc012cb43d8808)
  • Update undici to 7.30.1 (0afee0b363f02ece2dbe1d747ca91edb5f14695a)
  • Show the GitLab error message for failed requests (8b21da45c9d901565359a7f9c523956bc907ac15)
  • Pass branch, tag and remote names to git as arguments (resolve #1341) (dd963d54d767ec4cac0c95f088600b9cff5d23f5)

Release 21.1.1

  • docs: add release-it-git-cliff to plugins list (#1334) (bf2a3d8625f1ffb68cab1a55564761493febf381) - thanks @​adamhl8!
  • Update undici to 7.29.1 (resolve #1335) (37898f1b44d88555ce25a573ea3ce379279a8279)
  • Update more dependencies (7bd73af08fe1a1b3ba0a436f888f102263fcf2c9)
  • Migrate verkit import (5336543483af172853668d3b67def6eafc6a652a)

Release 21.1.0

  • chore(deps): replace semver with verkit (#1329) (033dca25dcca548d889b13e0ae1b7d063b0dca92) - thanks @​gameroman!
  • fix(schema): remove fragment from schema $id values (#1332) (6e4022238a2255d86842321d6cc8f5b72fc39194) - thanks @​DanMat!
  • Fix version increments and coercion after verkit migration (eab4b8cef600379dc0211bebb9c8de0df1ce9bdb)
  • Log in to npm automatically before interactive publishing (resolve #1333) (76e409fd271509706307e31b1658389afb678d89)
  • Support proxy environment variables in GitLab (resolve #1131) (#1331) (afb5565a09dfd38a02d5dbcc6c6317d824ffcccd) - thanks @​mrpmohiburrahman!
  • Update dependencies (9ca5d328012cd740094841069d295df8152ad695)
  • Narrow engines.node (98dcf1910981e13236d7ac02106a134bec71387d)
  • Fix version coercion for verkit 0.4 (7ee54c2d7528244a032da948f478381d898ee52a)

Release 21.0.3

  • Fix npm staging approval URL and prompt (9f64e098aa04aac44fe9484add1f1f2119fa294c)

Release 21.0.2

  • Prevent duplicate comments on resolved issues and PRs (#1324) (7ca61cccd16ad56742ee0cb694c946353b66c117) - thanks @​krisu-pl!
  • Migrate to pnpm + update deps (6c211f087f465af8942060812ec4ee662419da9f)

Release 21.0.1

  • Fix regression and support --no-hooks to skip all hooks (a8888b45b1d9db40a8f8ea5ad625b15b53d78925)

Release 21.0.0

  • fix(ci): do not run integration on forks (#1315) (1e90d9f28f08a847029ed58f8ac211028d4203ca) - thanks @​trueberryless!
  • Pin GitHub Actions to immutable commits (#1316) (38355d8068ac5c0818bc183ddb39db643aeab0c3)
  • Fix npm publish workspace config resolution (#1312) (3bf251f5ab4c3665397aef8a7a4db6a21e02a98f) - thanks @​cyphercodes!
  • Add gitlab.repoId option (#1224) (e4e9d0e35cbd99492c8b1a7b48e5a695951af7a2) - thanks @​microHoffman!
  • Exit successfully when no release version is available (56c70c3f1436101a9284c535bed233081af85960)
  • Support numeric GitLab repository IDs (0332c4ac4ecb8b714c8971b3953c972f59fe1f30)
  • Parse CLI arguments strictly (resolve #1196) (caf77c928bfefa48339e8246261ffb8e41d70a4c)
  • fix: shell caching and working tree detection (#1317) (8d1f7522ffc6afb445a00ab03357fdc7554b48ac) - thanks @​Mopsgamer!
  • Remove dependabot workflow (e7e04ef3fb6151324ffde438a278539fbbc24eec)
  • Fix configured GitHub proxy routing (1ed9cddf5d18d2c4107500081254cc7af22eff42)
  • Upgrade dependencies and require Node 22 (c055e7fa5b2dcaf5078d4a5c337140a5bea0ac7e)
  • Fix npm custom registry argument handling (resolve #1318) (98c45c4503e1d8bad0b7c38d99f6fda380c3681e)
  • Pin GitLab releases to the current commit (resolve #1216) (70ab5769852bc5a3fafe4ac193f28bd247fa067e)
  • Refresh GitHub Actions and package preview runtime (5c5513966ba2d4f1133c9b33c33850470c12a934)
  • Document v21 runtime requirements (daab8460c0f0ed7f8a97c0ef806ef506d59f7268)
  • Simplify git-cliff recipe (resolve #1195) (52c89a7965d3aff0a5d2474903fc902dbde59cf5)

... (truncated)

Changelog

Sourced from release-it's changelog.

Changelog

This document lists breaking changes for each major release.

See the GitHub Releases page for detailed changelogs: [https://github.com/release-it/release-it/releases][1]

v21 (2026-07-25)

  • Removed support for Node.js v20 and raised the Node.js v22 minimum to v22.21.0.
  • CLI argument parsing is now strict. Unknown options, invalid booleans, and extra positional arguments are rejected.
  • GitLab server certificates are verified by default. Configure private CA or explicitly set gitlab.secure to false.

v20 (2026-03-24)

  • Upgraded undici from v6 to v7 to resolve security vulnerabilities.
  • Upgraded proxy-agent from v6 to v7 to fix DEP0169 (url.parse() deprecation).
  • Migrated from deprecated inquirer to @inquirer/prompts.
  • Bumped engines.node to minimum Node.js v20.19.0 (was v20.12.0).

v19 (2025-04-18)

  • No breaking changes (dependency party)

v18 (2025-01-06)

  • Removed support for Node.js v18.

v17 (2023-11-11)

  • Removed support for Node.js v16.

v16 (2023-07-05)

  • Removed support for Node.js v14.

v15 (2022-04-30)

  • Removed support for Node.js v10 and v12.
  • Removed support for GitLab v12.4 and lower.
  • Removed anonymous metrics (and the option to disable it).
  • Programmatic usage and plugins only through ES Module syntax (import)

Use release-it v14 in legacy environments.

v14 (2020-09-03)

  • Removed global property from plugins. Use this.config[key] instead.
  • Removed deprecated npm.access option. Set this in package.json instead.

v13 (2020-03-07)

... (truncated)

Commits

@dependabot
dependabot Bot requested a review from Naturalclar as a code owner November 15, 2026 04:57
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 15, 2026
Bumps [release-it](https://github.com/release-it/release-it) from 18.1.2 to 21.1.2.
- [Release notes](https://github.com/release-it/release-it/releases)
- [Changelog](https://github.com/release-it/release-it/blob/main/CHANGELOG.md)
- [Commits](release-it/release-it@18.1.2...21.1.2)

---
updated-dependencies:
- dependency-name: release-it
  dependency-version: 21.1.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/release-it-21.1.2 branch from 0e544b9 to 37c8e54 Compare November 15, 2026 05:03
Naturalclar added a commit that referenced this pull request Nov 15, 2026
release-it and @release-it/conventional-changelog are coupled through a peer
range: the plugin declares `release-it: ^18 || ^19 || ^20`, so bumping
release-it alone to 21 produces a combination the plugin refuses.

This is not hypothetical. #1245 bumps release-it 18.1.2 -> 21.1.2 on its own
and cannot be merged for exactly this reason, and nothing in CI catches it:
yarn treats the peer mismatch as a warning, and no CI job runs the release
path, so the failure would only surface on a real publish.

Grouping them means dependabot offers the pair together, at versions that
satisfy each other.

No exclude-patterns needed -- `release-it` and `@release-it/conventional-changelog`
are the only dependencies either pattern can match, so the group is identical
under either reading of non-wildcard pattern matching.

Replaces #1247, which GitHub closed when its base branch was deleted on the
merge of #1246. Content is byte-identical; only the base differs.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
@dependabot @github

dependabot Bot commented on behalf of github Nov 15, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #1253.

@dependabot dependabot Bot closed this Nov 15, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/release-it-21.1.2 branch November 15, 2026 05:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants