@commitlint/cli version 16.1.0 is a minor update to the commitlint command-line interface, a tool designed to enforce commit message conventions within projects. The core functionality of linting commit messages remains consistent, focusing on improved code quality and project maintainability through standardized commit histories. Key dependencies like yargs for command-line argument parsing, lodash for utility functions, and @commitlint/lint, @commitlint/load, @commitlint/read, @commitlint/types, and @commitlint/format for the core linting process continue to be used.
The primary difference between version 16.1.0 and the previous stable version 16.0.3 lies in updated dependencies and under-the-hood improvements. Specifically, @commitlint/load has been bumped from ^16.0.0 to ^16.1.0, indicating possible enhancements or bug fixes within the configuration loading mechanism of commitlint. The dist object also reveals a slight increase in the unpacked size, suggesting minor additions or modifications to the codebase. These changes, while seemingly small, contribute to a more robust and potentially more feature-rich linting experience, assuring developers that they are working with an improved version of the tool. Both versions share the same developer dependencies such as execa and fs-extra underlining the project's commitment to maintaining a consistent development environment and test suite, ensuring compatibility and reliability for developers implementing commitlint in their workflows. The releaseDate shows that the new version was published one day after the previous one which is a hint that maybe it was addressing a very specific problem.
All the vulnerabilities related to the version 16.1.0 of the package
semver vulnerable to Regular Expression Denial of Service
Versions of the package semver before 7.5.2 on the 7.x branch, before 6.3.1 on the 6.x branch, and all other versions before 5.7.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.