@commitlint/cli helps developers enforce commit message conventions for cleaner project histories. Version 17.2.0 introduces several updates compared to the previous stable version, 17.1.2. Primarily, core dependencies have been bumped. @commitlint/lint, responsible for the actual linting process, jumps from version 17.1.0 to 17.2.0, likely including new rules, bug fixes, or performance enhancements in the linting logic. Similarly, @commitlint/load, which handles loading configuration files, moves from 17.1.2 to 17.2.0 suggesting improvements in configuration handling or supported configuration formats. The @commitlint/read package moves from 17.1.0 to 17.2.0, implying changes or fixes on parsing the commit messages.
Moreover, the testing and utility devDependencies see upgrades: @commitlint/test and @commitlint/utils both move from 17.0.0 to 17.2.0. No new dependencies are added. Developers upgrading should particularly review the changelogs for @commitlint/lint, @commitlint/load, @commitlint/read, @commitlint/test and @commitlint/utils for specific details on new features or breaking changes. These upgrades can enhance the accuracy and flexibility of commit message linting, and improve the developer experience. Developers can expect more stable and performant testing and utility functionalities also. @commitlint/types and @commitlint/format didn't receive updates between the versions. The package size also increased slightly.
The are not vulnerabilities for the version 17.2.0 of the package @commitlint/cli