[dependabot]

Bumps the production-dependencies group with 4 updates in the / directory: conventional-changelog-conventionalcommits, conventional-commits-parser, minimatch and semver.

Updates conventional-changelog-conventionalcommits from 9.3.1 to 10.4.1

Release notes

Sourced from conventional-changelog-conventionalcommits's releases.

conventional-changelog-conventionalcommits: v10.4.1

Bug Fixes

• declare DEFAULT_COMMIT_TYPES and format function exports (#1552) (4ba1e91)

conventional-changelog-conventionalcommits: v10.4.0

Features

• fail loudly when a preset is rendered by an old writer (#1539) (341e3f0), closes #1495

conventional-changelog-conventionalcommits: v10.3.0

Features

• format references in breaking change notes (#1529) (a8ef1ed), closes #631
• group notes by their keyword (#1533) (7be33d4), closes #815

Bug Fixes

• use current host url paths (#1534) (612d368), closes #986

conventional-changelog-conventionalcommits: v10.2.1

Bug Fixes

• point package homepages and docs to documentation website (04796e2)

conventional-changelog-conventionalcommits: v10.2.0

Features

• support changelog preamble partial (#1491) (e93dbe4)

conventional-changelog-conventionalcommits: v10.1.0

Features

• support changelog preamble (#1489) (7d9794f)

conventional-changelog-conventionalcommits: v10.0.0

⚠ BREAKING CHANGES

• the commit type effect property replaces the hidden commit type property and the bumpStrict preset option for controlling changelog visibility and version bumps.

Fixes #1476.

• Handlebars template strings and partial files were replaced with render functions.
• packages now require Node.js 22 or newer.

Features

• replace handlebars templates with render functions (#1477) (55e6716)
• require node 22 (de5e136)
• support commit type effects (#1484) (78761ae)

... (truncated)

Changelog

Sourced from conventional-changelog-conventionalcommits's changelog.

10.4.1 (2026-10-05)

Bug Fixes

• declare DEFAULT_COMMIT_TYPES and format function exports (#1552) (4ba1e91)

10.4.0 (2026-08-18)

Features

• fail loudly when a preset is rendered by an old writer (#1539) (341e3f0), closes #1495

10.3.0 (2026-08-10)

Features

• format references in breaking change notes (#1529) (a8ef1ed), closes #631
• group notes by their keyword (#1533) (7be33d4), closes #815

Bug Fixes

• use current host url paths (#1534) (612d368), closes #986

10.2.1 (2026-07-04)

Bug Fixes

• point package homepages and docs to documentation website (04796e2)

10.2.0 (2026-06-27)

Features

• support changelog preamble partial (#1491) (e93dbe4)

10.1.0 (2026-06-27)

Features

• support changelog preamble (#1489) (7d9794f)

10.0.0 (2026-06-26)

⚠ BREAKING CHANGES

• the commit type effect property replaces the hidden commit type property and the bumpStrict preset option for controlling changelog visibility and version bumps.

Fixes #1476.

• Handlebars template strings and partial files were replaced with render functions.
• packages now require Node.js 22 or newer.

... (truncated)

Commits

• d99dfae chore(release): monorepo release (#1556)
• a06cee8 fix(conventional-commits-parser): parse reference actions of footers followed...
• 4ba1e91 fix(conventional-changelog-conventionalcommits): declare DEFAULT_COMMIT_TYPES...
• 340ad83 chore(release): monorepo release (#1540)
• 341e3f0 feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...
• cbd52fb chore(release): monorepo release (#1530)
• 612d368 fix(conventional-changelog,conventional-changelog-writer,conventional-changel...
• 7be33d4 feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...
• a8ef1ed feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...
• 18332e8 test: remove duplicate repository fields from fixtures (#1527)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for conventional-changelog-conventionalcommits since your current version.

Updates conventional-commits-parser from 7.1.2 to 7.1.4

Release notes

Sourced from conventional-commits-parser's releases.

conventional-commits-parser: v7.1.4

Bug Fixes

• avoid mid-word and non-numeric issue refs (#1571) (dfa8b2d), closes #1570
• parse references outside of reference action sentences (#1573) (f952155), closes #1564
• scan lines for references in linear time (#1574) (62769a4)

conventional-commits-parser: v7.1.3

Bug Fixes

• match reference actions as whole words (#1557) (657c5dd)
• parse reference actions of footers followed by a colon (#1558) (a06cee8)

Changelog

Sourced from conventional-commits-parser's changelog.

7.1.4 (2026-11-01)

Bug Fixes

• avoid mid-word and non-numeric issue refs (#1571) (dfa8b2d), closes #1570
• parse references outside of reference action sentences (#1573) (f952155), closes #1564
• scan lines for references in linear time (#1574) (62769a4)

7.1.3 (2026-10-05)

Bug Fixes

• match reference actions as whole words (#1557) (657c5dd)
• parse reference actions of footers followed by a colon (#1558) (a06cee8)

Commits

• 0cdedf8 chore(release): monorepo release (#1572)
• 62769a4 fix(conventional-commits-parser): scan lines for references in linear time (#...
• dfa8b2d fix(conventional-commits-parser): avoid mid-word and non-numeric issue refs (...
• f952155 fix(conventional-commits-parser): parse references outside of reference actio...
• e2c4c3f ci: run editorconfig-checker (#1568)
• d99dfae chore(release): monorepo release (#1556)
• a06cee8 fix(conventional-commits-parser): parse reference actions of footers followed...
• 657c5dd fix(conventional-commits-parser): match reference actions as whole words (#1557)
• 4c006f0 build: develop on Node.js 26 and pnpm 12 (#1553)
• c5085d7 chore(deps): update trigen and oxlint dependencies (#1522)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for conventional-commits-parser since your current version.

Updates minimatch from 10.2.6 to 11.0.5

Changelog

Sourced from minimatch's changelog.

change log

11.0

• Match each path portion with Matcher from @isaacs/nonrecursive-glob-match, in place of a RegExp. Items in Minimatch.set are now strings, Matcher objects, or GLOBSTAR.
• Remove makeRe(), Minimatch#regexp, and the MMRegExp type.
• Remove the AST class.
• Remove the maxExtglobRecursion option.
• An empty path portion, such as the last one in a/b/, only matches an empty pattern portion. So a/b/ no longer matches a/b/?(x) or a/b/*(x), the same as a/b/*.
• Add the normalize option, to normalize unicode in the pattern and in each portion of the tested path.
• Remove the debug option and the debug() method.
• Remove the matchOne(), slashSplit(), and levelTwoFileOptimize() methods. They are internal now.
• Fix patterns with more than one ** and sections of different lengths between them, such as **/a/b/c/**/d/**, which failed to match some paths since 10.2.3.
• Fix partial matching of patterns with **, which since 10.2.3 matched some paths under a dot portion that ** can not walk, and did not match some paths that end in the pattern's last portion.
• partial matching of patterns with many ** no longer takes exponential time.
• On Windows, a .. no longer removes the drive letter, or the host and share of a UNC path, at the start of a pattern or (at optimization level 2) a path. So C:/a/../../x no longer matches x or /x.
• On Windows, compare the host and share of UNC paths like //host/share/... case-insensitively, the same as drive letters.
• On Windows, long UNC paths like //?/UNC/host/share/... match //host/share/... and vice versa, the same as //?/c:/... and c:/....
• At optimization level 2, throw a RangeError if splitting **/.. portions would make more than braceExpandMax patterns, or add more than 1,000,000 path portions. Before, a short pattern could take minutes to compile.
• At optimization level 2, dedupe patterns without comparing each pair, so that a large set is deduped in about linear time. Fix {**/x,x/y}, which was deduped to **/x, so x/y did not match.
• Match a numeric brace range of 100 or more values, such as {0..999}, as one pattern portion, in place of one pattern for each value. For a glob walk, this is one directory read, in place of a stat for each value. hasMagic() is true for these

... (truncated)

Commits

• ea0a4a6 11.0.5
• e83fdf3 match large numeric brace ranges without expanding them
• 85d681c fixup! ci: update github actions to latest major versions
• a675e79 ci: update github actions to latest major versions
• 70f442d dedupe level 2 patterns without a pairwise compare
• b2d7c28 ci: increase timeout on test
• 2d5578b throw when **/.. pattern expansion goes above the limit
• 9c6ebb1 fix: reject incomplete glob split expansions
• 73f0e1b fix: bound total cells added by the glob split pass
• f24eba9 11.0.4
• Additional commits viewable in compare view

Updates semver from 7.8.5 to 7.8.6

Release notes

Sourced from semver's releases.

v7.8.6

7.8.6 (2026-11-02)

Bug Fixes

• 69b305d #918 improve range parsing performance (#918) (@​reggi, @​Copilot)

Chores

• 7257c14 #917 cover comparator normalization (#917) (@​reggi, @​Copilot)

Changelog

Sourced from semver's changelog.

7.8.6 (2026-11-02)

Bug Fixes

• 69b305d #918 improve range parsing performance (#918) (@​reggi, @​Copilot)

Chores

• 7257c14 #917 cover comparator normalization (#917) (@​reggi, @​Copilot)

Commits

• b37b033 chore: release 7.8.6 (#940)
• 69b305d fix: improve range parsing performance (#918)
• 7257c14 chore: cover comparator normalization (#917)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions