[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@release-it/conventional-changelog	^10.0.0 → ^12.0.0

---

Release Notes

release-it/conventional-changelog (@​release-it/conventional-changelog)

v12.0.2

Compare Source

• Stage diving is never a good idea (65dda97)

v12.0.1

Compare Source

• Migrate to pnpm (1df408d)
• Update dependencies (6d5e466)
• Narrow engines.node a bit (e5d723f)
• Enable npm staged publishing (39959f4)

v12.0.0

Compare Source

• Skip prereleases without a recommended bump (resolve #​151) (3451b9d)
• Avoid shell interpolation when staging changelogs (resolve #​149) (dbaba1c)
• Use resolved tag as recommended bump boundary (resolve #​99) (d7cce4d)
• Document stable prerelease promotion (resolve #​152) (9fa21de)
• Upgrade dependencies (41b3201)

v11.0.1

Compare Source

• Restore no-preset fallback to prevent whatBump error (636c254)
• Bump tmp from 0.2.5 to 0.2.6 (#​145) (ce9a599) - thanks @​dependabot[bot]!
• Update dependencies (063b6af)
• Derive tag prefix from resolved tag for recommended bump (resolve #​80) (8947320)
• Document transform override and parseCommits resolution (resolve #​78, resolve #​137) (f3461f1)
• Run tests on Node 26 (7481298)

v11.0.0

Compare Source

• Fix repository.url (23d3d9c)
• docs: fix broken links and remove outdated override warning (#​138) (344bad3) - thanks @​aarondpn!
• fix: support release-it 20 (#​142) (0432426) - thanks @​twk3!
• Update dependencies & bump engines.node (1b746e6)

v10.0.6

Compare Source

• fix: bump conventional-changelog to ^7.2.0 (#​141) (0e2bb53) - thanks @​aarondpn!
• Update dependencies (1f25729)

v10.0.5

Compare Source

• test: add should generate changelog with remote origin urls (#​132) (7e53f8c) - thanks @​Maxel01!
• fix: pass parserOpts to both Bumper and ConventionalChangelog (#​135) (4dce48a) - thanks @​aarond-sp!

v10.0.4

Compare Source

• fix: add readRepository to resolve correct urls (#​131) (933bcc6) - thanks @​Maxel01!
• Update release-it (ac4426a)

v10.0.3

Compare Source

• Remove verbose comments (eb178bd)
• fix: remove preset options filtering (#​129) (1b9fb95) - thanks @​NateSmyth!

v10.0.2

Compare Source

• Remove node 18 from test matrix (e00dabf)
• feat: Preserve preReleaseBase config option (#​111) (678faef) - thanks @​ChAyLom!
• Bump tmp from 0.2.3 to 0.2.4 (#​120) (5ccbc29) - thanks @​dependabot[bot]!
• Fix CVE-2025-59433: Update dependencies and enable all tests (#​124) (c838c67) - thanks @​nbouvrette!
• Add Node 24 to CI workflow (8f5ac43)
• Add github release notes + comments (2d0a4b3)
• Bump engines.node (not breaking as release-it has this too) (5fa0ce8)

v10.0.1

Compare Source

• Add dummy config file in test (3e9f528)
• Support release-it v19 (a2f5059)
• Add note about conventional-changelog-conventionalcommits override (#​110) (587be05)
• docs: Show that whatBump accepts a function for recommending the new version (#​109) (bf27526)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​release-it/​conventional-changelog@​10.0.0 ⏵ 12.0.2				-1

View full report