chore(deps): bump semver and @commitlint/cli in /examples/next-js-builder-site by dependabot[bot] · Pull Request #4260 · BuilderIO/builder

dependabot · 2026-02-04T23:07:05Z

Bumps semver to 5.7.2 and updates ancestor dependencies semver and @commitlint/cli. These dependencies need to be updated together.

Updates semver from 5.7.1 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

5.7

Add minVersion method

5.6

Move boolean loose param to an options object, with backwards-compatibility protection.

Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

Add version coercion capabilities

5.4

Add intersection checking

5.3

Add minSatisfying method

5.2

Add prerelease(v) that returns prerelease components

5.1

Add Backus-Naur for ranges

Remove excessively cute inspection methods

5.0

Remove AMD/Browserified build artifacts

Fix ltr and gtr when using the * range

Fix for range * with a prerelease identifier

Commits

f8cc313 chore: release 5.7.2
2f8fd41 fix: better handling of whitespace (#585)
deb5ad5 chore: @npmcli/template-oss@4.16.0
See full diff in compare view

Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates semver from 7.3.4 to 7.7.3

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

5.7

Add minVersion method

5.6

Move boolean loose param to an options object, with backwards-compatibility protection.

Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

Add version coercion capabilities

5.4

Add intersection checking

5.3

Add minSatisfying method

5.2

Add prerelease(v) that returns prerelease components

5.1

Add Backus-Naur for ranges

Remove excessively cute inspection methods

5.0

Remove AMD/Browserified build artifacts

Fix ltr and gtr when using the * range

Fix for range * with a prerelease identifier

Commits

f8cc313 chore: release 5.7.2
2f8fd41 fix: better handling of whitespace (#585)
deb5ad5 chore: @npmcli/template-oss@4.16.0
See full diff in compare view

Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates @commitlint/cli from 11.0.0 to 20.4.1

Release notes

Sourced from @commitlint/cli's releases.

v20.4.1

20.4.1 (2026-02-02)

Reverts

revert: replace all lodash string methods with kasi #4602 by @escapedcat in conventional-changelog/commitlint#4621

Chore

test(parse): add assertion for v6 inline reference behavior by @escapedcat in conventional-changelog/commitlint#4619

Full Changelog: conventional-changelog/commitlint@v20.4.0...v20.4.1

v20.4.0

20.4.0 (2026-01-30)

Features

feat: upgrade conventional commit packages #4082 by @escapedcat in conventional-changelog/commitlint#4597

Refactor

refactor: replace lodash.uniq with simple code by @hyperz111 in conventional-changelog/commitlint#4600

refactor: replace lodash.isplainobject with is-plain-obj" by @hyperz111 in conventional-changelog/commitlint#4601

refactor(ensure): replace all lodash string methods with kasi and manual by @hyperz111 in conventional-changelog/commitlint#4602

refactor: replace lodash.merge with lodash.mergewith by @hyperz111 in conventional-changelog/commitlint#4603

refactor: remove lodash.isfunction dependency by @escapedcat in conventional-changelog/commitlint#4604

refactor: replace find-up with escalade by @hyperz111 in conventional-changelog/commitlint#4605

refactor: replace chalk with picocolors by @escapedcat in conventional-changelog/commitlint#4599

New Contributors

@hyperz111 made their first contribution in conventional-changelog/commitlint#4600

Full Changelog: conventional-changelog/commitlint@v20.3.1...v20.4.0

v20.3.1

20.3.1 (2026-01-08)

Bug Fixes

... (truncated)

Changelog

Sourced from @commitlint/cli's changelog.

20.4.1 (2026-02-02)

Note: Version bump only for package @commitlint/cli

20.4.0 (2026-01-30)

Features

upgrade conventional commit packages #4082 (#4597) (3aaf0a6)

20.3.1 (2026-01-08)

Note: Version bump only for package @commitlint/cli

20.3.0 (2026-01-01)

Note: Version bump only for package @commitlint/cli

20.2.0 (2025-12-05)

Note: Version bump only for package @commitlint/cli

20.1.0 (2025-09-30)

Note: Version bump only for package @commitlint/cli

... (truncated)

Commits

e7ae28d v20.4.1
c68de5e v20.4.0
3aaf0a6 feat: upgrade conventional commit packages #4082 (#4597)
1828d6e refactor: replace lodash.merge with lodash.mergewith (#4603)
be3a280 v20.3.1
1c5734d v20.3.0
ddad9b4 v20.2.0
a8e86d2 v20.1.0
407be6c v20.0.0
3c30200 v19.8.1
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Note

Medium Risk
Dependency-only change, but @commitlint/cli jumps major versions and now requires Node >=18, which could break commit hooks/CI in environments still on older Node versions.

Overview
Updates examples/next-js-builder-site dev tooling by bumping @commitlint/cli from 11.0.0 to 20.4.1 and refreshing package-lock.json accordingly.

The lockfile update pulls in newer transitive versions (notably semver and yargs-related packages) and drops several older transitive deps, with the new @commitlint/* stack now requiring Node >=18.

^{Written by Cursor Bugbot for commit 25e27e7. This will update automatically on new commits. Configure here.}

^{Cursor Bugbot reviewed your changes and found no issues for commit 25e27e7}

Bumps [semver](https://github.com/npm/node-semver) to 5.7.2 and updates ancestor dependencies [semver](https://github.com/npm/node-semver) and [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli). These dependencies need to be updated together. Updates `semver` from 5.7.1 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.1...v5.7.2) Updates `semver` from 7.3.4 to 7.7.3 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.1...v5.7.2) Updates `@commitlint/cli` from 11.0.0 to 20.4.1 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v20.4.1/@commitlint/cli) --- updated-dependencies: - dependency-name: semver dependency-version: 5.7.2 dependency-type: indirect - dependency-name: semver dependency-version: 7.7.3 dependency-type: indirect - dependency-name: "@commitlint/cli" dependency-version: 20.4.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2026-02-04T23:07:11Z

⚠️ No Changeset found

Latest commit: 25e27e7

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

nx-cloud · 2026-02-04T23:10:27Z

🤖 Nx Cloud AI Fix Eligible

An automatically generated fix could have helped fix failing tasks for this run, but Self-healing CI is disabled for this workspace. Visit workspace settings to enable it and get automatic fixes in future runs.

_{To disable these notifications, a workspace admin can disable them in workspace settings.}

View your CI Pipeline Execution ↗ for commit 25e27e7

Command	Status	Duration	Result
`nx test @snippet/react`	❌ Failed	3m 32s	View ↗
`nx test @e2e/nextjs-sdk-next-app`	✅ Succeeded	6m 56s	View ↗
`nx test @e2e/qwik-city`	✅ Succeeded	6m 58s	View ↗
`nx test @e2e/angular-17`	✅ Succeeded	6m 25s	View ↗
`nx test @e2e/nuxt`	✅ Succeeded	5m 24s	View ↗
`nx test @e2e/hydrogen`	✅ Succeeded	4m 57s	View ↗
`nx test @e2e/angular-17-ssr`	✅ Succeeded	5m 4s	View ↗
`nx test @e2e/react-sdk-next-14-app`	✅ Succeeded	4m 54s	View ↗
`Additional runs (37)`	✅ Succeeded	...	View ↗

☁️ Nx Cloud last updated this comment at 2026-02-04 23:24:07 UTC

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 4, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump semver and @commitlint/cli in /examples/next-js-builder-site#4260

chore(deps): bump semver and @commitlint/cli in /examples/next-js-builder-site#4260
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/examples/next-js-builder-site/multi-44094fa7cf

dependabot bot commented on behalf of github Feb 4, 2026 •

edited by cursor bot

Loading

Uh oh!

changeset-bot bot commented Feb 4, 2026

Uh oh!

nx-cloud bot commented Feb 4, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

dependabot bot commented on behalf of github Feb 4, 2026 • edited by cursor bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

5.7.2 (2023-07-10)

Bug Fixes

5.7

5.6

5.5

5.4

5.3

5.2

5.1

5.0

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

5.7.2 (2023-07-10)

Bug Fixes

5.7

5.6

5.5

5.4

5.3

5.2

5.1

5.0

v20.4.1

20.4.1 (2026-02-02)

Reverts

Chore

v20.4.0

20.4.0 (2026-01-30)

Features

Refactor

New Contributors

v20.3.1

20.3.1 (2026-01-08)

Bug Fixes

20.4.1 (2026-02-02)

20.4.0 (2026-01-30)

Features

20.3.1 (2026-01-08)

20.3.0 (2026-01-01)

20.2.0 (2025-12-05)

20.1.0 (2025-09-30)

Uh oh!

changeset-bot bot commented Feb 4, 2026

⚠️ No Changeset found

Uh oh!

nx-cloud bot commented Feb 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🤖 Nx Cloud AI Fix Eligible

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

dependabot bot commented on behalf of github Feb 4, 2026 •

edited by cursor bot

Loading

nx-cloud bot commented Feb 4, 2026 •

edited

Loading