Update dependency release-it to v21 by renovate[bot] · Pull Request #1322 · lerna/lerna-changelog

renovate · 2026-07-25T21:03:32Z

This PR contains the following updates:

Package	Change	Age	Confidence
release-it	`17.4.1` → `21.1.0`

Release Notes

release-it/release-it (release-it)

`v21.1.0`

Compare Source

chore(deps): replace semver with verkit (#1329) (033dca2) - thanks @gameroman!
fix(schema): remove fragment from schema $id values (#1332) (6e40222) - thanks @DanMat!
Fix version increments and coercion after verkit migration (eab4b8c)
Log in to npm automatically before interactive publishing (resolve #1333) (76e409f)
Support proxy environment variables in GitLab (resolve #1131) (#1331) (afb5565) - thanks @mrpmohiburrahman!
Update dependencies (9ca5d32)
Narrow engines.node (98dcf19)
Fix version coercion for verkit 0.4 (7ee54c2)

`v21.0.3`

Compare Source

Fix npm staging approval URL and prompt (9f64e09)

`v21.0.2`

Compare Source

Prevent duplicate comments on resolved issues and PRs (#1324) (7ca61cc) - thanks @krisu-pl!
Migrate to pnpm + update deps (6c211f0)

`v21.0.1`

Compare Source

Fix regression and support --no-hooks to skip all hooks (a8888b4)

`v21.0.0`

Compare Source

fix(ci): do not run integration on forks (#1315) (1e90d9f) - thanks @trueberryless!
Pin GitHub Actions to immutable commits (#1316) (38355d8)
Fix npm publish workspace config resolution (#1312) (3bf251f) - thanks @cyphercodes!
Add gitlab.repoId option (#1224) (e4e9d0e) - thanks @microHoffman!
Exit successfully when no release version is available (56c70c3)
Support numeric GitLab repository IDs (0332c4a)
Parse CLI arguments strictly (resolve #1196) (caf77c9)
fix: shell caching and working tree detection (#1317) (8d1f752) - thanks @Mopsgamer!
Remove dependabot workflow (e7e04ef)
Fix configured GitHub proxy routing (1ed9cdd)
Upgrade dependencies and require Node 22 (c055e7f)
Fix npm custom registry argument handling (resolve #1318) (98c45c4)
Pin GitLab releases to the current commit (resolve #1216) (70ab576)
Refresh GitHub Actions and package preview runtime (5c55139)
Document v21 runtime requirements (daab846)
Simplify git-cliff recipe (resolve #1195) (52c89a7)
Make GitLab CA tests platform-independent (ba4326f)
Raise Node 22 requirement to 22.21 (df94838)
Verify GitLab server certificates by default (c381a2d)
Update changelog for v21 (2637e8a)

`v20.2.1`

Compare Source

Document the draft flow for GitHub immutable releases (284e63c)
Resolve dependency security alerts (3156203)

`v20.2.0`

Compare Source

Print staged-packages approval URL after stage publish (244d811)
Capture the stage id for the approval message (2476065)

`v20.1.0`

Compare Source

feat: add --quiet flag to hide release previews (#1274) (ecefe44) - thanks @Yeom-JinHo!
fix: ensure release body is an empty string instead of null (#1303) (5cc5ebd) - thanks @driiftkiing!
Add 'Accept-Encoding' header to GitLab API requests (#1301) (14a478e) - thanks @KlausDerKleber!
Support npm staged publishing (npm.stage) (aa20f56)
Run tests on Node 26 (29f079b)
Use draft flow for immutable releases with assets (resolve #1295) (c63b4e4)
Publish interactively under --only-version so passkey 2FA works (resolve #1234) (4ebb66e)
Format docs/npm.md (a2a262c)
Dogfoodin' (0cb51a9)

`v20.0.1`

Compare Source

fix: allow false as npm config value in types (#1289) (f783e82) - thanks @ahippler!
Bump actions/checkout from 5 to 6 (#1262) (19921fc) - thanks @dependabot[bot]!
fix: Replace @nodeutils/defaults-deep with defu for deep-default merging (#1297) (8616a21) - thanks @rajnsunny!
Update dependencies (bee3138)

`v20.0.0`

Compare Source

fix: remove leading slashes from owner (#1288) (5585b72) - thanks @driiftkiing!
Fix write: false guard in npm.bump (resolve #1267) (a2d1b99)
Format (f427a85)

`v19.2.4`

Compare Source

chore: update dependencies to resolve security vulnerabilities (#1273) (b45dd1a) - thanks @Yeom-JinHo!
Update a few dev deps (cd8acdc)

`v19.2.3`

Compare Source

Reuse generated changelog (316dbfa)
Remove obsolete eslint compat packages/config (f6cc8f3)
Update remark-preset-webpro and fix broken links (6e6dd4b)

`v19.2.2`

Compare Source

Improve getChangelog method (7a56364)

`v19.2.1`

Compare Source

Improve commit prompt (b7aca7c)
Remedy potential edge case in template helper (5c0a6ee)

`v19.2.0`

Compare Source

Add option to exit gracefully (e1f825d)
Update dependencies (424c9f6)
Auto-format docs (06f41bb)
fix: add shell mode for npm commands on windows (#1266) (382e346) - thanks @julienbenac!
Feat: Add publishPackageManager config option in NPM plugin to allow using different package manager for publishing (e.g. Bun) (#1169) (0dafc0b) - thanks @chrispader!
Only use --workspaces=false with npm (12bb89c)
Fix up docs/types a bit (05a5986)
Format (c9d6ebf)

`v19.1.0`

Compare Source

Ignore .npmrc (8ccd060)
Update lockfile (c4cd2ba)
Support interactive shell in non-CI mode for 2FA flow (resolve #1263) (a10b20d)
Add --workspaces=false to get rid of the null/matches error (14a4907)
Remove npm config env var warnings (b8c1247)
doc(readme): add release-it-beautiful-changelog plugin to list of plugins (#1261) (1b68c21)
Add 403 to consider resource alive (7969849)

`v19.0.6`

Compare Source

Update list of projects using release-it (92b49d3)
Bump github/codeql-action from 2 to 4 (#1253) (21309d3) - thanks @dependabot[bot]!
Bump actions/setup-node from 5 to 6 (#1255) (3fbaab1) - thanks @dependabot[bot]!
Test in node 24 (7a12b12)
Upgrade c12 (resolve #1254) (1f48d03)

`v19.0.5`

Compare Source

Add link to release-it-gitea plugin (bf6f1fb)
Bump actions/checkout from 4 to 5 (#1243) (e42e7dc) - thanks @dependabot[bot]!
Add OIDC publishing docs (#1245) (9933c0d) - thanks @mceachen!
Bump actions/setup-node from 4 to 5 (#1247) (7d9b77f) - thanks @dependabot[bot]!
Auto-format (96181f3)
Update dependencies (0b907d1)
Remove redundant knip entry (ca2f7b5)

`v19.0.4`

Compare Source

Replace lodash.get with custom get() function and add tests (#1231) (879a2ef) - thanks @AlejandroRM-DEV!
fix: set octokit log to {} instead of null (#1237) (6fc696f) - thanks @efstathiosntonas!
Update dependencies (2195b79)

`v19.0.3`

Compare Source

chore: use node's spawn instead of tinyexec dep (#1227) (fccdf67) - thanks @efstathiosntonas!
Minor housekeeping/formatting (1604dc7)
Add default timeout (mainly for tests) (96d8889)
docs(gitlab): update token scope requirements and default secure setting (#1229) (9c7d2b3) - thanks @AlejandroRM-DEV!
Update dependencies (b792c45)

`v19.0.2`

Compare Source

Bump engines.node from 20.9 → 20.12 (resolves #1219) (a012da6)
Update dependencies (ebfc5a2)

`v19.0.1`

Compare Source

Don't throw if no config file is found (2cb4a7e)

`v19.0.0`

Compare Source

Update dependencies (cbe2fa6)
v18 → v19 (6f8150a)
Housekeeping (41dfaae)

`v18.1.2`

Compare Source

Update dependencies (resolves #1197) (260116b)

`v18.1.1`

Compare Source

Exclude the release commit from the release notes (1cca380)

`v18.1.0`

Compare Source

Remove tea.yaml (0b9a212)
Add releaseNotes object for Octokit REST API based changelog (29fb513)
Format docs (69d813b)
Use new releaseNotes feature self (1ec1280)
Release 18.1.0 (2c5f298)

`v18.0.0`

Compare Source

429 = alive (93fc47b)
Update engines.node (closes #1182) (162cfc9)
Update readme + changelog (4897f1b)
Update dependencies (3c2b1f2)
Merge branch 'v18' (9c480d8)

`v17.11.0`

Compare Source

Update dependencies (182e992)
GitLab Generic Package Repository for assets (#1189) (54399c9)
fix(gitlab): don't set Content-Type header when uploading release assets (#1183) (04a36d2)
Fixed GitBase.getLatestVersion to computed formatted tagTemplate before using it for latestTag computation (#1170) (09d7d1b)
Add git-cliff example (#1176) (b161114)
Move configuration options to existing doc pages + table format, shorten (28213bf)
Add docs for configuration options (#1155) (667cd6a)
Improve docs on Tag Match (#1165) (716b44f)

`v17.10.0`

Compare Source

Add error handling for gitlab requests + release url (312fd8b)
Add proper Content-Type header to fetch requests (#1166) (04bd34c)

`v17.9.0`

Compare Source

Fix up tests re. branch/ref name (70398b4)
Update dependencies (b4be09d)
feat: create tag via Gitlab release (#1115) (#1161) (2263772)
Update projects list (e1a5c5d)

`v17.8.2`

Compare Source

Revert "Fix up other tests" (e19bcd8)
discussion_category_name = undefined (9225077)

`v17.8.1`

Compare Source

Fix up other tests (d8f903e)
Fix up discussion_category_name (5716681)

`v17.8.0`

Compare Source

`v17.7.0`

Compare Source

Lint/formatting fixes (79530b9)
Fix uploaded assets URL for Gitlab version >= 17.2 (#1153) (1a6325b)
feat(github): expose github make_latest flag (#1150) (eeda65b)
fix(github-comments): make search query respect 256 character limit (encoded) (#1148) (43a5e71)
fix: replace obsolete is-ci library by ci-info library (closes #1145) (#1146) (19c232d)
Remove node-fetch and got from dependencies (#1133) (696f082)
Fix schema for git.requireBranch (closes #1138) (8b57290)

`v17.6.0`

Compare Source

Update dependencies (517ac8c)
Replace eslint-plugin-import with eslint-plugin-import-x (5828326)
feat: add secure flag to gitlab config (#1129) (7a3ce98)

`v17.5.0`

Compare Source

Add flag --preReleaseBase=1 to use prelease base 1 (resolves #1128) (6570068)

`v17.4.2`

Compare Source

More consistent usage of err (4be5b10)
Add debug output to plugin loader (closes #1044) (138277a)
fix: vulnerable packages (#1123) (bd41d60)
fix(types): requireBranch is either a string, false, or undefined (#1124) (c73f866)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

cursor · 2026-07-25T21:06:08Z

    "jest-runner-eslint": "2.2.0",
    "prettier": "2.8.8",
-    "release-it": "17.4.1",
+    "release-it": "21.0.0",


Release-it twenty-one needs Node 22.21

High Severity

Updating release-it to 21.0.0 raises its Node.js requirement to ^22.21.0 or >=24.0.0. This conflicts with our engines.node declaration and can cause pnpm release to fail for maintainers on Node 18, 20, or earlier 22 versions, as CI doesn't validate the release script.

^{Reviewed by Cursor Bugbot for commit de1e887. Configure here.}

cursor

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

There are 2 total unresolved issues (including 1 from previous review).

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want reviews to match your repository better? Bugbot Learning can learn team-specific rules from PR activity. A team admin can enable Learning in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit a19a0e5. Configure here.}

cursor · 2026-08-14T17:50:13Z

    "jest-runner-eslint": "2.2.0",
    "prettier": "2.8.8",
-    "release-it": "17.4.1",
+    "release-it": "21.0.2",


Changelog plugin rejects release-it 21

High Severity

release-it-lerna-changelog@5.0.0 still peers release-it ^14 || ^15 and calls validate-peer-dependencies on load. Pairing it with release-it@21.0.2 makes pnpm release throw before changelog or tagging, even on a supported Node version.

Additional Locations (1)

pnpm-lock.yaml#L4349-L4355

^{Reviewed by Cursor Bugbot for commit a19a0e5. Configure here.}

cursor Bot reviewed Jul 25, 2026

View reviewed changes

renovate Bot force-pushed the renovate/release-it-21.x branch 2 times, most recently from 51ee848 to 0b5c718 Compare July 31, 2026 16:36

renovate Bot force-pushed the renovate/release-it-21.x branch 2 times, most recently from fdb4b7c to a19a0e5 Compare August 14, 2026 17:46

cursor Bot reviewed Aug 14, 2026

View reviewed changes

renovate Bot force-pushed the renovate/release-it-21.x branch from a19a0e5 to 344fe8d Compare August 26, 2026 20:57

renovate Bot force-pushed the renovate/release-it-21.x branch 4 times, most recently from 954da10 to 7b75c18 Compare September 7, 2026 21:44

renovate Bot force-pushed the renovate/release-it-21.x branch 2 times, most recently from 32d0182 to 17a1e04 Compare September 18, 2026 20:48

renovate Bot force-pushed the renovate/release-it-21.x branch 2 times, most recently from d856b49 to 2a90161 Compare September 30, 2026 23:46

Update dependency release-it to v21

f8c92f8

renovate Bot force-pushed the renovate/release-it-21.x branch from 2a90161 to f8c92f8 Compare October 5, 2026 20:01

Navigation Menu

Repository navigation

Update dependency release-it to v21 - #1322

Update dependency release-it to v21#1322
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/release-it-21.x

renovate Bot commented Jul 25, 2026 •

edited

Loading

Uh oh!

cursor Bot Jul 25, 2026

Uh oh!

cursor Bot left a comment

Uh oh!

cursor Bot Aug 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Jul 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Configuration

Uh oh!

cursor Bot Jul 25, 2026

Choose a reason for hiding this comment

Release-it twenty-one needs Node 22.21

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot Aug 14, 2026

Choose a reason for hiding this comment

Changelog plugin rejects release-it 21

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 25, 2026 •

edited

Loading