[dependabot]

Bumps conventional-changelog-conventionalcommits from 9.3.1 to 10.1.0.

Release notes

Sourced from conventional-changelog-conventionalcommits's releases.

conventional-changelog-conventionalcommits: v10.1.0

Features

• support changelog preamble (#1489) (7d9794f)

conventional-changelog-conventionalcommits: v10.0.0

⚠ BREAKING CHANGES

• the commit type effect property replaces the hidden commit type property and the bumpStrict preset option for controlling changelog visibility and version bumps.

Fixes #1476.

• Handlebars template strings and partial files were replaced with render functions.
• packages now require Node.js 22 or newer.

Features

• replace handlebars templates with render functions (#1477) (55e6716)
• require node 22 (de5e136)
• support commit type effects (#1484) (78761ae)

Bug Fixes

• encode compare URL tags (#1483) (96bf235)
• render non-closing references separately (#1482) (adb2c69)
• sort notes without compare-func (#1487) (dc78285)

Changelog

Sourced from conventional-changelog-conventionalcommits's changelog.

10.1.0 (2026-06-27)

Features

• support changelog preamble (#1489) (7d9794f)

10.0.0 (2026-06-26)

⚠ BREAKING CHANGES

• the commit type effect property replaces the hidden commit type property and the bumpStrict preset option for controlling changelog visibility and version bumps.

Fixes #1476.

• Handlebars template strings and partial files were replaced with render functions.
• packages now require Node.js 22 or newer.

Features

• replace handlebars templates with render functions (#1477) (55e6716)
• require node 22 (de5e136)
• support commit type effects (#1484) (78761ae)

Bug Fixes

• encode compare URL tags (#1483) (96bf235)
• render non-closing references separately (#1482) (adb2c69)
• sort notes without compare-func (#1487) (dc78285)

Commits

• f72f5e2 chore(release): monorepo release (#1490)
• 7d9794f feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...
• ed9862d chore(release): monorepo release (#1474)
• dc78285 fix(conventional-changelog-angular,conventional-changelog-conventionalcommits...
• f9195d5 fix(conventional-commits-parser,template): keep footers out of breaking notes...
• 78761ae feat(conventional-changelog-conventionalcommits)!: support commit type effect...
• 96bf235 fix(template,conventional-changelog-angular,conventional-changelog-convention...
• adb2c69 fix(conventional-changelog-conventionalcommits): render non-closing reference...
• 55e6716 feat(conventional-changelog-writer,conventional-changelog-angular,conventiona...
• de5e136 feat!: require node 22
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
conventional-changelog-conventionalcommits	[>= 10.2.a, < 10.3]
conventional-changelog-conventionalcommits	[>= 10.4.a, < 10.5]
conventional-changelog-conventionalcommits	[>= 10.3.a, < 10.4]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

depsound · 1 dependency change · review the changes

• npm:conventional-changelog-conventionalcommits ^9.3.1 → ^10.1.0: engines.node >=18 → >=22; trusted publishing adopted: publisher: github; mechanism: OIDC; attestation: build provenance added; not approval of release behavior; endpoints resolved from a range at review time: "^10.1.0" reviewed at one satisfying version; a consumer may install another; declaration-level review covers direct dependencies only

Checked: published artifact reports, manifest compatibility, install/build execution surface. Not checked: runtime behaviour, intent (an obfuscated payload reads as ordinary code), whether your code reaches the change, your test coverage.

Download the artifact, then run:

'go' 'run' 'github.com/rvagg/depsound/cmd/depsound@v0.37.0' 'bulk' '--file=review-input.json'

This command builds depsound from source through the Go module proxy. The Action uses a prebuilt release binary, checked against its attestation or the caller's checksum.

Or hand this PR to an agent with the review skill.

_{depsound · retained report and evidence}

[rvagg]

@dependabot ignore this minor version

[dependabot]

OK, I won't notify you about version 10.1.x again, unless you re-open this PR.