From 3b5e78286a42ad4807ce573ca1ccf0d0a92fdbc7 Mon Sep 17 00:00:00 2001
From: lelia <lelia@socket.dev>
Date: Fri, 20 Mar 2026 15:07:10 -0400
Subject: [PATCH 1/3] Add commit-message prefix config to conform with new
 convention

Signed-off-by: lelia <lelia@socket.dev>
---
 .github/dependabot.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 7cc27a2..18802c3 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -12,6 +12,9 @@ updates:
     labels:
       - "dependencies"
       - "docker"
+    commit-message:
+      prefix: "chore"
+      include: "scope"   # → chore(deps): bump trivy from 0.69.2 to 0.69.3
 
   # app_tests Dockerfile — same as above, plus golang and securego/gosec.
   - package-ecosystem: "docker"
@@ -21,6 +24,9 @@ updates:
     labels:
       - "dependencies"
       - "docker"
+    commit-message:
+      prefix: "chore"
+      include: "scope"
 
   # GitHub Actions — tracks all uses: ... action versions.
   - package-ecosystem: "github-actions"
@@ -30,3 +36,6 @@ updates:
     labels:
       - "dependencies"
       - "github-actions"
+    commit-message:
+      prefix: "ci"
+      include: "scope"   # → ci(deps): bump actions/checkout from v3 to v4

From a0eede9ee4c6ea3eb211eb3c382eae1fa40a9032 Mon Sep 17 00:00:00 2001
From: lelia <lelia@socket.dev>
Date: Fri, 20 Mar 2026 15:12:59 -0400
Subject: [PATCH 2/3] Update PR template with Conventional Commits guidance for
 titles

Signed-off-by: lelia <lelia@socket.dev>
---
 .github/PULL_REQUEST_TEMPLATE.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md
index 2328a24..3d9e512 100644
--- a/.github/PULL_REQUEST_TEMPLATE.md
+++ b/.github/PULL_REQUEST_TEMPLATE.md
@@ -1,3 +1,8 @@
+<!-- PR TITLE: use Conventional Commits format — the commit-lint CI check enforces this.
+     type(scope): Description    →    feat(docker): Add versioned Node stage
+     Valid types: feat · fix · docs · chore · ci · refactor · test · perf · revert
+     Breaking change: add ! after type  →  feat!: Switch to pre-built images -->
+
 ## Summary
 
 <!-- What does this PR do? Why? -->

From 1e4223cbdf9f6594c116f17392b6d4b2816c215b Mon Sep 17 00:00:00 2001
From: lelia <lelia@socket.dev>
Date: Fri, 20 Mar 2026 15:28:42 -0400
Subject: [PATCH 3/3] fix(ci): support breaking change indicator (!) in
 commit-lint pattern

Signed-off-by: lelia <lelia@socket.dev>
---
 .github/workflows/commit-lint.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/commit-lint.yml b/.github/workflows/commit-lint.yml
index 3b3eba7..4c8a906 100644
--- a/.github/workflows/commit-lint.yml
+++ b/.github/workflows/commit-lint.yml
@@ -30,7 +30,7 @@ jobs:
           PR_TITLE: ${{ github.event.pull_request.title }}
         run: |
           VALID_TYPES="feat|fix|docs|chore|ci|refactor|test|perf|revert"
-          PATTERN="^(${VALID_TYPES})(\(.+\))?: .+"
+          PATTERN="^(${VALID_TYPES})(\(.+\))?!?: .+"
 
           echo "PR title: $PR_TITLE"