build(deps-dev): bump commitizen from 4.3.1 to 4.3.2

[dependabot]

Bumps commitizen from 4.3.1 to 4.3.2.

Release notes

Sourced from commitizen's releases.

v4.3.2

4.3.2 (2026-06-12)

• chore(deps): bump semantic-release to 25 for npm trusted publishing (#1029) (6eb168c), closes #1029
• ci(release): bump actions/checkout and actions/setup-node to v4 (#1024) (f5702c4), closes #1024
• ci(release): use npm trusted publishing via OIDC (#1028) (096ed52), closes #1028
• chore(deps) Update all non-major dependencies (#1026) (4e98218), closes #1026
• chore(deps) Update dependency lodash to v4.18.1 [SECURITY] (#1010) (11be6a1), closes #1010
• fix(ci): fix pipelines and update matrices to node 18/20/22 (#1023) (48e4b8b), closes #1023
• docs: update README.md to add contributors (#985) (3c08866), closes #985

Commits

• 6eb168c chore(deps): bump semantic-release to 25 for npm trusted publishing (#1029)
• 096ed52 ci(release): use npm trusted publishing via OIDC (#1028)
• 4e98218 chore(deps) Update all non-major dependencies (#1026)
• f5702c4 ci(release): bump actions/checkout and actions/setup-node to v4 (#1024)
• 11be6a1 chore(deps) Update dependency lodash to v4.18.1 [SECURITY] (#1010)
• 48e4b8b fix(ci): fix pipelines and update matrices to node 18/20/22 (#1023)
• 3c08866 docs: update README.md to add contributors (#985)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for commitizen since your current version.

[github-actions]

Agent QA review — interactive + visual diff (advisory, non-blocking)

Last updated Aug 26, 2026, 11:04 PM PDT · new commit pushed · commit 79f6049 · 2 files changed.

0 open · 0 resolved · visual diff 0.00% · verdict PASS

Open findings

• Smoke test passed ✅

What the agent checked

Tested PR #595 (devDependency bump: commitizen 4.3.1 → 4.3.2, plus lockfile changes only — no application/production source files touched) against the live CaaS collection at https://business.adobe.com/resources/main.html.

Pixel diff review: The provided diff.png showed no magenta/colored regions (0.00% pixel difference), consistent with the code change being limited to package-lock.json/package.json dev tooling with zero impact on rendered output.

Manual QA performed on the live page (PR build injected):

• Page loads cleanly, header nav, breadcrumb, "Explore all Adobe resources" heading, filters panel, and card grid all render correctly.
• Console errors: none detected after initial load.
• Filters panel ("Refine Your Results"): Products/Content type/Industry accordions expand and collapse correctly. Selecting the "Acrobat" checkbox correctly filtered results from 3844 → 186, added an "Acrobat x" removable chip, and showed a "1" badge count on the Products section — all working as expected. Clearing filters via the "Clear" button worked without visual glitches.
• Cards render with images, titles, descriptions, and CTA buttons ("Read now"/"Watch now") correctly, no truncation/overlap observed.
• Chat widget ("What do you need help solving today?") overlay renders at bottom without obstructing card content abnormally.
• axe-core audit: 2 pre-existing violations found, both unrelated to this PR:
  1. minor: aria-allowed-role on .feds-navItem--section (nav header markup, global header component, not part of CaaS/resources changes).
  2. moderate: heading-order — a card title has aria-level="6" causing a heading order skip, in .consonant-Card-title. This is pre-existing CaaS card markup, not something introduced by this dependency-only PR.

Conclusion: This PR only bumps a devDependency (commitizen, used for commit message tooling) and its lockfile — it contains no changes to any runtime/production code, and the 0% pixel diff confirms no visual impact. All interactive elements (filters, chips, clear, cards) function normally on the live page. The two axe violations found are pre-existing issues unrelated to and not introduced by this PR's diff.

No regressions found. Verdict: PASS.

PR / stable / diff screenshots + console + axe artifacts in the workflow run.

Review history (2 runs)

• 79f6049 · Aug 26, 2026, 11:04 PM PDT · new commit pushed · passing, no regressions — build(deps-dev): bump commitizen from 4.3.1 to 4.3.2
• bf0a630 · Aug 24, 2026, 1:04 PM PDT · manual re-run · passing, no regressions — build(deps-dev): bump commitizen from 4.3.1 to 4.3.2

[github-actions]

AI Code Review

Last updated Aug 26, 2026 11:01 PM PDT · new commit pushed · commit 79f6049 · 2 files changed in PR.

0 open · 0 resolved

Open findings

No open findings. ✅

Review history (2 runs)

• 79f6049 · Aug 26, 2026 11:01 PM PDT · new commit pushed · no changes (0 open) — build(deps-dev): bump commitizen from 4.3.1 to 4.3.2
• bf0a630 · Aug 24, 2026 8:04 PM PDT · PR opened · no changes (0 open) — build(deps-dev): bump commitizen from 4.3.1 to 4.3.2

[sanrai]

@dependabot rebase

[github-actions]

🧪 Feature QA review — injected feature test (advisory, non-blocking)

Last updated Aug 26, 2026, 10:53 PM PT · commit 5d8178f · pull_request.

Overall: SAFE (no bundle change)

No injectable feature to exercise — and the deterministic build-output-diff proves the shipped bundle is byte-identical to base after normalization, so this change is safe for what ships.

This PR only bumps a dev-dependency (commitizen) in package.json/package-lock.json, a build/tooling change with no config-driven or card-rendering behavior to exercise.

Screenshot in the workflow run.

Review history (1 run)

• Aug 26, 2026, 10:53 PM PT · SAFE (no bundle change) · 5d8178f · pull_request