conventional-changelog Conventional Changelog Vulnerabilities