Dependabot commit messages enforce the max-header-length rule from commitlint and will wrap commit messages to keep them below 72 characters. Unfortunately when merging the pr's from dependabot the pr number gets added to the commit messages. If a the header-length of a commit message was exactly 72 characters long it will now exceed the limit.
See dependabot/feedback#165 (comment)