Issue
In the newly added commitlint.config.mjs file, the Dependabot signature check uses non-ASCII hyphens (U+2011) in the string literal:
(message) => message.includes("Signed‑off‑by: dependabot[bot]")
This won't match the standard ASCII hyphen that is used in actual Dependabot commit signatures.
Solution
Replace the string check with a regular expression that matches standard ASCII hyphens:
(message) => /Signed-off-by: dependabot\[bot\]/.test(message)
References