What would be a good commit message for updating package versions using Conventional Commits?

If you use build scope consider this option:

build(deps): bump React version to "17.0.2"

Conventional commits are based on the Angular conventional commits. Angular’s CONTRIBUTING.md states:

build: Changes that affect the build system or external dependencies (example scopes: gulp, broccoli, npm)