Skip to content

chore(deps): bump @inquirer/prompts from 7.10.1 to 8.5.2 in /cli - #540

Merged
blafourcade merged 2 commits into
nextfrom
dependabot/npm_and_yarn/cli/next/inquirer/prompts-8.5.2
Jul 31, 2026
Merged

chore(deps): bump @inquirer/prompts from 7.10.1 to 8.5.2 in /cli#540
blafourcade merged 2 commits into
nextfrom
dependabot/npm_and_yarn/cli/next/inquirer/prompts-8.5.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps @inquirer/prompts from 7.10.1 to 8.5.2.

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.5.2

  • Fix security warnings in external-editor

@​inquirer/prompts@​8.5.1

  • Rolled back mute-stream dependency from v4 to v3 to undo breaking compatible engines.
  • Added tooling to prevent regression of the above in the future. This surfaced our min engines already enforced a higher limit, so adjusted the explicit limits to match the current state.

@​inquirer/prompts@​8.5.0

  • Feat: Read env variable INQUIRER_KEYBINDINGS to enable vim or emacs keybindings; making this a user preference instead of a library author preference. One caveat is doing so disable the search feature in the select prompt. Syntax: INQUIRER_KEYBINDINGS=vim,emacs.
  • Fix: Line wraps would sometime cause the cursor to be mispositioned relative to the input.
  • Chore: Bump dependencies.

@​inquirer/prompts@​8.4.3

  • Fix: Windows rendering bug
  • Fix: Preserve exact literal types in choices array (Typescript only)
  • Fix: Allow input default value to be of type undefined (Typescript only)
  • Bump dependencies

@​inquirer/prompts@​8.4.2

  • Fix: some Windows terminals would freeze and not react to keypresses.

@​inquirer/prompts@​8.4.1

  • Improve expand prompt type inferrence.

@​inquirer/prompts@​8.4.0

  • Feat: Added a loading message while validating editor prompt input.
  • Type improvement: Better type inference with checkbox, search and expand prompts.
  • Fix: editor prompt not always properly handling editor path on windows.

@​inquirer/prompts@​8.3.2

  • Fix broken 8.3.1 release process.

@​inquirer/prompts@​8.3.1

  • Bump dependencies

@​inquirer/prompts@​8.3.0

  • Fix: Keypresses happening before a prompt is rendered are now ignored.
  • Fix (checkbox): Element who're both checked and disabled are now always included in the returned array.
  • Feat (select/checkbox): Cursor will now hover disabled options of the list; but they still cannot be interacted with. This prevents the cursor jumping ahead in ways that can be confusing.
  • Feat: various new theme options to make all prompts content localizable.

Finally, see our new @inquirer/i18n package!

@​inquirer/prompts@​8.2.1

  • chore: Switch wrap-ansi with fast-wrap-ansi

@​inquirer/prompts@​8.2.0

  • feat(search): Add support for default.
  • feat(rawlist): Add support for description of choices. That information is displayed under the list when the choice is highlighted.
  • Bump dependencies

... (truncated)

Commits
  • bfd8710 chore: Publish new release
  • 55cc5f3 feat: add reusable package lint CLI
  • 3af9ed0 test(inquirer): capture prompt runner output
  • 4381857 fix(@​inquirer/input): remove stale lint suppression
  • 45df331 fix(@​inquirer/external-editor): harden editor temp files
  • adef323 chore: limit CI token permissions
  • b43359d chore: Publish new release
  • 24ecae2 chore: fix yarn.lock
  • b078d97 fix: validate package engine compatibility
  • 3a49f9f chore(deps-dev): Bump oxfmt in the formatting group (#2143)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Dependency update (dependabot) label Jul 27, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot can't parse your pnpm-lock.yaml. Because of this, Dependabot cannot update this pull request.

@dependabot
chore(deps): bump @inquirer/prompts from 7.10.1 to 8.5.2 in /cli
881dfc4 
Bumps [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) from 7.10.1 to 8.5.2.
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@7.10.1...@inquirer/prompts@8.5.2)

---
updated-dependencies:
- dependency-name: "@inquirer/prompts"
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/cli/next/inquirer/prompts-8.5.2 branch from 52840a4 to 881dfc4 Compare July 28, 2026 04:13
@blafourcade
fix(cli): defer simulated keypresses to match inquirer v8's render cycle
800e50e 
@inquirer/core 11 (bundled by @inquirer/prompts 8) defers the first
render by one setImmediate tick for any stream with a readableFlowing
property - added upstream to let real stdin's OS-buffered data flow
through readline harmlessly before listeners attach (SBoudrias/
Inquirer.js#1303). Every Readable, including the PassThrough these
tests use, has that property, so the deferral now applies to them too.

The tests wrote simulated keypresses via process.nextTick, which runs
before the deferred setImmediate that registers inquirer's keypress
listener - the write lands with nobody listening, and the prompt hangs
until the 60s timeout. Switching to setImmediate orders the write after
listener registration. Verified: 22/22 pass in this file, matches
exactly what CI's cli/Test job flagged (13 failures, all here).
@blafourcade
blafourcade requested a review from a team as a code owner July 31, 2026 04:00
blafourcade
blafourcade approved these changes Jul 31, 2026
View reviewed changes

@blafourcade blafourcade left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Root cause: inquirer v8 defers first render one setImmediate tick for any Readable input (upstream fix for SBoudrias/Inquirer.js#1303), which now also delays keypress-listener registration for test PassThrough streams. Fixed the affected test file to write simulated keys via setImmediate instead of process.nextTick so they land after listeners attach. CI green.

@blafourcade
blafourcade merged commit 8a8ffe6 into next Jul 31, 2026
14 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/cli/next/inquirer/prompts-8.5.2 branch July 31, 2026 04:02
blafourcade added a commit that referenced this pull request Jul 31, 2026
@dependabot @blafourcade
chore(deps): bump @inquirer/prompts from 7.10.1 to 8.5.2 in /cli (#540)
1b1a49a 
* chore(deps): bump @inquirer/prompts from 7.10.1 to 8.5.2 in /cli

Bumps [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) from 7.10.1 to 8.5.2.
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@7.10.1...@inquirer/prompts@8.5.2)

---
updated-dependencies:
- dependency-name: "@inquirer/prompts"
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(cli): defer simulated keypresses to match inquirer v8's render cycle

@inquirer/core 11 (bundled by @inquirer/prompts 8) defers the first
render by one setImmediate tick for any stream with a readableFlowing
property - added upstream to let real stdin's OS-buffered data flow
through readline harmlessly before listeners attach (SBoudrias/
Inquirer.js#1303). Every Readable, including the PassThrough these
tests use, has that property, so the deferral now applies to them too.

The tests wrote simulated keypresses via process.nextTick, which runs
before the deferred setImmediate that registers inquirer's keypress
listener - the write lands with nobody listening, and the prompt hangs
until the 60s timeout. Switching to setImmediate orders the write after
listener registration. Verified: 22/22 pass in this file, matches
exactly what CI's cli/Test job flagged (13 failures, all here).

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Baptiste LAFOURCADE <baptiste.lafourcade@gmail.com>
blafourcade added a commit that referenced this pull request Jul 31, 2026
@dependabot @blafourcade
chore(deps): bump @inquirer/prompts from 7.10.1 to 8.5.2 in /cli (#540)
87a39ec 
* chore(deps): bump @inquirer/prompts from 7.10.1 to 8.5.2 in /cli

Bumps [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) from 7.10.1 to 8.5.2.
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@7.10.1...@inquirer/prompts@8.5.2)

---
updated-dependencies:
- dependency-name: "@inquirer/prompts"
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(cli): defer simulated keypresses to match inquirer v8's render cycle

@inquirer/core 11 (bundled by @inquirer/prompts 8) defers the first
render by one setImmediate tick for any stream with a readableFlowing
property - added upstream to let real stdin's OS-buffered data flow
through readline harmlessly before listeners attach (SBoudrias/
Inquirer.js#1303). Every Readable, including the PassThrough these
tests use, has that property, so the deferral now applies to them too.

The tests wrote simulated keypresses via process.nextTick, which runs
before the deferred setImmediate that registers inquirer's keypress
listener - the write lands with nobody listening, and the prompt hangs
until the 60s timeout. Switching to setImmediate orders the write after
listener registration. Verified: 22/22 pass in this file, matches
exactly what CI's cli/Test job flagged (13 failures, all here).

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Baptiste LAFOURCADE <baptiste.lafourcade@gmail.com>
@aidd-bot aidd-bot Bot mentioned this pull request Jul 31, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@blafourcade blafourcade blafourcade approved these changes

Assignees

No one assigned

Labels

dependencies Dependency update (dependabot)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@blafourcade