Skip to content

chore(deps): bump inquirer from 14.0.2 to 14.2.1 - #46

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/inquirer-14.2.1
Open

chore(deps): bump inquirer from 14.0.2 to 14.2.1#46
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/inquirer-14.2.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps inquirer from 14.0.2 to 14.2.1.

Release notes

Sourced from inquirer's releases.

inquirer@14.2.1

The umbrella package, bundling @inquirer/prompts and @inquirer/core.

What's new

  • Published manifests now pin @inquirer/type to an exact version. Since these type definitions leak into consumers' tsc runs, a semver range on the types-only dependency could break downstream TypeScript builds without any change to Inquirer.js itself (#2247, fixes #2244).

Included

  • @inquirer/core@^12.0.2
  • @inquirer/prompts@^8.7.1
  • @inquirer/type@4.1.1 (pinned exactly)
  • @inquirer/ansi@^2.0.8

inquirer@14.2.0

The umbrella package, bundling @inquirer/prompts and @inquirer/core.

What's new

  • Updated to @inquirer/prompts@^8.7.0 and @inquirer/core@^12.0.1.
  • Includes the new toggleMask option for password (ctrl+t to reveal), localized yes/no parsing for confirm, and prettified prompt/theme types for better IDE display.

Included

  • @inquirer/core@^12.0.1
  • @inquirer/prompts@^8.7.0
  • @inquirer/type@^4.1.0
  • @inquirer/ansi@^2.0.7

inquirer@14.1.0

The umbrella package, bundling @inquirer/prompts and @inquirer/core.

What's new

  • Updated to @inquirer/prompts@^8.6.0 and @inquirer/core@^12.0.0.
  • Includes the new initialValue option for search, floating-point step fixes for number, and explicit-undefined default handling in number/confirm/editor.

⚠️ Note on @inquirer/core@12

inquirer@14.1.0 depends on @inquirer/core@^12.0.0, which changed the useState setter to accept a reducer function (currentValue) => nextValue. This is a type-level change for consumers of the core hook API (relevant if you build custom prompts with @inquirer/core). The built-in prompts are unaffected.

Included

  • @inquirer/core@^12.0.0
  • @inquirer/prompts@^8.6.0
  • @inquirer/type@^4.0.7
  • @inquirer/ansi@^2.0.7
Commits
  • 5748bd9 chore: Publish new release
  • 269ae73 fix: pin @​inquirer/type exactly in published manifests
  • 927d6dd fix(@​inquirer/testing): keep keypress simulation working under TERM=dumb
  • 2d813b1 chore(deps): Bump @​humanfs/node from 0.16.6 to 0.16.8 (#2245)
  • 7affbc9 chore(deps-dev): Bump turbo from 2.10.9 to 2.10.11 in the build group (#2243)
  • 56db989 chore(deps-dev): Bump oxfmt in the formatting group (#2242)
  • 8e6bc3c chore(deps-dev): Bump the linting group with 2 updates (#2241)
  • 427b7a1 chore(deps-dev): Bump the testing group with 3 updates (#2240)
  • 51ac389 chore: Publish new release
  • 0f1718e feat(@​inquirer/password): add ctrl+t toggle to reveal password
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for inquirer since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Updates inquirer from 14.0.2 to 14.2.1, adding new prompt options and making downstream type builds more stable.

Notes

  • Password prompts now support toggleMask (ctrl+t to reveal), and search prompts support initialValue.
  • @inquirer/type is now pinned exactly so downstream TypeScript builds can’t break on a range change.
  • @inquirer/core v12 changes the useState setter to a reducer function for custom prompt builders; the CLI uses built-in prompts only.

Written for commit 1aa4ac5. Summary will update on new commits.

Review in cubic

Bumps [inquirer](https://github.com/SBoudrias/Inquirer.js) from 14.0.2 to 14.2.1.
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/inquirer@14.0.2...inquirer@14.2.1)

---
updated-dependencies:
- dependency-name: inquirer
  dependency-version: 14.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 9, 2026
@strix-security

strix-security Bot commented Sep 9, 2026

Copy link
Copy Markdown

Strix is installed on this repository, but we couldn't run this PR security review because this workspace's trial has ended. Add a card to resume code reviews here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants