Skip to content

chore(deps): update inquirer#1519

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/inquirer
Open

chore(deps): update inquirer#1519
renovate[bot] wants to merge 1 commit intomainfrom
renovate/inquirer

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Jan 11, 2026

This PR contains the following updates:

Package Type Update Change OpenSSF
@inquirer/confirm (source) devDependencies patch 6.0.36.0.11 OpenSSF Scorecard
@inquirer/core (source) dependencies patch 11.1.011.1.8 OpenSSF Scorecard
@inquirer/input (source) devDependencies patch 5.0.35.0.11 OpenSSF Scorecard
@inquirer/password (source) devDependencies patch 5.0.35.0.11 OpenSSF Scorecard
@inquirer/select (source) devDependencies minor 5.0.35.1.3 OpenSSF Scorecard

Release Notes

SBoudrias/Inquirer.js (@​inquirer/confirm)

v6.0.11

Compare Source

v6.0.10

Compare Source

v6.0.9

Compare Source

v6.0.8

Compare Source

v6.0.7

Compare Source

v6.0.6

Compare Source

v6.0.5

Compare Source

v6.0.4

Compare Source


Configuration

📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Dependency updates label Jan 11, 2026
@renovate renovate bot enabled auto-merge (squash) January 11, 2026 22:07
@renovate renovate bot added the dependencies Dependency updates label Jan 11, 2026
@github-actions github-actions bot added qa:running QA workflow is currently running status:approved Pull request has been approved labels Jan 11, 2026
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

@renovate renovate bot force-pushed the renovate/inquirer branch from 4e0c059 to c18533d Compare February 2, 2026 16:43
@renovate renovate bot force-pushed the renovate/inquirer branch 3 times, most recently from 5ecf764 to 795815c Compare February 16, 2026 19:12
@renovate renovate bot force-pushed the renovate/inquirer branch from 795815c to c18a660 Compare February 23, 2026 02:55
@renovate renovate bot force-pushed the renovate/inquirer branch 2 times, most recently from 68b88b5 to bb902be Compare March 15, 2026 22:06
@renovate renovate bot force-pushed the renovate/inquirer branch from bb902be to 8a1782e Compare March 26, 2026 20:12
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot force-pushed the renovate/inquirer branch from 8a1782e to 496f37f Compare April 6, 2026 22:37
@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​inquirer/​core@​11.1.0 ⏵ 11.1.8100 +110010095 +1100
Updated@​inquirer/​input@​5.0.3 ⏵ 5.0.1110010010095 +1100
Updated@​inquirer/​password@​5.0.3 ⏵ 5.0.1110010098 +195 +1100
Updated@​inquirer/​confirm@​6.0.3 ⏵ 6.0.111001009895 +1100
Updated@​inquirer/​select@​5.0.3 ⏵ 5.1.3100 +110010095 +1100

View full report

@socket-security
Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn Medium
Low adoption: npm fast-wrap-ansi

Location: Package overview

From: ?npm/@inquirer/core@11.1.8npm/fast-wrap-ansi@0.2.0

ℹ Read more on: This package | This alert | What are unpopular packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Unpopular packages may have less maintenance and contain other problems.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/fast-wrap-ansi@0.2.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates qa:running QA workflow is currently running status:approved Pull request has been approved

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants