Skip to content

chore(deps): bump the cli-dependencies group across 1 directory with 9 updates - #116

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/cli/cli-dependencies-c8c0530b59
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/cli/cli-dependencies-c8c0530b59

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 23, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the cli-dependencies group with 9 updates in the /cli directory:

Package From To
@clack/prompts 1.7.0 1.8.1
oauth4webapi 3.8.7 3.8.8
yaml 2.9.0 2.9.1
eslint-plugin-no-relative-import-paths 1.6.1 1.7.3
knip 6.32.2 6.38.0
oxfmt 0.63.0 0.71.0
oxlint 1.78.0 1.86.0
oxlint-tsgolint 7.0.2001 7.0.2003
typescript 6.0.3 7.0.2

Updates @clack/prompts from 1.7.0 to 1.8.1

Release notes

Sourced from @​clack/prompts's releases.

@​clack/prompts@​1.8.1

Patch Changes

  • 8bd9129 Thanks @​gameroman! - Return type for prompts now correctly specifies CANCEL_SYMBOL instead of symbol

  • Updated dependencies [8bd9129]:

    • @​clack/core@​1.5.1

@​clack/prompts@​1.8.0

Minor Changes

  • #592 caa32e8 Thanks @​gameroman! - Export CANCEL_SYMBOL constant from @clack/core and @clack/prompts

  • #594 37fca4e Thanks @​dreyfus92! - Add tab-completion to the path prompt: pressing Tab fills the input with the focused suggestion, so you can quickly descend into deep directories (type / and Tab again). Powered by a new opt-in completeOnTab option on autocomplete, which also shows a Tab: complete hint in the instructions footer. Default autocomplete behavior is unchanged.

  • #583 ae636dd Thanks @​43081j! - Add async validation support to prompts, and validation state rendering to text prompts.

Patch Changes

Changelog

Sourced from @​clack/prompts's changelog.

1.8.1

Patch Changes

  • 8bd9129 Thanks @​gameroman! - Return type for prompts now correctly specifies CANCEL_SYMBOL instead of symbol

  • Updated dependencies [8bd9129]:

    • @​clack/core@​1.5.1

1.8.0

Minor Changes

  • #592 caa32e8 Thanks @​gameroman! - Export CANCEL_SYMBOL constant from @clack/core and @clack/prompts

  • #594 37fca4e Thanks @​dreyfus92! - Add tab-completion to the path prompt: pressing Tab fills the input with the focused suggestion, so you can quickly descend into deep directories (type / and Tab again). Powered by a new opt-in completeOnTab option on autocomplete, which also shows a Tab: complete hint in the instructions footer. Default autocomplete behavior is unchanged.

  • #583 ae636dd Thanks @​43081j! - Add async validation support to prompts, and validation state rendering to text prompts.

Patch Changes

Commits

Updates oauth4webapi from 3.8.7 to 3.8.8

Release notes

Sourced from oauth4webapi's releases.

v3.8.8

Fixes

  • accept space runs in Bearer and DPoP credentials (3414db5)
  • decode HTTP authentication quoted pairs correctly (bd7fcb0)
  • forward arguments to AVA test runners (b898ba5)
  • honor explicit auth-time skips in authorization responses (656d762)
  • recognize DPoP nonce errors among multiple challenges (70bd8a1)
  • release: separate changelog sections (a827c39)
  • validate ID Token subjects and DPoP identifiers as strings (edbebeb)

Refactor

  • consolidate ID Token validation policy (53900cc)

Performance

  • cache imported issuer verification keys by algorithm (fbe6c02)
  • coalesce compatible in-flight JWKS requests (e64849e)
Changelog

Sourced from oauth4webapi's changelog.

3.8.8 (2026-09-05)

Fixes

  • accept space runs in Bearer and DPoP credentials (3414db5)
  • decode HTTP authentication quoted pairs correctly (bd7fcb0)
  • forward arguments to AVA test runners (b898ba5)
  • honor explicit auth-time skips in authorization responses (656d762)
  • recognize DPoP nonce errors among multiple challenges (70bd8a1)
  • release: separate changelog sections (a827c39)
  • validate ID Token subjects and DPoP identifiers as strings (edbebeb)

Refactor

  • consolidate ID Token validation policy (53900cc)

Performance

  • cache imported issuer verification keys by algorithm (fbe6c02)
  • coalesce compatible in-flight JWKS requests (e64849e)
Commits
  • 916b979 chore(release): 3.8.8
  • eb564a4 test: accept WebCrypto DOMException rejections on Node 20
  • fbe6c02 perf: cache imported issuer verification keys by algorithm
  • e64849e perf: coalesce compatible in-flight JWKS requests
  • 53900cc refactor: consolidate ID Token validation policy
  • edbebeb fix: validate ID Token subjects and DPoP identifiers as strings
  • bd7fcb0 fix: decode HTTP authentication quoted pairs correctly
  • 3414db5 fix: accept space runs in Bearer and DPoP credentials
  • 656d762 fix: honor explicit auth-time skips in authorization responses
  • b898ba5 fix: forward arguments to AVA test runners
  • Additional commits viewable in compare view

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

  • Limit recursive merge aliases (#685, #713)
  • Simplify line unfolding during quoted string parsing (#714)
Commits

Updates eslint-plugin-no-relative-import-paths from 1.6.1 to 1.7.3

Release notes

Sourced from eslint-plugin-no-relative-import-paths's releases.

1.7.3

No release notes provided.

1.7.2

Re-release

1.7.1

Full Changelog: MelvinVermeer/eslint-plugin-no-relative-import-paths@1.7.0...1.7.1

1.7.0

What's Changed

New Contributors

Full Changelog: MelvinVermeer/eslint-plugin-no-relative-import-paths@v1.6.1...1.7.0

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-no-relative-import-paths since your current version.


Updates knip from 6.32.2 to 6.38.0

Release notes

Sourced from knip's releases.

Release 6.38.0

  • Include co-authors in docs contributor list (0c334100df59d89a512ad598ec50e7f62f6da0c3)
  • Filter bots and agents from docs contributors (617f70d8179c6b8668ca41fe5df77ced5e2b37c0)
  • Update Eve plugin conventions (#2049) (260dbb91a85f3a3bc2727e8f255d73df3737552c) - thanks @​matchai!
  • Add args example to that doc page (50b271b98fc930a05a3b045a2f691486f9f06528)
  • Add Turborepo plugin (#2055) (e49d3db05f1d69ce7db3efcb8467a4af63c27379) - thanks @​changbaebang!
  • Support import-x/* settings in ESLint plugin (#2050) (1a34cf82a3d6a1202717ef910bedba55838e9dd9) - thanks @​bytedoe!
  • Resolve file option in Mocha configuration files (#2051) (9b5c5f60468c8a92a3e74adca5c0931f008677af) - thanks @​giaBaoJS!
  • Support oxlint extends (#2054) (a149a98219bb14b15f446fc5f8c4f815e28b2183) - thanks @​matthewnitschke-wk!
  • Fix import.meta handling in built-in compilers (#2059) (8b0c85076bf3dce15ef5f3c0c4e58bfefdf59ded) - thanks @​vdavid!
  • Fix tag hints for enum and namespace members (#2061) (8a8805e48945863248429d18b7f6c4e4b7dc9ebd) - thanks @​devYRPauli!
  • Flag unused member tags in tagged enums and namespaces (584e53ff3e0846fbfe04fa5b5bfefe2420576a34)
  • feat: resolve MDX content mapper remarkPlugins (#2060) (34dbccf25359f9e9fefe9d0be6ef2ec0252223cc) - thanks @​gioboa!
  • Refactor and separate concerns w/ new typescript-content-mapper plugin (11e94509bd0f350d747facf4003fc5b248d1b02d)
  • Resolve mdx content mapper providerImportSource (7b5825117f97f2f87b7141509a254f88d0957cf7)
  • Fix config → entry in plop plugin (25a380c9e1165b76583d69b48b5fa7cdf5db0ae2)

Release 6.37.0

  • fix(graphql-codegen): mark near-operation-file outputs as entries, not the documents directory (#2048) (06a68fcf99a90e559daeb0b8fb2d24e173124774) - thanks @​RobHannay!
  • fix: enable JSX in the config loader (#1959) (5b21dc9192f773613d1c5db8edf35f0a68820268) - thanks @​addielaruee!
  • Match binaries only to their actual dependency providers (c5bdb69ccbcb7e1056233f346d0ada3495d1013d)
  • Preserve executable references across package manager commands (54af171638db22f5d903faae05c37c2ea6adc869)
  • Correct binary provider metadata in Relay fixtures (e67dfcb96d055c27be9c8601e077656855bb632b)
  • Separate shell binary expectations from reporting exemptions (resolve #2022) (c1d7d75a3529d9faff7f4c0df11dd0ca1bdfb149)
  • Respect npx no-install flags before the executable (4237010c9a834eb8b04f4a528c76d10a5c38ee98)
  • Update dependencies (038ea179f7d6bf7ca43bc5daf553a68b13a9067c)
  • Remove npm auth check now that's in release-it (4aaf77c58004ac64063a1982b98e53107c2ebe93)
  • Fix --format name resolution in the ESLint plugin (#2046) (1269e98bb700384811fadc124d69ea720832037e) - thanks @​bytedoe!

Release 6.36.0

  • Add @​tailwindcss/webpack as Tailwind plugin enabler (#2027) (b5ac0cf734dda3c6c6c51c817981dfc558b7c582) - thanks @​igas!
  • Fix Next.js Turbopack loader dependencies (23419b4edfd48796dd484fa880e1bad49a043d2e)
  • Explain ambiguous star exports in traces (#2025) (3c2c1a53f9c2b7ff3057a4e46761791979e0b09c) - thanks @​gioboa!
  • Fix eslintrc parserOptions.parser handling in ESLint plugin (#2028) (c79463cec81d09518eda325ec00e6f12327dea8d) - thanks @​bytedoe!
  • fix(compilers): require word boundary around import keyword (#2029) (68bbe51c39b564022b63942bc83cb570778cca00) - thanks @​thanadolps!
  • fix: recover from corrupt cache file (#2034) (30ff7568c84e0a6731ca634a52314228d23d1a2b) - thanks @​gioboa!
  • fix: fix trailing comma on dependency removal (#2033) (adfaf4f78878b6d55b0939a92d70a1fbb0ae1240) - thanks @​gioboa!
  • Document built-in compiler scope (a05e155276dad4ead16992580d17572cebf045e7)
  • Add babel, khan and oxc to projects and optimize svgs (1c26560b98bc3109e93d15761d02f089213bfb6c)
  • Add section to test preview packages & extension (d911c18385f0aa41f53653a2a15cc90a1e0251b8)
  • Fix shared info/exclude handling in linked Git worktrees (#2037) (c1f18d5a7d25fc5a614747bbcbd62d043457eb48) - thanks @​kenfdev!
  • Shard Node specs on Windows and enable Bun test parallelism (66e966b6edec4460b40b05847fefa9f90ee69068)
  • Add Varlock plugin support (#2000) (e4fbf46acff08e78370e72b142e795bd81f28561) - thanks @​Joehoel!
  • Apply NODE_OPTIONS inputs to package manager binaries (#2038) (c8df8a28e9a19484efe7097f984abc0c6556aff5) - thanks @​giaBaoJS!
  • Handle array form of import/resolver setting in ESLint plugin (#2041) (a80d386a80fdafc89c610d4887ec82184ac178db) - thanks @​bytedoe!
  • fix(node): add valueless Node CLI flags to boolean options (#2042) (4c6768501f7115a894d7ece9e5c32090b684cc6f) - thanks @​shoutoutuoadi325!
  • fix(typedoc): accept string form of plugin and theme options (#2043) (ce387b05c8f136546e860ec73e29557563c63afa) - thanks @​giaBaoJS!
  • Add textlint plugin (#2039) (532dab595fc9a910e320418dc0390222fb2d7478) - thanks @​anandghegde!
  • fix: Correctly resolve Vitest setupFiles from nested configs (#2040) (84a494334e125d229dc865893b21d69d0d201e85) - thanks @​CruseCtrl!
  • Add n8n to projects (3f756a7e70c4164d57a7dbbd58f3604afe4043e2)

... (truncated)

Commits
  • c0e42f8 Release knip@6.38.0
  • 25a380c Fix config → entry in plop plugin
  • 7b58251 Resolve mdx content mapper providerImportSource
  • 11e9450 Refactor and separate concerns w/ new typescript-content-mapper plugin
  • 34dbccf feat: resolve MDX content mapper remarkPlugins (#2060)
  • 584e53f Flag unused member tags in tagged enums and namespaces
  • 8a8805e Fix tag hints for enum and namespace members (#2061)
  • 8b0c850 Fix import.meta handling in built-in compilers (#2059)
  • a149a98 Support oxlint extends (#2054)
  • 9b5c5f6 Resolve file option in Mocha configuration files (#2051)
  • Additional commits viewable in compare view

Updates oxfmt from 0.63.0 to 0.71.0

Release notes

Sourced from oxfmt's releases.

oxfmt v0.71.0

🚀 Features

  • e0b1f9f oxfmt: Bump bundled Prettier version to 3.9.9 (#27002) (leaysgur)
  • 342527d oxfmt: Bump bundled Prettier version to 3.9.8 (#26999) (leaysgur)

🐛 Bug Fixes

  • eeba1db formatter: Skip test-call layout when arguments have comments (#27119) (leaysgur)
  • 1f7b8ad oxfmt: Allow repeated CLI calls in the same process (#27051) (Liang)
  • 7bcb807 formatter_markdown: Keep blank line between HTML and nested list (#27112) (leaysgur)
  • 10b10c5 formatter: Keep comments around = on their side and line (#27041) (leaysgur)
  • 9aad365 formatter: Keep comments deferred before an assignment operator (#26997) (waltu)
  • 8fbddb1 formatter/jsdoc: More alignment with original plugin (#27039) (leaysgur)
  • 50be18e formatter: Keep trailing spaces on normal block comments (#27037) (leaysgur)
  • 56d1880 formatter: Nestle adjacent block comments (#27036) (leaysgur)
  • 3be5d94 formatter: Treat /*** comments as JSDoc (#27035) (leaysgur)
  • cd45f71 formatter: Keep trailing double spaces on JSDoc lines (#26861) (John Costa)
  • fd695f4 formatter_markdown: Fix more mismatches found in ecosystem-ci repos (#27003) (leaysgur)
  • 4e77d59 formatter_markdown: Keep a math span after a kept line break from opening a block (#27001) (leaysgur)
  • 584b8b0 formatter_markdown: Keep a shape line after a multi-line inline node or link title (#27000) (leaysgur)
  • b939645 formatter_markdown: Keep a line break before an inline liquid tag under preserve (#26998) (leaysgur)

oxfmt v0.70.0

🚀 Features

  • 415b742 oxlint,oxfmt: Do not discover nested config in Vite+ mode (#26763) (leaysgur)
Commits

Updates oxlint from 1.78.0 to 1.86.0

Release notes

Sourced from oxlint's releases.

oxlint v1.86.0

🚀 Features

  • 9d80eed linter/react/only-export-components: Support allowCompoundComponents (#27117) (Kuroda Kayn)
  • e05b155 linter: Add typescript/no-generated-empty-object-type (#26958) (camc314)

🐛 Bug Fixes

  • 8306aa4 linter/typescript/no-unnecessary-parameter-property-assignment: Account for parameter property reassignment (#26955) (camc314)
  • 42dfbb5 linter/eslint/one-var: Keep declare when splitting declarations (#27081) (Cheolhee Lee)
  • 2ba7e33 linter/eslint/require-await: Count await using as an await (#27080) (Cheolhee Lee)
  • 611e4ed linter/plugins: Include executing selectors in JS plugin rule timings (#27111) (overlookmotel)
  • 2cac66f react-compiler: Handle recursive function expressions (#26796) (Brennan Butler)
  • e996e6c react-compiler: Treat zero-argument new Date as impure (#26894) (Boshen)
  • 571cfa3 oxlint: Skip type-aware lint rules in type-check-only mode (#27076) (camc314)
  • d0b2462 oxlint: Skip undefined children in CFG walker (#27075) (camc314)
  • 5186328 parser: Handle HTML comment values (#22933) (Boshen)
  • 0b630e8 linter/typescript/unified-signatures: Align rule with upstream (#26956) (camc314)
  • ebb22f1 linter/node/no-exports-assign: Change category from style to suspicious (#26555) (Bartok)
  • cce28a0 linter/import/no-duplicates: Distinguish import attributes (#26936) (camc314)
  • feb733b linter/unicorn/prefer-spread: Stop checking string split calls (#26935) (camc314)
  • 929e154 linter/eslint/no-unused-vars: Honor ignore patterns inside array rest bindings (#26923) (camc314)
  • 5bdb9b8 linter/eslint/no-unused-vars: Recognize consumed update expressions (#26782) (camc314)
  • 5c05bef linter/eslint/prefer-const: Ignore embedded assignments (#26920) (camc314)

⚡ Performance

  • ded4c29 linter/eslint/no-unused-vars: Skip sequence checks when absent (#26921) (camc314)

oxlint v1.85.0

🚀 Features

  • 415b742 oxlint,oxfmt: Do not discover nested config in Vite+ mode (#26763) (leaysgur)
Changelog

Sourced from oxlint's changelog.

[1.86.0] - 2026-09-28

🚀 Features

  • 9d80eed linter/react/only-export-components: Support allowCompoundComponents (#27117) (Kuroda Kayn)
  • e05b155 linter: Add typescript/no-generated-empty-object-type (#26958) (camc314)

[1.82.0] - 2026-09-07

🚀 Features

  • 6a0e19c linter/eslint/no-unmodified-loop-condition: Support checkConditionalExpressions option (#26249) (camc314)

[1.81.0] - 2026-08-31

📚 Documentation

  • d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

  • 8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

🐛 Bug Fixes

  • 228e8e0 linter: Resolve inactive React compiler rules (#25830) (Boshen)
  • aa49d86 linter: Allow spread rule options in config types (#25675) (ch3rry)
  • 36f8451 linter/eslint/no-eval: Align indirect default with ESLint (#25656) (camc314)
  • beb724d linter/eslint/no-unused-vars: Report bare underscore parameters (#25663) (camc314)
  • 4004c10 linter/eslint/no-irregular-whitespace: Check comments by default (#25660) (camc314)
  • 285820e linter/no-large-snapshots: Precompile and document allowed snapshot matchers (#25611) (Mikhail Baev)
  • 4df5835 linter: Allow capitalized built-in calls (#25516) (Boshen)
Commits
  • 2ae2939 release(apps): oxlint v1.86.0 && oxfmt v0.71.0 (#27132)
  • 9d80eed feat(linter/react/only-export-components): support allowCompoundComponents ...
  • e05b155 feat(linter): add typescript/no-generated-empty-object-type (#26958)
  • 88a0096 chore(oxlint): require tsgolint 7.0.2003 (#27021)
  • 288d8cc release(apps): oxlint v1.85.0 && oxfmt v0.70.0 (#26903)
  • f02a64a release(apps): oxlint v1.84.0 && oxfmt v0.69.0 (#26874)
  • 7bf68f7 release(apps): oxlint v1.83.0 && oxfmt v0.68.0 (#26631)
  • b4da00b release(apps): oxlint v1.82.0 && oxfmt v0.67.0 (#26384)
  • aa38ddf fix(linter/unicorn/numeric-separators-style): correct schema defaults (#26393)
  • 6a0e19c feat(linter/eslint/no-unmodified-loop-condition): support `checkConditionalEx...
  • Additional commits viewable in compare view

Updates oxlint-tsgolint from 7.0.2001 to 7.0.2003

Release notes

Sourced from oxlint-tsgolint's releases.

v7.0.2003

What's Changed

New Contributors

Full Changelog: oxc-project/tsgolint@v7.0.2002...v7.0.2003

v7.0.2002

What's Changed

... (truncated)

Commits
  • eb93391 perf: add experimental checker scheduling modes (#1240)
  • e3a79a5 refactor: extract checker workload scheduling (#1241)
  • 1fdaa0d perf(no-unnecessary-type-assertion): reject incompatible types first (#1181)
  • 364b239 perf: speed up headless file-to-program assignment (#1239)
  • 52500be perf: avoid singleton union type allocations in hot rules (#1237)
  • 22b148a fix(no-unnecessary-condition): check nested logical expressions in truthiness...
  • 356609f fix(no-deprecated): detect deprecated aliases in object shorthand (#1235)
  • cbf3909 fix(no-useless-default-assignment): handle tuples with rest elements (#1223)
  • 7bd5c11 fix: match package specifiers on whole path components (#1225)
  • 6f25883 fix: preserve expression syntax when removing await (#1233)
  • Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 23, 2026
@albert20260301

Copy link
Copy Markdown
Contributor

@francoischalifour this update’s required verification fails in cli/src/ui/prompts.ts:68 after upgrading TypeScript to 7.0.2:

TS2322: Type 'string | symbol' is not assignable to type 'string'.

main is currently healthy on TypeScript 6.0.3. PR #114 (the prior TypeScript 6 compatibility stack) was automatically closed when its Dependabot base #112 became obsolete. Please decide whether we should make TypeScript 7 compatible or keep TypeScript pinned at 6; this dependency PR should remain unmerged until then.

@albert20260301

Copy link
Copy Markdown
Contributor

@francoischalifour following up on the TypeScript 7 upgrade decision: required verification still fails with TS2322 in cli/src/ui/prompts.ts:68, while main remains healthy on TypeScript 6.0.3. Please decide whether to make the CLI TypeScript 7 compatible or retain the TypeScript 6 pin; PR #116 should remain unmerged until then.

@dependabot
dependabot Bot force-pushed the dependabot/bun/cli/cli-dependencies-c8c0530b59 branch 5 times, most recently from 85642d1 to 583d7ff Compare October 1, 2026 14:56
…9 updates

Bumps the cli-dependencies group with 9 updates in the /cli directory:

| Package | From | To |
| --- | --- | --- |
| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.7.0` | `1.8.1` |
| [oauth4webapi](https://github.com/panva/oauth4webapi) | `3.8.7` | `3.8.8` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |
| [eslint-plugin-no-relative-import-paths](https://github.com/MelvinVermeer/eslint-plugin-no-relative-import-paths) | `1.6.1` | `1.7.3` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.32.2` | `6.38.0` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.63.0` | `0.71.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.78.0` | `1.86.0` |
| [oxlint-tsgolint](https://github.com/oxc-project/tsgolint) | `7.0.2001` | `7.0.2003` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |



Updates `@clack/prompts` from 1.7.0 to 1.8.1
- [Release notes](https://github.com/bombshell-dev/clack/releases)
- [Changelog](https://github.com/bombshell-dev/clack/blob/main/packages/prompts/CHANGELOG.md)
- [Commits](https://github.com/bombshell-dev/clack/commits/@clack/prompts@1.8.1/packages/prompts)

Updates `oauth4webapi` from 3.8.7 to 3.8.8
- [Release notes](https://github.com/panva/oauth4webapi/releases)
- [Changelog](https://github.com/panva/oauth4webapi/blob/main/CHANGELOG.md)
- [Commits](panva/oauth4webapi@v3.8.7...v3.8.8)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

Updates `eslint-plugin-no-relative-import-paths` from 1.6.1 to 1.7.3
- [Release notes](https://github.com/MelvinVermeer/eslint-plugin-no-relative-import-paths/releases)
- [Commits](MelvinVermeer/eslint-plugin-no-relative-import-paths@v1.6.1...1.7.3)

Updates `knip` from 6.32.2 to 6.38.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.38.0/packages/knip)

Updates `oxfmt` from 0.63.0 to 0.71.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.71.0/npm/oxfmt)

Updates `oxlint` from 1.78.0 to 1.86.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.86.0/npm/oxlint)

Updates `oxlint-tsgolint` from 7.0.2001 to 7.0.2003
- [Release notes](https://github.com/oxc-project/tsgolint/releases)
- [Commits](oxc-project/tsgolint@v7.0.2001...v7.0.2003)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

---
updated-dependencies:
- dependency-name: "@clack/prompts"
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: eslint-plugin-no-relative-import-paths
  dependency-version: 1.7.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: knip
  dependency-version: 6.37.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: oauth4webapi
  dependency-version: 3.8.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cli-dependencies
- dependency-name: oxfmt
  dependency-version: 0.68.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: oxlint
  dependency-version: 1.83.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: oxlint-tsgolint
  dependency-version: 7.0.2002
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: cli-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: cli-dependencies
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cli-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bun/cli/cli-dependencies-c8c0530b59 branch from 583d7ff to 908858d Compare October 2, 2026 20:31
@albert20260301

Copy link
Copy Markdown
Contributor

@francoischalifour The refreshed verification still fails with TS2322 at cli/src/ui/prompts.ts:68 after the TypeScript 7.0.2 update; main remains healthy on TypeScript 6.0.3.

Please decide whether to make the CLI TypeScript 7 compatible or retain the TypeScript 6 pin. This Dependabot PR should remain unmerged until then.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant