🤖 Dep Updates: Bump @inquirer/password from 4.0.18 to 5.0.3 #72

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Closed

dependabot wants to merge 1 commit into main from dependabot/npm_and_yarn/inquirer/password-5.0.3

Closed

🤖 Dep Updates: Bump @inquirer/password from 4.0.18 to 5.0.3 #72

dependabot wants to merge 1 commit into main from dependabot/npm_and_yarn/inquirer/password-5.0.3

Conversation

@dependabot

Copy link

@dependabot dependabot bot commented on behalf of github Jan 12, 2026

Bumps @inquirer/password from 4.0.18 to 5.0.3.

Release notes

Sourced from @inquirer/password's releases.

@inquirer/select@5.0.3

Fix: Return type when using a list of string as choices.

@inquirer/select@4.4.0

New design for the keys help tip. Themable/localizable with theme.style.keysHelpTip.

Re-introduce option to match up/down actions with vim or emacs keybindings. Enable with theme.keybindings

@inquirer/select@4.3.1

Fix #1786 indexMode: number theme option didn't properly calculate the items indexes if separators where present in between choices.

@inquirer/select@4.3.0

When pressing a number key, we'll ignore separators in counting the index of the item to jump to.

@inquirer/checkbox@4.3.0

New design for the keys help tip. Themable/localizable with theme.style.keysHelpTip.

Re-introduce option to match up/down actions with vim or emacs keybindings. Enable with theme.keybindings

Each choice can define an optional checkedName that'll replace the default name once checked.

@inquirer/input@4.3.0

feat @inquirer/input: Now support simple RegExp validation with pattern/patternError.

Bump dependencies

@inquirer/editor@4.2.22

fix @inquirer/editor: Fix typo s/waitForUseInput/waitForUserInput

Bump dependencies

@inquirer/editor@4.2.0

New theme option validationFailureMode: 'keep' | 'clear' to control the behaviour when validation fails.

@inquirer/select@4.2.0

Feat(@inquirer/select): Added an instructions option allowing to customize the messages in the help tips.

@inquirer/input@4.2.0

New prefill option to control if the default value is editable inline or only after pressing tab.

@inquirer/checkbox@4.2.0

When pressing a number key, we'll ignore separators in counting the index of the item to select.

@inquirer/rawlist@4.1.7

Fix #1834: (rawlist) Allows specifying numbers as explicit keys of option within the list.

@inquirer/editor@4.1.0

Expose a new file option covering all options supported by external-editor.

@inquirer/input@4.1.0

New theme option validationFailureMode: 'keep' | 'clear' to control the behaviour when validation fails.

@inquirer/checkbox@4.1.0

Added new shortcut config. Allows to customize or disable shortcut keys for select all and invert selection.

... (truncated)

Commits

7eedd8e chore: Publish new release
23201ba feat(@inquirer/rawlist) Add support for default
8713b89 fix(@inquirer/select) Review default typing to no infer valid value
d05ce35 fix(@inquirer/testing): preserve Value type inference in render()
cfef911 fix(@inquirer/select): infer Value type from string[] choices
6dda7b6 feat(@inquirer/core): Add shift to KeypressEvent
24ec7ee Chore(deps): Bump type-fest from 5.3.0 to 5.3.1 in the types group
3759e85 Chore(deps-dev): Bump turbo from 2.6.1 to 2.6.3 in the build group
9c72429 chore: Publish new release
e874a21 fix: Refresh yarn setup. Fixes #1902
Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot


 🤖 Dep Updates: Bump @inquirer/password from 4.0.18 to 5.0.3

5faa00f

Bumps [@inquirer/password](https://github.com/SBoudrias/Inquirer.js) from 4.0.18 to 5.0.3.
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/password@4.0.18...@inquirer/password@5.0.3)
---
updated-dependencies:
- dependency-name: "@inquirer/password"
 dependency-version: 5.0.3
 dependency-type: direct:development
 update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>

@dependabot dependabot bot added dependencies javascript labels

Jan 12, 2026

@socket-security

Copy link

socket-security bot commented Jan 12, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
Updated	@inquirer/password@4.0.18 ⏵ 5.0.3	100	100	98 ^-2	94	100

View full report

@socket-security-staging

Copy link

socket-security-staging bot commented Jan 12, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
Updated	@inquirer/password@4.0.18 ⏵ 5.0.3	100	100	98 ^-2	96	100

View full report

@jdalton jdalton force-pushed the main branch from 89c4f80 to 7a20f39 Compare

January 13, 2026 02:22

@jdalton jdalton closed this

Jan 13, 2026

@dependabot @github

Copy link

Author

dependabot bot commented on behalf of github Jan 13, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/inquirer/password-5.0.3 branch

January 13, 2026 02:42

Labels

dependencies javascript

2 participants

@jdalton

🤖 Dep Updates: Bump @inquirer/password from 4.0.18 to 5.0.3 #72

🤖 Dep Updates: Bump @inquirer/password from 4.0.18 to 5.0.3 #72

Uh oh!

Conversation

@dependabot dependabot bot commented on behalf of github Jan 12, 2026

@​inquirer/select@​5.0.3

@​inquirer/select@​4.4.0

@​inquirer/select@​4.3.1

@​inquirer/select@​4.3.0

@​inquirer/checkbox@​4.3.0

@​inquirer/input@​4.3.0

@​inquirer/editor@​4.2.22

@​inquirer/editor@​4.2.0

@​inquirer/select@​4.2.0

@​inquirer/input@​4.2.0

@​inquirer/checkbox@​4.2.0

@​inquirer/rawlist@​4.1.7

@​inquirer/editor@​4.1.0

@​inquirer/input@​4.1.0

@​inquirer/checkbox@​4.1.0

Uh oh!

socket-security bot commented Jan 12, 2026

Uh oh!

socket-security-staging bot commented Jan 12, 2026

Uh oh!

dependabot bot commented on behalf of github Jan 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

`@inquirer/select@5`.0.3

`@inquirer/select@4`.4.0

`@inquirer/select@4`.3.1

`@inquirer/select@4`.3.0

`@inquirer/checkbox@4`.3.0

`@inquirer/input@4`.3.0

`@inquirer/editor@4`.2.22

`@inquirer/editor@4`.2.0

`@inquirer/select@4`.2.0

`@inquirer/input@4`.2.0

`@inquirer/checkbox@4`.2.0

`@inquirer/rawlist@4`.1.7

`@inquirer/editor@4`.1.0

`@inquirer/input@4`.1.0

`@inquirer/checkbox@4`.1.0