Skip to content

chore(deps): bump the cli-dependencies group across 1 directory with 9 updates - #116

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/cli/cli-dependencies-c8c0530b59
Open

chore(deps): bump the cli-dependencies group across 1 directory with 9 updates#116
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/cli/cli-dependencies-c8c0530b59

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cli-dependencies group with 9 updates in the /cli directory:

Package From To
@clack/prompts 1.7.0 1.8.1
oauth4webapi 3.8.7 3.8.8
yaml 2.9.0 2.9.1
eslint-plugin-no-relative-import-paths 1.6.1 1.7.3
knip 6.32.2 6.41.0
oxfmt 0.63.0 0.72.0
oxlint 1.78.0 1.87.0
oxlint-tsgolint 7.0.2001 7.0.2004
typescript 6.0.3 7.0.2

Updates @clack/prompts from 1.7.0 to 1.8.1

Release notes

Sourced from @​clack/prompts's releases.

@​clack/prompts@​1.8.1

Patch Changes

  • 8bd9129 Thanks @​gameroman! - Return type for prompts now correctly specifies CANCEL_SYMBOL instead of symbol

  • Updated dependencies [8bd9129]:

    • @​clack/core@​1.5.1

@​clack/prompts@​1.8.0

Minor Changes

  • #592 caa32e8 Thanks @​gameroman! - Export CANCEL_SYMBOL constant from @clack/core and @clack/prompts

  • #594 37fca4e Thanks @​dreyfus92! - Add tab-completion to the path prompt: pressing Tab fills the input with the focused suggestion, so you can quickly descend into deep directories (type / and Tab again). Powered by a new opt-in completeOnTab option on autocomplete, which also shows a Tab: complete hint in the instructions footer. Default autocomplete behavior is unchanged.

  • #583 ae636dd Thanks @​43081j! - Add async validation support to prompts, and validation state rendering to text prompts.

Patch Changes

Changelog

Sourced from @​clack/prompts's changelog.

1.8.1

Patch Changes

  • 8bd9129 Thanks @​gameroman! - Return type for prompts now correctly specifies CANCEL_SYMBOL instead of symbol

  • Updated dependencies [8bd9129]:

    • @​clack/core@​1.5.1

1.8.0

Minor Changes

  • #592 caa32e8 Thanks @​gameroman! - Export CANCEL_SYMBOL constant from @clack/core and @clack/prompts

  • #594 37fca4e Thanks @​dreyfus92! - Add tab-completion to the path prompt: pressing Tab fills the input with the focused suggestion, so you can quickly descend into deep directories (type / and Tab again). Powered by a new opt-in completeOnTab option on autocomplete, which also shows a Tab: complete hint in the instructions footer. Default autocomplete behavior is unchanged.

  • #583 ae636dd Thanks @​43081j! - Add async validation support to prompts, and validation state rendering to text prompts.

Patch Changes

Commits

Updates oauth4webapi from 3.8.7 to 3.8.8

Release notes

Sourced from oauth4webapi's releases.

v3.8.8

Fixes

  • accept space runs in Bearer and DPoP credentials (3414db5)
  • decode HTTP authentication quoted pairs correctly (bd7fcb0)
  • forward arguments to AVA test runners (b898ba5)
  • honor explicit auth-time skips in authorization responses (656d762)
  • recognize DPoP nonce errors among multiple challenges (70bd8a1)
  • release: separate changelog sections (a827c39)
  • validate ID Token subjects and DPoP identifiers as strings (edbebeb)

Refactor

  • consolidate ID Token validation policy (53900cc)

Performance

  • cache imported issuer verification keys by algorithm (fbe6c02)
  • coalesce compatible in-flight JWKS requests (e64849e)
Changelog

Sourced from oauth4webapi's changelog.

3.8.8 (2026-09-05)

Fixes

  • accept space runs in Bearer and DPoP credentials (3414db5)
  • decode HTTP authentication quoted pairs correctly (bd7fcb0)
  • forward arguments to AVA test runners (b898ba5)
  • honor explicit auth-time skips in authorization responses (656d762)
  • recognize DPoP nonce errors among multiple challenges (70bd8a1)
  • release: separate changelog sections (a827c39)
  • validate ID Token subjects and DPoP identifiers as strings (edbebeb)

Refactor

  • consolidate ID Token validation policy (53900cc)

Performance

  • cache imported issuer verification keys by algorithm (fbe6c02)
  • coalesce compatible in-flight JWKS requests (e64849e)
Commits
  • 916b979 chore(release): 3.8.8
  • eb564a4 test: accept WebCrypto DOMException rejections on Node 20
  • fbe6c02 perf: cache imported issuer verification keys by algorithm
  • e64849e perf: coalesce compatible in-flight JWKS requests
  • 53900cc refactor: consolidate ID Token validation policy
  • edbebeb fix: validate ID Token subjects and DPoP identifiers as strings
  • bd7fcb0 fix: decode HTTP authentication quoted pairs correctly
  • 3414db5 fix: accept space runs in Bearer and DPoP credentials
  • 656d762 fix: honor explicit auth-time skips in authorization responses
  • b898ba5 fix: forward arguments to AVA test runners
  • Additional commits viewable in compare view

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

  • Limit recursive merge aliases (#685, #713)
  • Simplify line unfolding during quoted string parsing (#714)
Commits

Updates eslint-plugin-no-relative-import-paths from 1.6.1 to 1.7.3

Release notes

Sourced from eslint-plugin-no-relative-import-paths's releases.

1.7.3

No release notes provided.

1.7.2

Re-release

1.7.1

Full Changelog: MelvinVermeer/eslint-plugin-no-relative-import-paths@1.7.0...1.7.1

1.7.0

What's Changed

New Contributors

Full Changelog: MelvinVermeer/eslint-plugin-no-relative-import-paths@v1.6.1...1.7.0

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-no-relative-import-paths since your current version.


Updates knip from 6.32.2 to 6.41.0

Release notes

Sourced from knip's releases.

Release 6.41.0

  • Add Flue plugin (#2124) (c52737d45ff008d6d96d4c2d4182048a2aa64602) - thanks @​LuisFigueroaG!
  • Match all React Native config file extensions (#2125) (898fdffb37ae0bdb3d2653038eb10c2e01edf983) - thanks @​LuisFigueroaG!
  • Consolidate fixture guidance and extend plugin guidelines (37a4ca04645f71f599e9b530676543f9893bd641)
  • Add AI contribution policy (b15f0fbb090ea0427240880da2bec602c11cea50)
  • Use files from tsconfig references with --use-tsconfig-files (#2126) (9618185eafb0c5cb365035f89e9d66718642338a) - thanks @​kaanisthatyou!
  • Compile gitignore walk patterns once (resolve #2127) (09c80299779fa5abe133ee8f82051c25870007b8)
  • Drop readdir order dependent case from gitignore walk test (ab3da8ff95a05a0fbfba6873b64559017d038aa7)
  • fix: recognize binaries from absent optional dependencies (#2120) (d908556eaa98bf9637a2744d2de089bab31b8dbc) - thanks @​DreamLongYT!
  • Apply a directory's .gitignore before walking its subdirectories (9560c07862d4c72dc956371b9a77e049d83ed4a9)
  • Apply nested .gitignore files to workspace globs (23d35421dd67c405254f2f8bcbc09b18d224e338)
  • Update gitignore matcher and walk notes (499f85f4544457dc7c51c4a7612fea69773ef3dd)
  • Keep the cwd out of glob patterns and matchers (#2107) (1e82fb807c88cc46951f2028214569f9a2eb0061) - thanks @​kaanisthatyou!
  • Support function configs in Rsbuild plugin (#2122) (38071db87e9023e5dd61173ce32f9020a1a5d7ff) - thanks @​bytedoe!
  • Separate Expo Router plugin; remove expo-router entry points from Expo plugin (#2128) (ad541764ca7d3c062236661677d1d66d5275122f) - thanks @​jjjjonathan!
  • Link Expo config discovery source and fold expo6 fixture into expo-router (2ddeca50956790b10580e835df50bc980cce961d)
  • Update dependencies (c9f79148f7165314a7b3c801eff926d1d0d6b060)
  • Migrate shell script parsing to unbash v5 (4942cca05303410120a007a5bb23b0c2da725da1)
  • Handle updated Formatly result types (ca9e8315e003dae69646f7500fa98ab9ed403b92)
  • Preserve TypeScript 5.0 compatibility in shell AST filters (957ac7bbd654f6d3d0c4dc4eab2f4aa133ff0b4b)
  • Point timerify crashes to the Node.js version that fixes them (0c235de096fd3361eb918d1290241fa32a62f089)
  • Copy importer identifier sets into the reverse index (2860d678a87dddb5ad56299119fb6e108ceffa12)
  • Clear the resolver cache at the start of a run (10b5bb82ecd03c88b68ace58a7aea23d188cc5f1)

Release 6.40.0

  • Resolve local and scope-only extends in commitlint plugin (#2079) (e667552d4e7122094565d3ad9ae407acfc0ac684) - thanks @​giaBaoJS!
  • Clarify worktree guides and plugin review preparation (dd02baf020d23af1d47c44c1a726a61014b270bd)
  • Document stale cache results and workarounds (#2078) (3573749a5d5bbee6305f207cc7d1b72c200c8c9b)
  • Exclude test files from package entries in production mode (resolve #2082) (b86f45f9d38d4b83baad98e43983e08910e00c78) - thanks @​jonathanong!
  • Resolve Serverless file variables in plugins and functions (resolve #2074) (99cac789694ea8d76cd38184d2d7c95f34315224) - thanks @​SwastikTripathi!
  • Preserve locally referenced namespace members (resolve #2070) (f0f36df766cd74ad7ae03fbf8940bdeb792439be) - thanks @​MFA-G!
  • fix: add the commitlint-plugin prefix to Commitlint plugin names (#2096) (3decd35ff0a4220c7cd2c9142dc69c89794b3927) - thanks @​devYRPauli!
  • fix: match .mjs config files in the simple-git-hooks plugin (#2097) (79a87d92396c2444ae4ef3c780c0d2e18cd73e4c) - thanks @​devYRPauli!
  • fix: match capacitor.config.js in the Capacitor plugin (#2098) (4a5ec96d818117a7f2eafa027e3b707bc97573a8) - thanks @​devYRPauli!
  • fix(typescript): ArrayExpression (#2099) (#2100) (87fea9f201c2fd864eafa31bdad68910a8a177ba) - thanks @​DreamLongYT!
  • Preserve development entry pattern groups (7c229f4e1918075d801ed3b046fa022b1d3bcc41)
  • Resolve null package exports to the files they hide (resolve #2084, close #2085) (5bd46260feb60b957c2631bc72375ef192e441e0)
  • Pin InvokeAI ecosystem test (4e0a3432eb35e3f628f6d3b7fcd14b942de343d0)
  • fix(utils): add jsx extension to source mapping (#2087) (eaa353b5fc30c2f12cdf2c29e6dd68e0d0950062) - thanks @​DreamLongYT!
  • fix(serverless-framework): handle explicit extensions in handler paths (#2091) (e9393965be7563640921e3f20c946fcb9132e1cb) - thanks @​DreamLongYT!
  • Annotate published manifest return type (d95a8310a0d0dca8f23d8dd3f83e7b0a1909d038)
  • Add Jasmine plugin (#2105) (9ed14911d5c5752aef36878ab3d515c35d1ac6bc) - thanks @​SulimanAbdulrazzaq!
  • fix: resolve workspace exports with fallback arrays (#2088) (49c2aaeaba4544f25cc02c19d5da5152a8ef68c3) - thanks @​DreamLongYT!
  • fix(postcss): ignore disabled plugins in object configs (#2092) (b84fdf8a8ee676ee45f4313009ebfe969d034a88) - thanks @​DreamLongYT!
  • Resolve webServer commands in Playwright plugin (#2110) (1af96bce36b0d0d07791de100c7f2ea5672a478c) - thanks @​everton-dgn!
  • Cache config file inputs per plugin (#2109) (01cb43267ca5dc03a2cbcba0a19fd891d4ed1f37) - thanks @​everton-dgn!
  • fix: include custom compiler extensions in source path mapping (#2090) (dc3a47e2d810808314454b8f5c23070f136d15d3) - thanks @​DreamLongYT!
  • Don't let a self-closing swallow the next (#2113) (989fdadde0a068d1d1c52e26a8327b99c5de0668) - thanks @​maniflopi!
  • fix(oxlint): resolve lint from loaded Vite config (#2108) (6d44e532ed6320cdf4f4c3253b26e155c4d26ba7) - thanks @​everton-dgn!
  • fix: resolve Jest module names without the jest-* prefix (#2095) (a5f4cfbff7f263a0ea8d5461a3f9216cbef38602) - thanks @​devYRPauli!

... (truncated)

Commits
  • 13d7f21 Release knip@6.41.0
  • 10b5bb8 Clear the resolver cache at the start of a run
  • 2860d67 Copy importer identifier sets into the reverse index
  • 0c235de Point timerify crashes to the Node.js version that fixes them
  • 957ac7b Preserve TypeScript 5.0 compatibility in shell AST filters
  • ca9e831 Handle updated Formatly result types
  • 4942cca Migrate shell script parsing to unbash v5
  • c9f7914 Update dependencies
  • 2ddeca5 Link Expo config discovery source and fold expo6 fixture into expo-router
  • ad54176 Separate Expo Router plugin; remove expo-router entry points from Expo plugin...
  • Additional commits viewable in compare view

Updates oxfmt from 0.63.0 to 0.72.0

Release notes

Sourced from oxfmt's releases.

oxfmt v0.72.0

💥 BREAKING CHANGES

  • e2c68b1 oxfmt: [BREAKING] Format parser:markdown files by oxc_formatter_markdown (#27256) (leaysgur)

🚀 Features

  • b538e3c formatter_css: Parse embedded CSS as a block's contents (#27284) (leaysgur)

🐛 Bug Fixes

  • 71e400b formatter_markdown: Fixed remaining issues found by fuzz (#27334) (leaysgur)
  • 7d0e54d formatter_markdown: Preserve line breaks around Chinese/Japanese characters in all proseWrap (#27331) (leaysgur)
  • e9ae2d8 formatter_css: Fix layouts found in mdn-content repo (css-in-md) (#27326) (leaysgur)
  • df85b4c oxfmt: Keep blank lines after a line break in Prettier Doc to IR (#27325) (leaysgur)
  • 7f65b75 formatter: Format assignment target property as assignment-like (#27289) (leaysgur)
  • 6c08f2a formatter_css: Apply the url() import exception to a lone comma group (#27288) (leaysgur)
  • 1967302 formatter_css: Hug a spaced ident ( only at the at-rule prelude head (#27283) (leaysgur)
  • 2445064 formatter_markdown: Keep a preserved line break before a delimiter row that opens no table (#27278) (leaysgur)
  • dd72fbf formatter_markdown: Keep container columns as spaces under useTabs (#27277) (leaysgur)
  • 1686018 oxfmt: Make one state conditionalGroup fit up to first hardline (#27275) (leaysgur)
  • fd4ddce formatter_json: Flatten block comment only array|object (#27274) (leaysgur)
  • 267557c formatter,oxfmt: Embed only original JSDoc plugin supported languages (#27241) (leaysgur)
  • 2606c60 oxfmt: Do not re-include a file below an excluded directory with a negated pattern (#27237) (Nicolas Le Cam)
  • c2de02b formatter: Decide embedded template layout from AST, not source shape (#27218) (leaysgur)
  • c9e1224 formatter: Handle quoteProps: consistent for patterns and computed keys (#27216) (leaysgur)
  • 36e14df formatter: Keep comments between callee and its opener on the callee side (#27172) (leaysgur)
  • 6da7657 oxfmt: Render diagnostics with source in Stdin mode (#27130) (leaysgur)
  • e9b2ec5 oxfmt/lsp: Reload .prettierignore on watched file change (#27129) (leaysgur)
  • 30eb463 oxfmt: Check global ignores before resolving nested config in Stdin mode (#27128) (leaysgur)

⚡ Performance

  • 72f42a3 formatter_markdown: Pre-allocate the IR buffer (#27333) (leaysgur)
  • cea47e3 formatter_core: Avoid exponential will_break check on nested interned (#27211) (leaysgur)
  • 0aba566 oxfmt: Do not resolve root js config from nested context (#27147) (leaysgur)

📚 Documentation

  • 51506c6 formatter_css: Record divergences found in mdn-content (css-in-md) (#27327) (leaysgur)
  • 656b81c formatter_markdown: Record unclosed fences closing at a directive's closer (#27279) (leaysgur)
  • 66545bf formatter_markdown: Record setext heading wrap divergence (#27221) (leaysgur)
  • af4b269 oxfmt: Document why format() API does not take cwd (#27131) (leaysgur)

oxfmt v0.71.0

🚀 Features

  • e0b1f9f oxfmt: Bump bundled Prettier version to 3.9.9 (#27002) (leaysgur)
  • 342527d oxfmt: Bump bundled Prettier version to 3.9.8 (#26999) (leaysgur)

... (truncated)

Commits

Updates oxlint from 1.78.0 to 1.87.0

Release notes

Sourced from oxlint's releases.

oxlint v1.87.0

🚀 Features

  • 42dcfd2 linter/react/no-unescaped-entities: Implement suggestion (#27292) (Mikhail Baev)
  • cd4510d linter/unicorn/no-useless-switch-case: Implement suggestion (#27245) (Mikhail Baev)
  • 1a7c902 linter/react/jsx-no-target-blank: Implement suggestion (#27181) (Mikhail Baev)

🐛 Bug Fixes

  • 176b4b9 linter/jsx-a11y/label-has-associated-control: Validate label attribute values (#27302) (sama Pyb)
  • 7d381c3 linter/jsx-a11y/mouse-events-have-key-events: Handle nullish event handlers (#27306) (sama Pyb)
  • 4e09837 linter/jsx-a11y/lang: Validate lang expression strings (#27304) (sama Pyb)
  • 7d28a66 linter/unicorn/numeric-separators-style: Report misgrouped BigInt literals (#27207) (breken)
  • e928322 linter/unicorn/no-zero-fractions: Parenthesize separator and large integers in fixer (#27206) (breken)
  • 3d61a59 parser: Validate TypeScript type member separators (#27222) (camc314)
  • f08236b linter/eslint/prefer-exponentiation-operator: Preserve autofix precedence (#27150) (camc314)
  • 7d60ae3 linter/valid-title: Continue checks after allowed words (#27146) (Cameron)
  • ad5dd5d linter/eslint/no-unused-vars: Respect disabled argument checks for used ignore patterns (#26925) (camc314)

oxlint v1.86.0

🚀 Features

  • 9d80eed linter/react/only-export-components: Support allowCompoundComponents (#27117) (Kuroda Kayn)
  • e05b155 linter: Add typescript/no-generated-empty-object-type (#26958) (camc314)

🐛 Bug Fixes

  • 8306aa4 linter/typescript/no-unnecessary-parameter-property-assignment: Account for parameter property reassignment (#26955) (camc314)
  • 42dfbb5 linter/eslint/one-var: Keep declare when splitting declarations (#27081) (Cheolhee Lee)
  • 2ba7e33 linter/eslint/require-await: Count await using as an await (#27080) (Cheolhee Lee)
  • 611e4ed linter/plugins: Include executing selectors in JS plugin rule timings (#27111) (overlookmotel)
  • 2cac66f react-compiler: Handle recursive function expressions (#26796) (Brennan Butler)
  • e996e6c react-compiler: Treat zero-argument new Date as impure (#26894) (Boshen)
  • 571cfa3 oxlint: Skip type-aware lint rules in type-check-only mode (#27076) (camc314)
  • d0b2462 oxlint: Skip undefined children in CFG walker (#27075) (camc314)
  • 5186328 parser: Handle HTML comment values (#22933) (Boshen)
  • 0b630e8 linter/typescript/unified-signatures: Align rule with upstream (#26956) (camc314)
  • ebb22f1 linter/node/no-exports-assign: Change category from style to suspicious (#26555) (Bartok)
  • cce28a0 linter/import/no-duplicates: Distinguish import attributes (#26936) (camc314)
  • feb733b linter/unicorn/prefer-spread: Stop checking string split calls (#26935) (camc314)
  • 929e154 linter/eslint/no-unused-vars: Honor ignore patterns inside array rest bindings (#26923) (camc314)
  • 5bdb9b8 linter/eslint/no-unused-vars: Recognize consumed update expressions (#26782) (camc314)
  • 5c05bef linter/eslint/prefer-const: Ignore embedded assignments (#26920) (camc314)

⚡ Performance

  • ded4c29 linter/eslint/no-unused-vars: Skip sequence checks when absent (#26921) (camc314)

oxlint v1.85.0

🚀 Features

... (truncated)

Changelog

Sourced from oxlint's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

[1.88.0] - 2026-10-13

🚀 Features

  • 3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#27346) (Mikhail Baev)

[1.86.0] - 2026-09-28

🚀 Features

  • 9d80eed linter/react/only-export-components: Support allowCompoundComponents (#27117) (Kuroda Kayn)
  • e05b155 linter: Add typescript/no-generated-empty-object-type (#26958) (camc314)

[1.82.0] - 2026-09-07

🚀 Features

  • 6a0e19c linter/eslint/no-unmodified-loop-condition: Support checkConditionalExpressions option (#26249) (camc314)

[1.81.0] - 2026-08-31

📚 Documentation

  • d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

  • 8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

🐛 Bug Fixes

  • 228e8e0 linter: Resolve inactive React compiler rules (#25830) (Boshen)
  • aa49d86 linter: Allow spread rule options in config types (#25675) (ch3rry)
  • 36f8451 linter/eslint/no-eval: Align indirect default with ESLint (#25656) (camc314)
  • beb724d linter/eslint/no-unused-vars: Report bare underscore parameters (#25663) (camc314)
  • 4004c10 linter/eslint/no-irregular-whitespace: Check comments by default (#25660) (camc314)
  • 285820e linter/no-large-snapshots: Precompile and document allowed snapshot matchers (#25611) (Mikhail Baev)
  • 4df5835 linter: Allow capitalized built-in calls (#25516) (Boshen)
Commits
  • 2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
  • 2ae2939 release(apps): oxlint v1.86.0 && oxfmt v0.71.0 (#27132)
  • 9d80eed feat(linter/react/only-export-components): support allowCompoundComponents ...
  • e05b155 feat(linter): add typescript/no-generated-empty-object-type (#26958)
  • 88a0096 chore(oxlint): require tsgolint 7.0.2003 (#27021)
  • 288d8cc release(apps): oxlint v1.85.0 && oxfmt v0.70.0 (#26903)
  • f02a64a release(apps): oxlint v1.84.0 && oxfmt v0.69.0 (#26874)
  • 7bf68f7 release(apps): oxlint v1.83.0 && oxfmt v0.68.0 (#26631)
  • b4da00b release(apps): oxlint v1.82.0 && oxfmt v0.67.0 (#26384)
  • aa38ddf fix(linter/unicorn/numeric-separators-style): correct schema defaults (#26393)
  • Additional commits viewable in compare view

Updates oxlint-tsgolint from 7.0.2001 to 7.0.2004

Release notes

Sourced from oxlint-tsgolint's releases.

v7.0.2004

What's Changed

New Contributors

Full Changelog: oxc-project/tsgolint@v7.0.2003...v7.0.2004

v7.0.2003

What's Changed

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 23, 2026
@albert20260301

albert20260301 commented Sep 23, 2026

Copy link
Copy Markdown
Contributor

@francoischalifour this update’s required verification fails in cli/src/ui/prompts.ts:68 after upgrading TypeScript to 7.0.2:

TS2322: Type 'string | symbol' is not assignable to type 'string'.

main is currently healthy on TypeScript 6.0.3. PR #114 (the prior TypeScript 6 compatibility stack) was automatically closed when its Dependabot base #112 became obsolete. Please decide whether we should make TypeScript 7 compatible or keep TypeScript pinned at 6; this dependency PR should remain unmerged until then.

@albert20260301

albert20260301 commented Sep 28, 2026

Copy link
Copy Markdown
Contributor

@francoischalifour following up on the TypeScript 7 upgrade decision: required verification still fails with TS2322 in cli/src/ui/prompts.ts:68, while main remains healthy on TypeScript 6.0.3. Please decide whether to make the CLI TypeScript 7 compatible or retain the TypeScript 6 pin; PR #116 should remain unmerged until then.

@dependabot
dependabot Bot force-pushed the dependabot/bun/cli/cli-dependencies-c8c0530b59 branch 6 times, most recently from 583d7ff to 908858d Compare October 2, 2026 20:31
@albert20260301

albert20260301 commented Oct 3, 2026

Copy link
Copy Markdown
Contributor

@francoischalifour The refreshed verification still fails with TS2322 at cli/src/ui/prompts.ts:68 after the TypeScript 7.0.2 update; main remains healthy on TypeScript 6.0.3.

Please decide whether to make the CLI TypeScript 7 compatible or retain the TypeScript 6 pin. This Dependabot PR should remain unmerged until then.

@albert20260301

albert20260301 commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

@francoischalifour required verification still fails with TS2322 in cli/src/ui/prompts.ts:68 after the TypeScript 7.0.2 update, while main remains healthy on TypeScript 6.0.3. Please decide whether to make the CLI TypeScript 7 compatible or retain the TypeScript 6 pin; this PR must remain unmerged until then.

@dependabot
dependabot Bot force-pushed the dependabot/bun/cli/cli-dependencies-c8c0530b59 branch from 908858d to e539dc6 Compare October 8, 2026 14:49
@albert20260301

albert20260301 commented Oct 10, 2026

Copy link
Copy Markdown
Contributor

@francoischalifour required verification still fails with TS2322 in cli/src/ui/prompts.ts:68 after the TypeScript 7.0.2 update, while main remains healthy on TypeScript 6.0.3. Could you decide whether to make the CLI TypeScript 7 compatible or retain the TypeScript 6 pin? This PR must remain unmerged until then.

@dependabot
dependabot Bot force-pushed the dependabot/bun/cli/cli-dependencies-c8c0530b59 branch 2 times, most recently from af2ef0f to f680ec6 Compare October 13, 2026 12:51
@albert20260301

albert20260301 commented Oct 13, 2026

Copy link
Copy Markdown
Contributor

@francoischalifour The refreshed Dependabot run still fails the required verification after TypeScript 7.0.2. The unresolved decision remains whether to make the CLI TypeScript 7 compatible or retain the TypeScript 6 pin; please decide before this PR is merged.

@dependabot
chore(deps): bump the cli-dependencies group across 1 directory with …
42349cd 
…9 updates

Bumps the cli-dependencies group with 9 updates in the /cli directory:

| Package | From | To |
| --- | --- | --- |
| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.7.0` | `1.8.1` |
| [oauth4webapi](https://github.com/panva/oauth4webapi) | `3.8.7` | `3.8.8` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |
| [eslint-plugin-no-relative-import-paths](https://github.com/MelvinVermeer/eslint-plugin-no-relative-import-paths) | `1.6.1` | `1.7.3` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.32.2` | `6.41.0` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.63.0` | `0.72.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.78.0` | `1.87.0` |
| [oxlint-tsgolint](https://github.com/oxc-project/tsgolint) | `7.0.2001` | `7.0.2004` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |



Updates `@clack/prompts` from 1.7.0 to 1.8.1
- [Release notes](https://github.com/bombshell-dev/clack/releases)
- [Changelog](https://github.com/bombshell-dev/clack/blob/main/packages/prompts/CHANGELOG.md)
- [Commits](https://github.com/bombshell-dev/clack/commits/@clack/prompts@1.8.1/packages/prompts)

Updates `oauth4webapi` from 3.8.7 to 3.8.8
- [Release notes](https://github.com/panva/oauth4webapi/releases)
- [Changelog](https://github.com/panva/oauth4webapi/blob/main/CHANGELOG.md)
- [Commits](panva/oauth4webapi@v3.8.7...v3.8.8)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

Updates `eslint-plugin-no-relative-import-paths` from 1.6.1 to 1.7.3
- [Release notes](https://github.com/MelvinVermeer/eslint-plugin-no-relative-import-paths/releases)
- [Commits](MelvinVermeer/eslint-plugin-no-relative-import-paths@v1.6.1...1.7.3)

Updates `knip` from 6.32.2 to 6.41.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.41.0/packages/knip)

Updates `oxfmt` from 0.63.0 to 0.72.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.72.0/npm/oxfmt)

Updates `oxlint` from 1.78.0 to 1.87.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.87.0/npm/oxlint)

Updates `oxlint-tsgolint` from 7.0.2001 to 7.0.2004
- [Release notes](https://github.com/oxc-project/tsgolint/releases)
- [Commits](oxc-project/tsgolint@v7.0.2001...v7.0.2004)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

---
updated-dependencies:
- dependency-name: "@clack/prompts"
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: eslint-plugin-no-relative-import-paths
  dependency-version: 1.7.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: knip
  dependency-version: 6.37.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: oauth4webapi
  dependency-version: 3.8.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cli-dependencies
- dependency-name: oxfmt
  dependency-version: 0.68.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: oxlint
  dependency-version: 1.83.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: oxlint-tsgolint
  dependency-version: 7.0.2002
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: cli-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: cli-dependencies
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cli-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bun/cli/cli-dependencies-c8c0530b59 branch from f680ec6 to 42349cd Compare October 14, 2026 21:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@albert20260301