Skip to content

build(deps): bump inquirer from 13.4.2 to 14.0.2 - #81

Merged
sjsyrek merged 1 commit into
mainfrom
dependabot/npm_and_yarn/main/inquirer-14.0.2
Jul 27, 2026
Merged

build(deps): bump inquirer from 13.4.2 to 14.0.2#81
sjsyrek merged 1 commit into
mainfrom
dependabot/npm_and_yarn/main/inquirer-14.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 30, 2026

Copy link
Copy Markdown
Contributor

Bumps inquirer from 13.4.2 to 14.0.2.

Release notes

Sourced from inquirer's releases.

inquirer@14.0.2

  • Fix security warnings in external-editor

inquirer@14.0.1

  • Rolled back mute-stream dependency from v4 to v3 to undo breaking compatible engines.
  • Added tooling to prevent regression of the above in the future. This surfaced our min engines already enforced a higher limit, so adjusted the explicit limits to match the current state.

inquirer@14.0.0

  • Fix (breaking): Inquirer will now throw when encountering non-registered prompt. Prior to this fix, Inquirer would default to type: 'input' in such cases - this behaviour was misleading and made it harder to detect broken code when not using Typescript.
  • Feat: Read env variable INQUIRER_KEYBINDINGS to enable vim or emacs keybindings; making this a user preference instead of a library author preference. One caveat is doing so disable the search feature in the select prompt. Syntax: INQUIRER_KEYBINDINGS=vim,emacs.
  • Fix: Line wraps would sometime cause the cursor to be mispositioned relative to the input.
  • Chore: Dropped the rxjs dependency in favor of a lightweight internal Observable implementation. The package is much smaller for most users now.
  • Chore: Bump dependencies.

inquirer@13.4.3

  • Fix: Windows rendering bug
  • Fix: Preserve exact literal types in choices array (Typescript only)
  • Fix: Allow input default value to be of type undefined (Typescript only)
  • Bump dependencies
Commits
  • bfd8710 chore: Publish new release
  • 55cc5f3 feat: add reusable package lint CLI
  • 3af9ed0 test(inquirer): capture prompt runner output
  • 4381857 fix(@​inquirer/input): remove stale lint suppression
  • 45df331 fix(@​inquirer/external-editor): harden editor temp files
  • adef323 chore: limit CI token permissions
  • b43359d chore: Publish new release
  • 24ecae2 chore: fix yarn.lock
  • b078d97 fix: validate package engine compatibility
  • 3a49f9f chore(deps-dev): Bump oxfmt in the formatting group (#2143)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 30, 2026
Bumps [inquirer](https://github.com/SBoudrias/Inquirer.js) from 13.4.2 to 14.0.2.
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/inquirer@13.4.2...inquirer@14.0.2)

---
updated-dependencies:
- dependency-name: inquirer
  dependency-version: 14.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/inquirer-14.0.2 branch from 5107664 to 10962b6 Compare July 27, 2026 18:26
@sjsyrek

sjsyrek commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

Rebasing onto current main. The prior run's only failure was a flaky 10s timeout in SyncCommand › watchAndSync › config cache across watch ticks (tests/unit/sync/sync-command.test.ts:1194) — a timeout rather than an assertion, and unrelated to inquirer. main has since moved to a Node 24 CI matrix, so this needs a fresh run against it.

@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@sjsyrek sjsyrek left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved: green on Node 24 after rebase. The earlier failure was a flaky timeout in an unrelated watch test (tracked separately), not caused by inquirer.

@sjsyrek
sjsyrek merged commit a1e0ed1 into main Jul 27, 2026
2 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/main/inquirer-14.0.2 branch July 27, 2026 18:46
sjsyrek added a commit that referenced this pull request Jul 27, 2026
The watchAndSync block intermittently failed CI on unrelated dependency
PRs (#81 Jun 30 Node 22, #91 and #93 Jul 27 Node 24), always as a 10s
test timeout and never as an assertion, hitting a different test each
time. Both #81 and #91 passed on plain re-run with no code change.

Three changes, in order of importance:

1. jest.setTimeout(30_000) for the block. The suite runs in ~1.8s locally
   but was observed at 10.8-10.9s on GitHub runners with 232 suites
   competing for ~4 cores — i.e. sitting on the 10s default, which tipped
   an arbitrary test over each time. This is the headroom the block
   actually needed.

2. flushWatchSetup now waits for an observable readiness signal
   (mockWatcherOn having been called) instead of burning a fixed round
   count, then drains a settle budget. attachDebouncedWatchLoop calls
   watcher.on() in the same synchronous continuation as the
   process.on('SIGINT') registration, so listeners-attached implies the
   handler each test uses for shutdown is registered. A fixed count could
   under-wait; this cannot. On a genuine stall it throws with the pending
   state instead of timing out mutely.

3. Settle rounds 250 -> 25. Every test in the block passes with as few as
   5 (measured), so 25 keeps a 5x margin.

On method: the historical escalation was 20 -> 50 -> 250 rounds, each
assuming the budget was too small. Suite duration is flat across
250/25/5 rounds, so widening it could never have worked. Four further
hypotheses were tested and disproven — slow sweepStaleBackups I/O (its
projectRoot '/test' does not exist, so readdir ENOENTs immediately), a
hang in controller.shutdown() (microtask-only), expensive flush rounds
(0.00ms per 250), and CPU contention (old code passed 12/12 under 16
spinners on 11 cores). Details in bead sync-94ua.

Honest limitation: the flake could not be reproduced locally — ~58 runs
across five contention profiles (CPU, I/O+CPU, full-suite, starved
budget) produced one failure whose identity was lost. So this targets the
signature the evidence supports rather than a reproduction, and the new
diagnostic ensures the next occurrence identifies itself.

Verified: 49 tests in the block pass; 20/20 under combined I/O and CPU
contention; lint, type-check, and 5501 tests green on Node 24.18.0.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant