Skip to content

chore(deps): bump inquirer from 13.3.0 to 13.3.2#304

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/inquirer-13.3.2
Open

chore(deps): bump inquirer from 13.3.0 to 13.3.2#304
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/inquirer-13.3.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Bumps inquirer from 13.3.0 to 13.3.2.

Release notes

Sourced from inquirer's releases.

inquirer@13.3.2

  • Fix broken 1.3.1 release process.

inquirer@13.3.1

  • Bump dependencies
Commits
  • b218fcc chore: Publish new release
  • b6aabed fix: set prepublish script
  • 1ce0319 chore: Publish new release
  • 62a1b2d Merge pull request #2031 from SBoudrias/sboudrias/debug-xterm-80g
  • 09fcc6c chore(@​inquirer/testing): fix formatting
  • 56bdf30 fix(@​inquirer/testing): resolve xterm CJS named export error under native Nod...
  • 58d3bf0 chore(deps): Bump brace-expansion from 1.1.11 to 1.1.12 (#2029)
  • f9a3adb Merge pull request #2026 from SBoudrias/emdash/semver-315
  • 264f5da chore(setup-packages): simplify coerce using tryParseRange
  • feab678 chore(setup-packages): replace semver with std-semver
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [inquirer](https://github.com/SBoudrias/Inquirer.js) from 13.3.0 to 13.3.2.
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/inquirer@13.3.0...inquirer@13.3.2)

---
updated-dependencies:
- dependency-name: inquirer
  dependency-version: 13.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 16, 2026

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@chatgpt-codex-connector
Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

@github-actions github-actions bot added the chore label Mar 16, 2026
@github-actions
Copy link
Copy Markdown
Contributor

✔️ Bundle Size Analysis

Metric Value
Base 2638.70 KB
PR 2638.70 KB
Diff 0 KB (0%)
Bundle breakdown
156K	dist/auth
80K	dist/automation
4.0K	dist/cli.d.ts
4.0K	dist/cli.d.ts.map
20K	dist/cli.js
12K	dist/cli.js.map
584K	dist/commands
28K	dist/config
4.0K	dist/index.d.ts
4.0K	dist/index.d.ts.map
4.0K	dist/index.js
4.0K	dist/index.js.map
896K	dist/integrations
100K	dist/llm
1.2M	dist/loop
188K	dist/mcp
60K	dist/presets
92K	dist/setup
40K	dist/skills
392K	dist/sources
76K	dist/ui
144K	dist/utils
336K	dist/wizard

Copy link
Copy Markdown

@claude claude bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM — straightforward Dependabot patch bump of inquirer (13.3.0 → 13.3.2), lock file only.

Extended reasoning...

Overview

This is an automated Dependabot PR that bumps inquirer from 13.3.0 to 13.3.2. The only file changed is pnpm-lock.yaml. The upstream release notes indicate 13.3.1 was a dependency bump and 13.3.2 fixed a broken release process — purely maintenance changes.

Security risks

None. This is a patch version bump of a CLI prompting library with no security-sensitive surface. The lock file changes are all consistent version bumps of @inquirer/* sub-packages and an incidental @sourcegraph/amp transitive dependency update.

Level of scrutiny

Minimal scrutiny required. This is a lock-file-only patch bump generated by Dependabot for a non-security-critical dev dependency. No source code, configuration, or CI pipelines are modified.

Other factors

No outstanding reviewer comments. No bugs found. The PR is fully mechanical with no design decisions involved. The package.json specifier (^13.2.2) already permitted this range, so no semver policy change is needed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants