[dependabot]

Bumps the minor-and-patch group with 4 updates in the / directory: @inquirer/prompts, execa, @types/node and typescript-eslint.

Updates @inquirer/prompts from 8.7.3 to 8.7.5

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.7.5

What's new

• Dependencies updated: @inquirer/password@5.2.5 fixes the cursor overlapping the message when the password prompt is empty (#2360), and @inquirer/core@12.0.6 fixes piped-stdin answers being dropped before the first render (#2359)

@​inquirer/prompts@​8.7.4

What's new

• checkbox() no longer accepts edits or submissions while an async validator is pending — the selection is captured at submit time, and repeated Enter presses don't run the validator more than once (@inquirer/checkbox, #2296).
• Prompt output no longer leaks when a prompt is cancelled or aborted before its first render — the deferred initial render is now cancelled during cleanup, so a settled prompt never writes to an ended output stream or reinstalls keypress listeners (@inquirer/core, #2318, relates to #1816).
• number() now treats whitespace-only input as empty, so a space-padded submit resolves to the default/undefined answer instead of a validation error (@inquirer/number, #2307).
• Packages with only test-file changes are no longer version-bumped at release time (internal tooling; #2319).

Included

• @inquirer/checkbox@^5.2.7
• @inquirer/confirm@^6.3.4
• @inquirer/editor@^5.3.5
• @inquirer/expand@^5.1.7
• @inquirer/input@^5.1.8
• @inquirer/number@^4.2.5
• @inquirer/password@^5.2.4
• @inquirer/rawlist@^5.3.7
• @inquirer/search@^4.3.5
• @inquirer/select@^5.2.7

Commits

• 672b77f chore: Publish new release
• 8e66d58 fix(@​inquirer/password): keep trailing space after message in empty state
• 98f5ad3 fix(turbo): hash nested source files in tsc task cache inputs
• 5239f87 fix(core): don't drop piped stdin answers in first-render deferral
• 69b4eec ci: run windows unit tests on node 26 only (#2358)
• 483e52a test(demo): replace 3s real-time wait with fake timers in slow-validation tes...
• 071edfc ci: overwrite the runner's stale yarn shims instead of reinstalling corepack ...
• e38e706 ci: cancel superseded CI runs with a concurrency group (#2354)
• 629a91d ci: drop 'needs: Compile' from Linting/e2e/deno-pack (#2353)
• 5e9227c ci: run coverage and codecov on the ubuntu node-26 unit cell only (#2351)
• Additional commits viewable in compare view

Updates execa from 10.1.1 to 10.2.1

Release notes

Sourced from execa's releases.

v10.2.1

• Fix types compatibility with exactOptionalPropertyTypes 2b6988b1

---

sindresorhus/execa@v10.2.0...v10.2.1

v10.2.0

Behavior changes

These are bug fixes, but they might affect code that relied on the previous incorrect behavior.

• Exceeding maxBuffer now terminates the subprocess with killSignal, instead of leaving it running and the promise pending f6de9be
• maxBuffer: 0 now limits the output of synchronous methods, like asynchronous methods 224dd20
• Options of $ set to undefined now use $'s defaults, such as inheriting stdin f61a6e9

Fixes

• Fix invalid file descriptor objects, such as closed file handles, crashing the current process instead of throwing d0a5968
• Fix synchronous transforms: errors being hidden, filtered output being returned on failure, mixed text and byte chunks being reordered, and final() being skipped without input 0ba2b6e ed80079 9c54833
• Fix result.all changing objects when only stdout or stderr is buffered 8629132
• Fix writing objects to a web WritableStream 5ea2900
• Fix an invalid subprocess.duplex() option making later stream conversions hang 5e4345b
• Fix execaNode() not running its file when the current process uses --print e747872

Types

• Fix result and subprocess types when the options are a union, including IPC f5772f3 355d917 cb8aaf6
• Fix result types when options bound with execa(options) are overridden or reset with undefined 708fed7
• Fix subprocess.stdin types with the input and inputFile options 236c831
• Fix chunk types of subprocess.iterable() with object-mode transforms a2912e5
• Fix fd-specific option types, and execaNode() types with node: undefined 80b01e9 523cf9b

---

sindresorhus/execa@v10.1.1...v10.2.0

Commits

• 247faa0 10.2.1
• e375b0b Fix tests
• 2b6988b Fix types compatibility with exactOptionalPropertyTypes
• e7e0664 Fix flaky Windows test cleanup of copied executables
• a605753 10.2.0
• b87aab7 Fix link check in type tests
• cb8aaf6 Fix IPC types for option unions
• 80b01e9 Fix fd-specific option types
• 355d917 Fix subprocess stream types for option unions
• 523cf9b Fix execaNode() result types when the node option is undefined
• Additional commits viewable in compare view

Updates @types/node from 26.6.5 to 26.6.6

Commits

• See full diff in compare view

Updates typescript-eslint from 8.71.2 to 8.72.1

Release notes

Sourced from typescript-eslint's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

• eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
• eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
• typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

• eslint-plugin: lazy load rules (#13010)
• eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
• typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

• ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
• eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
• eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
• eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
• eslint-plugin: [require-array-sort-compare] check tuples (#13058)
• eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
• type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
• typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Junichiro Kasuya @​jksy
• Mitch Fultz @​fitchmultz
• Shaan GS @​ShaanGS

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.72.1 (2026-10-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.0 (2026-10-19)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 4ad6b75 chore(release): publish 8.72.1
• 7757694 chore: cleanup typecheck & build and fix race condition (#13071)
• a4c2603 chore(release): publish 8.72.0
• See full diff in compare view

[github-actions]

🛡️ node9 agent-security · ✅

This PR introduces no agent-security findings.

0 finding(s) · · technical details