Skip to content

chore(deps): bump the dependencies group with 4 updates - #4887

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-bb5913f031
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-bb5913f031

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 30, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 4 updates: coffeescript, pkg-pr-new, @inquirer/expand and @inquirer/select.

Updates coffeescript from 2.7.0 to 2.7.1

Release notes

Sourced from coffeescript's releases.

2.7.1

  • Compatibility with Node 22 and later: stack trace patching and source maps now work correctly, and the new with { type: 'json' } import attributes syntax is supported alongside assert.
  • Numeric literals now support a capital E in scientific notation, and method calls on numbers with underscores such as 1_000.toString() now compile correctly.
  • Performance improvements to the flatten helper (no longer recursive), checkShebangLine and the number-matching regular expressions.
  • Documentation fixes: code snippets now run correctly again, and a hover line-height shift was fixed.
  • Continuous integration now tests Node 16 through 26.

New Contributors

Full Changelog: https://github.com/jashkenas/coffeescript/compare/2.7.0…2.7.1

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for coffeescript since your current version.


Updates pkg-pr-new from 0.0.91 to 0.0.92

Commits

Updates @inquirer/expand from 5.1.7 to 5.1.8

Commits
  • 672b77f chore: Publish new release
  • 8e66d58 fix(@​inquirer/password): keep trailing space after message in empty state
  • 98f5ad3 fix(turbo): hash nested source files in tsc task cache inputs
  • 5239f87 fix(core): don't drop piped stdin answers in first-render deferral
  • 69b4eec ci: run windows unit tests on node 26 only (#2358)
  • 483e52a test(demo): replace 3s real-time wait with fake timers in slow-validation tes...
  • 071edfc ci: overwrite the runner's stale yarn shims instead of reinstalling corepack ...
  • e38e706 ci: cancel superseded CI runs with a concurrency group (#2354)
  • 629a91d ci: drop 'needs: Compile' from Linting/e2e/deno-pack (#2353)
  • 5e9227c ci: run coverage and codecov on the ubuntu node-26 unit cell only (#2351)
  • Additional commits viewable in compare view

Updates @inquirer/select from 5.2.7 to 5.2.8

Commits
  • 672b77f chore: Publish new release
  • 8e66d58 fix(@​inquirer/password): keep trailing space after message in empty state
  • 98f5ad3 fix(turbo): hash nested source files in tsc task cache inputs
  • 5239f87 fix(core): don't drop piped stdin answers in first-render deferral
  • 69b4eec ci: run windows unit tests on node 26 only (#2358)
  • 483e52a test(demo): replace 3s real-time wait with fake timers in slow-validation tes...
  • 071edfc ci: overwrite the runner's stale yarn shims instead of reinstalling corepack ...
  • e38e706 ci: cancel superseded CI runs with a concurrency group (#2354)
  • 629a91d ci: drop 'needs: Compile' from Linting/e2e/deno-pack (#2353)
  • 5e9227c ci: run coverage and codecov on the ubuntu node-26 unit cell only (#2351)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 4 updates: [coffeescript](https://github.com/jashkenas/coffeescript), [pkg-pr-new](https://github.com/stackblitz-labs/pkg.pr.new/tree/HEAD/packages/cli), [@inquirer/expand](https://github.com/SBoudrias/Inquirer.js) and [@inquirer/select](https://github.com/SBoudrias/Inquirer.js).


Updates `coffeescript` from 2.7.0 to 2.7.1
- [Release notes](https://github.com/jashkenas/coffeescript/releases)
- [Commits](jashkenas/coffeescript@2.7.0...2.7.1)

Updates `pkg-pr-new` from 0.0.91 to 0.0.92
- [Commits](https://github.com/stackblitz-labs/pkg.pr.new/commits/v0.0.92/packages/cli)

Updates `@inquirer/expand` from 5.1.7 to 5.1.8
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/expand@5.1.7...@inquirer/expand@5.1.8)

Updates `@inquirer/select` from 5.2.7 to 5.2.8
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/select@5.2.7...@inquirer/select@5.2.8)

---
updated-dependencies:
- dependency-name: coffeescript
  dependency-version: 2.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pkg-pr-new
  dependency-version: 0.0.92
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@inquirer/expand"
  dependency-version: 5.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@inquirer/select"
  dependency-version: 5.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 30, 2026
@changeset-bot

changeset-bot Bot commented Oct 30, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 56b487a

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@webpack
webpack Bot enabled auto-merge (squash) October 30, 2026 14:44
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpkg-pr-new@​0.0.91 ⏵ 0.0.92100 +110070 +196 +1100
Updatedcoffeescript@​2.7.0 ⏵ 2.7.199 +31009289 +6100
Updated@​inquirer/​select@​5.2.7 ⏵ 5.2.810010010095 -1100
Updated@​inquirer/​expand@​5.1.7 ⏵ 5.1.810010010095 -1100

View full report

@alexander-akait

Copy link
Copy Markdown
Member

@dependabot rebasw

@alexander-akait

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Oct 30, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 30, 2026
auto-merge was automatically disabled October 30, 2026 17:28

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dependencies-bb5913f031 branch October 30, 2026 17:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant