chore(deps): bump inquirer from 8.2.6 to 10.0.2

[dependabot]

Bumps inquirer from 8.2.6 to 10.0.2.

Release notes

Sourced from inquirer's releases.

[email protected]

• Re-implemented with Typescript.
• Adding CJS support (now inquirer is publishes a dual-build CJS/ESM.)
• All core prompts are now coming from @inquirer/prompt.
• Custom prompts now should be implemented with @inquirer/core. Custom prompts built on [email protected] will keep working, but should plan a migration.
• inquirer.ui.BottomBar is deleted.

My expectation is that this release should be a drop-in replacement for people using inquirer.prompt() and built-ins 🤞🏻. Please open an issue on Github if you run into issues migrating; it's a large rewrite and there might be a few sharp edges to cut! Hope you'll like this new release.

[email protected]

• Fix issue with plugins relying on internal inquirer packages file structure.

[email protected]

• Fix risk of prototype injection.

[email protected]

• Replace chalk with picolors (in 9.3.2 went to yoctocolors to stay with Sindre's packages and reduce amount of provenance.)
• Drop many dependencies in favour of native functions when possible.

No impact expected, but it's a large changes in dependencies. Let us know if you run into any issues upgrading!

[email protected]

• editor prompt: Fixed compatibility issue between default and waitUserInput options. #1405

[email protected]

• On windows, we will now use unicode characters whenever possible

[email protected]

• Modified lodash imports to help with tree-shaking
• Replace unmaintained through dependency (only affect users of the old bottom bar)

[email protected]

Fix issue with the default value disappearing from prompt.

[email protected]

Inquirer is now a native Node ECMAScript module. This will require your Node runtime to support es modules, and your app to be an es module. Node documentation over here: https://nodejs.org/api/esm.html#modules-ecmascript-modules

If you cannot migrate, please remember you can keep using the v8.x release line until you're ready.

@​inquirer/core@​9.0.0

• Small breaking change: type InquirerReadline is now part of the @inquirer/type library and should be imported from there if needed.

Commits

• eb7a658 Publish
• e4e1054 Chore(dev-deps): Bump dev-deps
• 8523249 Fix(typescript): Allow extending inquirer with custom prompts
• 950158b Chore(inquirer): Refactor prompt class
• 0dcd9f7 Chore(dev-deps): Bump dev-deps
• a48d2bd Feat(@​inquirer/type): Add new utility types to @​inquirer/type + vitest type t...
• b43cd2d Chore(tests): Update Turbo + Github actions to run everything
• 55ae385 Chore(testing): Typecheck test files
• 139ab02 Chore(deps): Bump
• f3dfcce Publish
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #16137.