Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 13, 2025

This PR contains the following updates:

Package Type Update Change OpenSSF
@inquirer/core (source) dependencies minor 10.2.2 -> 10.3.0 OpenSSF Scorecard

Release Notes

SBoudrias/Inquirer.js (@​inquirer/core)

v10.3.0

Compare Source

  • isUpKey/isDownKey now accepts a second parameters keybindings: ['vim', 'emacs'] that'll match up/down actions done with the keybindings specific to those editors.

Configuration

📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Dependency updates label Oct 13, 2025
@renovate renovate bot enabled auto-merge (squash) October 13, 2025 22:54
@github-actions github-actions bot added qa:running QA workflow is currently running status:approved Pull request has been approved labels Oct 13, 2025
@github-actions
Copy link

github-actions bot commented Oct 13, 2025

📦 Packages

Package NPM Docker
SDK Cli @settlemint/sdk-cli@2.6.2-prdb997191
SDK The Graph @settlemint/sdk-thegraph@2.6.2-prdb997191
SDK Portal @settlemint/sdk-portal@2.6.2-prdb997191
SDK Hasura @settlemint/sdk-hasura@2.6.2-prdb997191
SDK JS @settlemint/sdk-js@2.6.2-prdb997191
SDK Utils @settlemint/sdk-utils@2.6.2-prdb997191
SDK Next @settlemint/sdk-next@2.6.2-prdb997191
SDK Minio @settlemint/sdk-minio@2.6.2-prdb997191
SDK IPFS @settlemint/sdk-ipfs@2.6.2-prdb997191
SDK Blockscout @settlemint/sdk-blockscout@2.6.2-prdb997191
SDK MCP @settlemint/sdk-mcp@2.6.2-prdb997191
SDK Viem @settlemint/sdk-viem@2.6.2-prdb997191
SDK EAS @settlemint/sdk-eas@2.6.2-prdb997191

@github-actions github-actions bot added qa:success QA workflow passed successfully status:ready-for-review Pull request is ready for review status:mergeable Pull request is approved, tests pass, and ready to merge and removed qa:running QA workflow is currently running status:ready-for-review Pull request is ready for review status:approved Pull request has been approved labels Oct 13, 2025
"docs": "bun scripts/create-docs.ts",
"prepack": "cp ../../LICENSE ."
},
"dependencies": {

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Potential bug: Due to a version mismatch in @inquirer/core, instanceof checks for prompt cancellation errors fail, leading to incorrect error handling.
  • Description: The build process bundles @inquirer/core@10.3.0 but leaves other @inquirer/* packages as external, which then resolve to @inquirer/core@10.2.2 from the lockfile. When a user cancels a prompt (e.g., with Ctrl+C), an error like ExitPromptError is thrown by a package using v10.2.2. The main error handler in sdk/cli/src/commands/index.ts checks error instanceof ExitPromptError using the class from the bundled v10.3.0. This check fails because the error instance and the class constructor are from different module versions. Consequently, instead of a graceful exit, the CLI reports an "Unknown error" and exits with code 1.

  • Suggested fix: Ensure all @inquirer/* packages, including @inquirer/core, are treated consistently in the build configuration. Either bundle all of them or mark all of them as external in tsdown.config.ts to prevent version mismatches. Aligning all @inquirer/* dependencies to the same version in package.json is also necessary to ensure instanceof checks work correctly.
    severity: 0.85, confidence: 1.0

Did we get this right? 👍 / 👎 to inform future reviews.

Copy link

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 2 files

Prompt for AI agents (all 1 issues)

Understand the root cause of the following 1 issues and fix them.


<file name="bun.lock">

<violation number="1" location="bun.lock:51">
Updating `@inquirer/core` in isolation breaks error handling for prompts. Other `@inquirer/*` packages still use an older version, causing `instanceof` checks on error types to fail due to version mismatch. This will treat user-cancelled prompts as crashes.</violation>
</file>

React with 👍 or 👎 to teach cubic. Mention @cubic-dev-ai to give feedback, ask questions, or re-run the review.

"dependencies": {
"@gql.tada/cli-utils": "1.7.1",
"@inquirer/core": "10.2.2",
"@inquirer/core": "10.3.0",
Copy link

@cubic-dev-ai cubic-dev-ai bot Oct 13, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updating @inquirer/core in isolation breaks error handling for prompts. Other @inquirer/* packages still use an older version, causing instanceof checks on error types to fail due to version mismatch. This will treat user-cancelled prompts as crashes.

Prompt for AI agents
Address the following comment on bun.lock at line 51:

<comment>Updating `@inquirer/core` in isolation breaks error handling for prompts. Other `@inquirer/*` packages still use an older version, causing `instanceof` checks on error types to fail due to version mismatch. This will treat user-cancelled prompts as crashes.</comment>

<file context>
@@ -48,7 +48,7 @@
       &quot;dependencies&quot;: {
         &quot;@gql.tada/cli-utils&quot;: &quot;1.7.1&quot;,
-        &quot;@inquirer/core&quot;: &quot;10.2.2&quot;,
+        &quot;@inquirer/core&quot;: &quot;10.3.0&quot;,
         &quot;node-fetch-native&quot;: &quot;1.6.7&quot;,
         &quot;zod&quot;: &quot;^4&quot;,
</file context>
Fix with Cubic

@renovate renovate bot force-pushed the renovate/inquirer-core-10.x branch from 7c495d8 to 72ccd0d Compare October 14, 2025 02:58
@github-actions github-actions bot added qa:running QA workflow is currently running qa:success QA workflow passed successfully status:ready-for-review Pull request is ready for review and removed qa:success QA workflow passed successfully qa:running QA workflow is currently running status:ready-for-review Pull request is ready for review labels Oct 14, 2025
@renovate renovate bot force-pushed the renovate/inquirer-core-10.x branch from 72ccd0d to 8dcca57 Compare October 14, 2025 06:29
@github-actions github-actions bot added qa:running QA workflow is currently running qa:success QA workflow passed successfully status:ready-for-review Pull request is ready for review and removed qa:success QA workflow passed successfully qa:running QA workflow is currently running status:ready-for-review Pull request is ready for review labels Oct 14, 2025
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot force-pushed the renovate/inquirer-core-10.x branch from 8dcca57 to 8dc7665 Compare October 14, 2025 11:55
@github-actions github-actions bot added qa:running QA workflow is currently running qa:success QA workflow passed successfully status:ready-for-review Pull request is ready for review and removed qa:success QA workflow passed successfully qa:running QA workflow is currently running status:ready-for-review Pull request is ready for review labels Oct 14, 2025
@renovate renovate bot merged commit edfee8b into main Oct 14, 2025
9 checks passed
@renovate renovate bot deleted the renovate/inquirer-core-10.x branch October 14, 2025 11:57
@github-actions github-actions bot added status:merged Pull request has been merged and removed status:mergeable Pull request is approved, tests pass, and ready to merge labels Oct 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates qa:success QA workflow passed successfully status:merged Pull request has been merged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant