[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@inquirer/core (source)	12.0.4 → 12.0.5
@inquirer/prompts (source)	8.7.3 → 8.7.4

---

Release Notes

SBoudrias/Inquirer.js (@​inquirer/core)

v12.0.5

Compare Source

@​inquirer/core@12.0.5

What's new

• Cancelling or aborting a prompt before its deferred first render no longer invokes the prompt view after settlement — the pending setImmediate is now cancelled during cleanup, preventing keypress listener reinstalls and writes to an ended output stream (#​2318, relates to #​1816). Preserves the buffered-input behavior from #​2007 and extends the settlement cleanup contract from #​2255.

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • Between 09:00 AM and 06:59 PM, Monday through Friday (* 9-18 * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

🦋 Changeset detected

Latest commit: a7d1cb8

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 6 packages

Name	Type
@tailor-platform/sdk	Patch
@tailor-platform/sdk-codemod	Patch
@tailor-platform/sdk-plugin-seed	Patch
@tailor-platform/sdk-plugin-setup	Patch
@tailor-platform/sdk-plugin-tailordb-erd	Patch
@tailor-platform/create-sdk	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[pkg-pr-new]

Open in StackBlitz

@tailor-platform/create-sdk

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/create-sdk@a7d1cb8

@tailor-platform/eslint-plugin-sdk

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/eslint-plugin-sdk@a7d1cb8

@tailor-platform/sdk

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/sdk@a7d1cb8

@tailor-platform/sdk-plugin-frontend

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/sdk-plugin-frontend@a7d1cb8

@tailor-platform/sdk-plugin-seed

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/sdk-plugin-seed@a7d1cb8

@tailor-platform/sdk-plugin-setup

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/sdk-plugin-setup@a7d1cb8

@tailor-platform/sdk-plugin-tailordb-erd

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/sdk-plugin-tailordb-erd@a7d1cb8

commit: a7d1cb8

[github-actions]

🤖 Claude Dependency Review

✅ Recommended Actions

None — safe to merge as-is. Both updates are patch versions with bug fixes only, no breaking changes.

📦 Update Summary

• Libraries: @​inquirer/core, @​inquirer/prompts
• Versions:
  • @​inquirer/core: 12.0.4 → 12.0.5
  • @​inquirer/prompts: 8.7.3 → 8.7.4
• Change Type: Patch

📝 Release Notes

@​inquirer/core@​12.0.5

• https://github.com/SBoudrias/Inquirer.js/releases/tag/@​inquirer/core@​12.0.5

@​inquirer/prompts@​8.7.4

• https://github.com/SBoudrias/Inquirer.js/releases/tag/@​inquirer/prompts@​8.7.4

🔐 Security Assessment

• Risk: 🟢 Low
• Known vulnerabilities: None found. Search results from GitHub Advisory Database, Snyk, and npm audit show no CVEs or security advisories affecting these versions.
• Supply-chain notes:
  • Both packages are maintained by the same stable maintainer team (SBoudrias/Inquirer.js)
  • No maintainer changes detected
  • No new lifecycle scripts introduced
  • No suspicious dependency additions
  • Normal patch release cadence

🚨 Breaking Changes

None. Both are patch releases with backward-compatible bug fixes.

✨ Main Changes

@​inquirer/core@​12.0.5

• Prompt cancellation fix (fix(tailordb): preserve legacy migration script semantics #2318, relates to chore(deps): update dependency knip to v6.27.0 #1816): Cancelling or aborting a prompt before its deferred first render no longer invokes the prompt view after settlement. The pending setImmediate is now cancelled during cleanup, preventing keypress listener reinstalls and writes to an ended output stream.
• Preserves the buffered-input behavior from chore(deps): lock file maintenance #2007 and extends the settlement cleanup contract from fix(deps): update @opentelemetry #2255.

@​inquirer/prompts@​8.7.4

Includes the @​inquirer/core@​12.0.5 fix above, plus additional prompt-specific fixes:

• checkbox() fix (chore(deps): update pnpm to v12 #2296): Edits and submissions are now ignored while an async validator is running. The selection is captured at submit time, preventing repeated Enter presses from triggering the validator multiple times.
• number() fix (chore(deps): update anthropics/claude-code-action action to v1.0.224 #2307): Whitespace-only input now counts as empty input, resolving to the default value or undefined rather than showing a validation error.

🔍 Impact Analysis

📁 Usage Locations

Both @​inquirer/core and @​inquirer/prompts are used through a centralized wrapper. Direct imports are restricted by lint rules (see packages/sdk/.oxlintrc.json lines 447-454).

Single entry point:

1. packages/sdk/src/cli/shared/prompt.ts

   import { ExitPromptError } from "@​inquirer/core";
   import { confirm, input, password, select } from "@​inquirer/prompts";

   • Features used:
     • ExitPromptError: Caught in the withGuard wrapper to handle Ctrl-C cancellation (line 26)
     • confirm, input, password, select: Wrapped with CI guards and error handling
   • Impact: The prompt cancellation fix directly benefits this wrapper's error handling. The ExitPromptError catch will now work correctly even when a prompt is cancelled before its deferred first render.

Indirect usage locations (42 files import the wrapper):

All CLI commands that use interactive prompts import from #/cli/shared/prompt:

• Workspace management: delete, restore, prune, user/remove
• TailorDB: migrate/generate, migrate/sync, migrate/resolve, migrate/rebaseline, migrate/set, truncate
• Secrets: create, update, delete, vault/delete
• Auth connections: delete, revoke
• Organization: folder/delete
• Deploy: confirm, workspace, app-id-lock
• Data: clone
• Authentication: login, remove

Impact scope:

• ✅ All prompt usage is centralized through the wrapper, so the bug fixes apply uniformly across all interactive commands
• ✅ The cancellation fix prevents a potential issue where Ctrl-C during early prompt lifecycle could cause output to closed streams
• ✅ No code changes required — the fixes are transparent improvements to the underlying prompt behavior

---

[github-actions]

Code Metrics Report (packages/sdk)

	main (9260d36)	#2760 (bf25479)	+/-
Coverage	87.8%	87.8%	0.0%
Code to Test Ratio	1:0.5	1:0.5	0.0

Details

  |                    | main (9260d36) | #2760 (bf25479) | +/-  |
  |--------------------|----------------|-----------------|------|
  | Coverage           |          87.8% |           87.8% | 0.0% |
  |   Files            |            564 |             564 |    0 |
  |   Lines            |          24649 |           24649 |    0 |
  |   Covered          |          21663 |           21663 |    0 |
  | Code to Test Ratio |          1:0.5 |           1:0.5 |  0.0 |
  |   Code             |         201444 |          201444 |    0 |
  |   Test             |         113057 |          113057 |    0 |

SDK Configure Bundle Size

	main (9260d36)	#2760 (bf25479)	+/-
configure-index-size	13.82KB	13.82KB	0KB
dependency-chunks-size	25.81KB	25.81KB	0KB
total-bundle-size	39.63KB	39.63KB	0KB

Runtime Performance

	main (9260d36)	#2760 (bf25479)	+/-
Generate Median	1,874ms	1,127ms	-747ms
Generate Max	1,897ms	1,173ms	-724ms
Apply Build Median	2,040ms	1,222ms	-818ms
Apply Build Max	2,051ms	1,306ms	-745ms

Type Performance (instantiations)

	main (9260d36)	#2760 (bf25479)	+/-
tailordb-baseline	947	947	0
resolver-baseline	4,641	4,641	0
executor-baseline	848	848	0
tailordb-basic	2,343	2,343	0
tailordb-optional	1,149	1,149	0
tailordb-relation	3,794	3,794	0
tailordb-validate	186	186	0
tailordb-hooks	981	981	0
tailordb-object	1,890	1,890	0
tailordb-enum	568	568	0
resolver-basic	1,022	1,022	0
resolver-nested	3,405	3,405	0
resolver-array	1,954	1,954	0
executor-schedule	1,388	1,388	0
executor-webhook	47	47	0
executor-record-created	3,219	3,219	0
executor-record-updated	3,219	3,219	0
executor-record-deleted	3,219	3,219	0
executor-resolver	463	463	0
executor-operation-function	30	30	0
executor-operation-gql	43	43	0
executor-operation-webhook	50	50	0
executor-operation-workflow	211	211	0

---

Reported by octocov