chore(deps): bump the cli-dependencies group with 4 updates

[dependabot]

Bumps the cli-dependencies group with 4 updates: boxen, commander, inquirer and ora.

Updates boxen from 7.1.1 to 8.0.1

Release notes

Sourced from boxen's releases.

v8.0.1

• Downgrade cli-boxes (#102) 3cf4ea9
  • It turned out to not be compatible with the currently targeted Node.js version.

sindresorhus/boxen@v8.0.0...v8.0.1

v8.0.0

Breaking

• Require Node.js 18 (#96) 3a9c751

Improvements

• Update dependencies (#97) 8f6ed57

sindresorhus/boxen@v7.1.1...v8.0.0

Commits

• 52bbd6a 8.0.1
• 3cf4ea9 Downgrade cli-boxes (#102)
• f7dcff3 8.0.0
• 9b1471e Meta tweaks
• 8f6ed57 Update dependencies (#97)
• 3a9c751 Bump minimum version to Node.js 18 (#96)
• 74f1a0c Remove bloat code (#91)
• See full diff in compare view

Updates commander from 12.1.0 to 14.0.3

Release notes

Sourced from commander's releases.

v14.0.3

Added

• Release Policy document (#2462)

Changes

• old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (#2462)
• clarify typing for deprecated callback parameter to .outputHelp() (#2427)
• simple readability improvements to README (#2465)

v14.0.2

Changed

• improve negative number auto-detection test (#2428)
• update (dev) dependencies

v14.0.1

Fixed

• broken markdown link in README (#2369)

Changed

• improve code readability by using optional chaining (#2394)
• use more idiomatic code with object spread instead of Object.assign() (#2395)
• improve code readability using string.endsWith() instead of string.slice() (#2396)
• refactor .parseOptions() to process args array in-place (#2409)
• change private variadic support routines from ._concatValue() to ._collectValue() (change code from array.concat() to array.push()) (#2410)
• update (dev) dependencies

v14.0.0

Added

• support for groups of options and commands in the help using low-level .helpGroup() on Option and Command, and higher -level .optionsGroup() and .commandsGroup() which can be used in chaining way to specify group title for following option s/commands (#2328)
• support for unescaped negative numbers as option-arguments and command-arguments (#2339)
• TypeScript: add parseArg property to Argument class (#2359)

Fixed

• remove bogus leading space in help when option has default value but not a description (#2348)
• .configureOutput() now makes copy of settings instead of modifying in-place, fixing side-effects (#2350)

Changed

• Breaking: Commander 14 requires Node.js v20 or higher
• internal refactor of Help class adding .formatItemList() and .groupItems() methods (#2328)

... (truncated)

Changelog

Sourced from commander's changelog.

[14.0.3] (2026-01-31)

Added

• Release Policy document (#2462)

Changes

• old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (#2462)
• clarify typing for deprecated callback parameter to .outputHelp() (#2427)
• simple readability improvements to README (#2465)

[14.0.2] (2025-10-25)

Changed

• improve negative number auto-detection test (#2428)
• update (dev) dependencies

[14.0.1] (2025-09-12)

Fixed

• broken markdown link in README (#2369)

Changed

• improve code readability by using optional chaining (#2394)
• use more idiomatic code with object spread instead of Object.assign() (#2395)
• improve code readability using string.endsWith() instead of string.slice() (#2396)
• refactor .parseOptions() to process args array in-place (#2409)
• change private variadic support routines from ._concatValue() to ._collectValue() (change code from array.concat() to array.push()) (#2410)
• update (dev) dependencies

[14.0.0] (2025-05-18)

Added

• support for groups of options and commands in the help using low-level .helpGroup() on Option and Command, and higher-level .optionsGroup() and .commandsGroup() which can be used in chaining way to specify group title for following options/commands (#2328)
• support for unescaped negative numbers as option-arguments and command-arguments (#2339)
• TypeScript: add parseArg property to Argument class (#2359)

Fixed

• remove bogus leading space in help when option has default value but not a description (#2348)
• .configureOutput() now makes copy of settings instead of modifying in-place, fixing side-effects (#2350)

Changed

• Breaking: Commander 14 requires Node.js v20 or higher

... (truncated)

Commits

• 8247364 14.0.3
• e281fe3 Update docs for 14.0.3 (#2474)
• 7357dda Separate out a more detailed release policy document (#2462)
• b6e2e3a Bump eslint from 9.39.1 to 9.39.2 (#2470)
• d6f63a7 Bump ts-jest from 29.4.5 to 29.4.6 (#2467)
• 2a9768a Bump prettier from 3.6.2 to 3.7.4 (#2466)
• 9211918 docs(README): Tweak formatting, punctuation for clarity (#2465)
• 4208a96 Bump typescript-eslint from 8.46.2 to 8.48.0 (#2458)
• 03308ce Bump eslint-plugin-jest from 29.0.1 to 29.2.1 (#2457)
• 4d2db1f Bump globals from 16.4.0 to 16.5.0 (#2456)
• Additional commits viewable in compare view

Updates inquirer from 9.3.8 to 13.2.2

Release notes

Sourced from inquirer's releases.

inquirer@13.2.2

• Typescript disallow type: 'list' unless there's a plugin installed under that name. (list was replaced by select and marked as deprecated for a few released, v13.0.0 removed the alias.)

inquirer@13.2.1

• Regression: previous answers weren't provided to the validate functions as the second arguments.

inquirer@13.2.0

• feat(search): Add support for default.
• feat(rawlist): Add support for description of choices. That information is displayed under the list when the choice is highlighted.
• Bump dependencies

inquirer@13.1.0

• Feat: rawlist now supports default option.
• Fix: select now infer return type properly when passing a choices array of string literals.

inquirer@13.0.2

• Fix Typescript not discovering types when moduleResolution is set to commonjs (you probably want to fix that in your project if it's still in your tsconfig)

inquirer@13.0.0

Release Notes

🚨 Breaking Changes

This is a major release that modernizes the codebase for Node.js ≥ 20.

ESM Only - No More CommonJS Support

Impact: All packages are now ESM-only. CommonJS imports are no longer supported.

If you're on modern Node versions (≥ 20), this should be transparent and have no impact.

Node.js Version Requirement

Minimum Node.js version is now 20.x

Node.js versions below 20 are no longer supported. Please upgrade to Node.js 20 or later.

Node min versions: >=23.5.0 || ^22.13.0 || ^21.7.0 || ^20.12.0

Deprecated APIs Removed

The following deprecated APIs have been removed after being deprecated in previous releases:

list prompt alias removed (affects inquirer package only)

The list alias has been removed from the inquirer package. This only impacts users of the legacy inquirer package, not users of @inquirer/prompts or individual prompt packages.

// ❌ No longer available (inquirer package only)
import inquirer from 'inquirer';
</tr></table> 

... (truncated)

Commits

• dc4c581 chore: Publish new release
• 3713139 fix(inquirer): remove deprecated 'list' type from TypeScript types (#1977)
• 093b7d6 chore(deps-dev): Bump the testing group with 3 updates (#1970)
• 76f9a07 chore(deps-dev): Bump the linting group with 3 updates (#1971)
• 41f6d8b chore(deps-dev): Bump oxfmt in the formatting group (#1972)
• 58ec12e chore(deps-dev): Bump turbo from 2.7.5 to 2.7.6 in the build group (#1973)
• 4b56992 chore(deps-dev): Bump @​types/node in the types group (#1974)
• cb47974 chore: Publish new release
• 52b2936 fix(inquirer): pass previous answers to validate function (#1969)
• 5239f13 chore(deps-dev): Bump the linting group across 1 directory with 5 updates (#1...
• Additional commits viewable in compare view

Updates ora from 8.2.0 to 9.1.0

Release notes

Sourced from ora's releases.

v9.1.0

• Support external writes to stream (console.log) while spinning d2b543a
• Replace strip-ansi dependency with native stripVTControlCharacters (#249) 68d50e5

---

sindresorhus/ora@v9.0.0...v9.1.0

v9.0.0

Breaking

• Require Node.js 20 7aca06d

Fixes

• Fix clearing in some cases aa51538
• Fix frame() not displaying dynamic prefixText/suffixText from functions 0f19f57
• Fix multiline text exceeding console height leaving garbage when scrolling 45d30ad

---

sindresorhus/ora@v8.2.0...v9.0.0

Commits

• d7e3a94 9.1.0
• d2b543a Support external writes to stream while spinning
• 68d50e5 Replace strip-ansi with native stripVTControlCharacters (#249)
• 20d4bdb 9.0.0
• 7aca06d Require Node.js 20
• aa51538 Fix clearing in some cases
• 9125620 Add FAQs
• 0f19f57 Fix frame() not displaying dynamic prefixText/suffixText from functions
• 45d30ad Fix multiline text exceeding console height leaving garbage when scrolling
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.