chore(deps): bump the prod-deps group across 1 directory with 4 updates

[dependabot]

Bumps the prod-deps group with 4 updates in the / directory: @clack/prompts, cosmiconfig, ora and semver.

Updates @clack/prompts from 1.4.0 to 1.6.0

Release notes

Sourced from @​clack/prompts's releases.

@​clack/prompts@​1.6.0

Minor Changes

• #568 f87933f Thanks @​florian-lefebvre! - Updates default formatter of note() to note dim lines anymore

  If you want the old behavior, provide a format() function:

  import { note } from '@clack/prompts';
  +import { styleText } from 'node:util';
  note(
  'You can edit the file src/index.jsx',
  'Next steps.'
  
  { format: (text) => styleText('dim', text) }
  );

#567 cc6aab5 Thanks @​dreyfus92! - Add keyboard instruction footers to select, multiselect, and groupMultiselect in the active state, matching autocomplete. No option — always shown.

Patch Changes

• Updated dependencies [2f2b52f, e1b6ee7]:
  • @​clack/core@​1.4.2

@​clack/prompts@​1.5.1

Patch Changes

• #548 2356e97 Thanks @​43081j! - Remove sourcemaps and enable pretty-ish build output.

• #546 56e9d67 Thanks @​ghostdevv! - docs: add jsdoc for date, limit-options, and messages

• Updated dependencies [2356e97]:

  • @​clack/core@​1.4.1

@​clack/prompts@​1.5.0

Minor Changes

• #543 83428ac Thanks @​florian-lefebvre! - Adds support for Standard Schema validation

  Prompts accept an optional validate() function to validate user input. While a function provides more flexibility and customization over your validation, it can be a bit verbose. To help solve this, there are libraries that provide schema-based validation to make shorthand and type-strict validation substantially easier.

  Libraries following the Standard Schema specification are now natively supported. For example, using Arktype:

  import { text } from '@clack/prompts';
  import { type } from 'arktype';
  const name = await text({
  message: 'Enter your email',

... (truncated)

Changelog

Sourced from @​clack/prompts's changelog.

1.6.0

Minor Changes

• #568 f87933f Thanks @​florian-lefebvre! - Updates default formatter of note() to note dim lines anymore

  If you want the old behavior, provide a format() function:

  import { note } from '@clack/prompts';
  +import { styleText } from 'node:util';
  note(
  'You can edit the file src/index.jsx',
  'Next steps.'
  
  { format: (text) => styleText('dim', text) }
  );

#567 cc6aab5 Thanks @​dreyfus92! - Add keyboard instruction footers to select, multiselect, and groupMultiselect in the active state, matching autocomplete. No option — always shown.

Patch Changes

• Updated dependencies [2f2b52f, e1b6ee7]:
  • @​clack/core@​1.4.2

1.5.1

Patch Changes

• #548 2356e97 Thanks @​43081j! - Remove sourcemaps and enable pretty-ish build output.

• #546 56e9d67 Thanks @​ghostdevv! - docs: add jsdoc for date, limit-options, and messages

• Updated dependencies [2356e97]:

  • @​clack/core@​1.4.1

1.5.0

Minor Changes

• #543 83428ac Thanks @​florian-lefebvre! - Adds support for Standard Schema validation

  Prompts accept an optional validate() function to validate user input. While a function provides more flexibility and customization over your validation, it can be a bit verbose. To help solve this, there are libraries that provide schema-based validation to make shorthand and type-strict validation substantially easier.

  Libraries following the Standard Schema specification are now natively supported. For example, using Arktype:

  import { text } from '@clack/prompts';
  import { type } from 'arktype';

... (truncated)

Commits

• 0e70056 [ci] release (#562)
• f87933f fix(prompts): do not dim note contents (#568)
• cc6aab5 feat(prompts): add instructions footer for select, multi-select & `group-...
• 02ae191 [ci] release (#549)
• 56e9d67 docs: add jsdoc for date, limit-options, and messages (#546)
• 030ba4d [ci] release (#539)
• 83428ac feat: standard schema for validation (#543)
• adb6af9 docs: add jsdoc for box, group, and group-multi-select (#542)
• 3170ed9 docs: add jsdoc for autocomplete, confirm, and path prompts (#540)
• 3dcb31a fix: spaces and uppercase characters in multiline input (#534)
• See full diff in compare view

Updates cosmiconfig from 9.0.1 to 9.0.2

Changelog

Sourced from cosmiconfig's changelog.

9.0.2

• Fixed a prototype chain issue that may happen when merging different config objects.
• Fixed the project search strategy not correctly stopping at the package boundary.

Commits

• See full diff in compare view

Updates ora from 9.4.0 to 9.4.1

Release notes

Sourced from ora's releases.

v9.4.1

• Fix type definitions (#257) 431ebc4

---

sindresorhus/ora@v9.4.0...v9.4.1

Commits

• 79cd8c1 9.4.1
• bc3a283 Minor tweaks
• 431ebc4 Fix type definitions (#257)
• See full diff in compare view

Updates semver from 7.8.0 to 7.8.5

Release notes

Sourced from semver's releases.

v7.8.5

7.8.5 (2026-06-19)

Bug Fixes

• 9c8692a #878 include prereleases in tilde range lower bound with includePrerelease (#878) (@​chatman-media)

v7.8.4

7.8.4 (2026-06-09)

Bug Fixes

• e583226 #874 reject numeric segments after x-ranges (@​pupuking723)

v7.8.3

7.8.3 (2026-06-08)

Bug Fixes

• 046da7f #872 align caret includePrerelease lower bounds (#872) (@​wayyoungboy)

Chores

• 3485dda #866 bump @​npmcli/eslint-config from 6.0.1 to 7.0.0 (#866) (@​dependabot[bot])

v7.8.2

7.8.2 (2026-06-04)

Bug Fixes

• bea6028 #870 increment dotted prerelease identifiers (#870) (@​liuzemei, @​SheldonNeo)

v7.8.1

7.8.1 (2026-05-21)

Bug Fixes

• 17aa702 #869 strip build metadata before comparator trimming (#869) (@​owlstronaut)
• 5f3ca13 #867 handle prerelease bounds in subset (#867) (@​puneetdixit200, Puneet Dixit)

Changelog

Sourced from semver's changelog.

7.8.5 (2026-06-19)

Bug Fixes

• 9c8692a #878 include prereleases in tilde range lower bound with includePrerelease (#878) (@​chatman-media)

7.8.4 (2026-06-09)

Bug Fixes

• e583226 #874 reject numeric segments after x-ranges (@​pupuking723)

7.8.3 (2026-06-08)

Bug Fixes

• 046da7f #872 align caret includePrerelease lower bounds (#872) (@​wayyoungboy)

Chores

• 3485dda #866 bump @​npmcli/eslint-config from 6.0.1 to 7.0.0 (#866) (@​dependabot[bot])

7.8.2 (2026-06-04)

Bug Fixes

• bea6028 #870 increment dotted prerelease identifiers (#870) (@​liuzemei, @​SheldonNeo)

7.8.1 (2026-05-21)

Bug Fixes

• 17aa702 #869 strip build metadata before comparator trimming (#869) (@​owlstronaut)
• 5f3ca13 #867 handle prerelease bounds in subset (#867) (@​puneetdixit200, Puneet Dixit)

Commits

• 6e05b76 chore: release 7.8.5 (#879)
• 9c8692a fix: include prereleases in tilde range lower bound with includePrerelease (#...
• 8640bd6 chore: release 7.8.4 (#875)
• e583226 fix: reject numeric segments after x-ranges
• 6b77aa8 chore: release 7.8.3 (#873)
• 3485dda chore: bump @​npmcli/eslint-config from 6.0.1 to 7.0.0 (#866)
• 046da7f fix: align caret includePrerelease lower bounds (#872)
• efafcf8 chore: release 7.8.2 (#871)
• bea6028 fix: increment dotted prerelease identifiers (#870)
• 7641608 chore: release 7.8.1 (#868)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions