diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 8f14f048..6abf8f5a 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,12 +28,12 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
+        uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
         with:
           languages: ${{ matrix.language }}
           queries: security-and-quality
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
+        uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
         with:
           category: "/language:${{ matrix.language }}"
diff --git a/package-lock.json b/package-lock.json
index de90fc27..33b1140c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,7 +9,7 @@
       "version": "0.5.0",
       "license": "Apache-2.0",
       "dependencies": {
-        "@clack/prompts": "^1.7.0",
+        "@clack/prompts": "^1.8.0",
         "minimist": "^1.2.8",
         "picocolors": "^1.1.1"
       },
@@ -120,9 +120,9 @@
       }
     },
     "node_modules/@clack/core": {
-      "version": "1.4.3",
-      "resolved": "https://registry.npmjs.org/@clack/core/-/core-1.4.3.tgz",
-      "integrity": "sha512-/kr3UWNtdJfxZtPgDqUOmG2pvwlmcLGheex5yiZKdwbzZJxhV+HMNR9QNmyY5cGwTNV6LrR7Jtp+KjhUAP1qBQ==",
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/@clack/core/-/core-1.5.0.tgz",
+      "integrity": "sha512-zNikCcd8BbcEvzzG1sbXFrRHFk5kHPrpwZwksPvf9qyQO1Teb7JaXaOAxXZei9nZLDW0gaZawiuTCji88bTBhw==",
       "license": "MIT",
       "dependencies": {
         "fast-wrap-ansi": "^0.2.0",
@@ -133,12 +133,12 @@
       }
     },
     "node_modules/@clack/prompts": {
-      "version": "1.7.0",
-      "resolved": "https://registry.npmjs.org/@clack/prompts/-/prompts-1.7.0.tgz",
-      "integrity": "sha512-y7/yvZ2TPAnR9+jnc00klvNNLkJiXFFrQA/hlLCcxA9a2A4zQIOimyFQ9XfwYKiGD1fb5GY8vbKIIgO8d5Tb2A==",
+      "version": "1.8.0",
+      "resolved": "https://registry.npmjs.org/@clack/prompts/-/prompts-1.8.0.tgz",
+      "integrity": "sha512-PXzLZ8N34rxmuo4dJg3xtOXhcBse94qGjDqsteoEYrFrrZ5FSjIGwMAuOcv64ln8rHVBBD06XeVGr+/JX+plcA==",
       "license": "MIT",
       "dependencies": {
-        "@clack/core": "1.4.3",
+        "@clack/core": "1.5.0",
         "fast-string-width": "^3.0.2",
         "fast-wrap-ansi": "^0.2.0",
         "sisteransi": "^1.0.5"
diff --git a/package.json b/package.json
index 17a77a82..4b515750 100644
--- a/package.json
+++ b/package.json
@@ -50,7 +50,7 @@
     "prepublishOnly": "npm run check"
   },
   "dependencies": {
-    "@clack/prompts": "^1.7.0",
+    "@clack/prompts": "^1.8.0",
     "minimist": "^1.2.8",
     "picocolors": "^1.1.1"
   },
diff --git a/src/steps/archetype-summary.ts b/src/steps/archetype-summary.ts
index 18c04d0b..c80aee4f 100644
--- a/src/steps/archetype-summary.ts
+++ b/src/steps/archetype-summary.ts
@@ -64,5 +64,7 @@ export async function runArchetypeSummary(
   });
 
   if (isCancel(action)) return 'cancel';
-  return action;
+  // clack 1.8 types select as Value | symbol; isCancel only narrows
+  // typeof CANCEL_SYMBOL, so plain `return action` no longer typechecks.
+  return action === 'install' ? 'install' : 'cancel';
 }