From 9b0192090dadbae443202dec7dc164f1991cb6ec Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Przemys=C5=82aw=20Galarowicz?= Date: Fri, 18 Sep 2026 12:04:17 +0200 Subject: [PATCH 1/2] update --- .github/workflows/codeql.yml | 4 ++-- package-lock.json | 14 +++++++------- package.json | 2 +- src/steps/archetype-summary.ts | 4 +++- 4 files changed, 13 insertions(+), 11 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 8f14f048..6abf8f5a 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -28,12 +28,12 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 + uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 with: languages: ${{ matrix.language }} queries: security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 + uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 with: category: "/language:${{ matrix.language }}" diff --git a/package-lock.json b/package-lock.json index de90fc27..ff50e69f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -120,9 +120,9 @@ } }, "node_modules/@clack/core": { - "version": "1.4.3", - "resolved": "https://registry.npmjs.org/@clack/core/-/core-1.4.3.tgz", - "integrity": "sha512-/kr3UWNtdJfxZtPgDqUOmG2pvwlmcLGheex5yiZKdwbzZJxhV+HMNR9QNmyY5cGwTNV6LrR7Jtp+KjhUAP1qBQ==", + "version": "1.5.0", + "resolved": "https://registry.npmjs.org/@clack/core/-/core-1.5.0.tgz", + "integrity": "sha512-zNikCcd8BbcEvzzG1sbXFrRHFk5kHPrpwZwksPvf9qyQO1Teb7JaXaOAxXZei9nZLDW0gaZawiuTCji88bTBhw==", "license": "MIT", "dependencies": { "fast-wrap-ansi": "^0.2.0", @@ -133,12 +133,12 @@ } }, "node_modules/@clack/prompts": { - "version": "1.7.0", - "resolved": "https://registry.npmjs.org/@clack/prompts/-/prompts-1.7.0.tgz", - "integrity": "sha512-y7/yvZ2TPAnR9+jnc00klvNNLkJiXFFrQA/hlLCcxA9a2A4zQIOimyFQ9XfwYKiGD1fb5GY8vbKIIgO8d5Tb2A==", + "version": "1.8.0", + "resolved": "https://registry.npmjs.org/@clack/prompts/-/prompts-1.8.0.tgz", + "integrity": "sha512-PXzLZ8N34rxmuo4dJg3xtOXhcBse94qGjDqsteoEYrFrrZ5FSjIGwMAuOcv64ln8rHVBBD06XeVGr+/JX+plcA==", "license": "MIT", "dependencies": { - "@clack/core": "1.4.3", + "@clack/core": "1.5.0", "fast-string-width": "^3.0.2", "fast-wrap-ansi": "^0.2.0", "sisteransi": "^1.0.5" diff --git a/package.json b/package.json index 17a77a82..4b515750 100644 --- a/package.json +++ b/package.json @@ -50,7 +50,7 @@ "prepublishOnly": "npm run check" }, "dependencies": { - "@clack/prompts": "^1.7.0", + "@clack/prompts": "^1.8.0", "minimist": "^1.2.8", "picocolors": "^1.1.1" }, diff --git a/src/steps/archetype-summary.ts b/src/steps/archetype-summary.ts index 18c04d0b..c80aee4f 100644 --- a/src/steps/archetype-summary.ts +++ b/src/steps/archetype-summary.ts @@ -64,5 +64,7 @@ export async function runArchetypeSummary( }); if (isCancel(action)) return 'cancel'; - return action; + // clack 1.8 types select as Value | symbol; isCancel only narrows + // typeof CANCEL_SYMBOL, so plain `return action` no longer typechecks. + return action === 'install' ? 'install' : 'cancel'; } From 7039c2beac1d090e917b2e898027fbb67048d2b3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Przemys=C5=82aw=20Galarowicz?= Date: Fri, 18 Sep 2026 12:05:36 +0200 Subject: [PATCH 2/2] chore(deps): bump CodeQL 4.38.0 and @clack/prompts 1.8.0 Land init+analyze on the same pin (Dependabot split them) and fix the clack 1.8 select/isCancel type narrowing that broke typecheck. Co-authored-by: Cursor --- package-lock.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package-lock.json b/package-lock.json index ff50e69f..33b1140c 100644 --- a/package-lock.json +++ b/package-lock.json @@ -9,7 +9,7 @@ "version": "0.5.0", "license": "Apache-2.0", "dependencies": { - "@clack/prompts": "^1.7.0", + "@clack/prompts": "^1.8.0", "minimist": "^1.2.8", "picocolors": "^1.1.1" },