diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 6abf8f5a..9461b749 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,12 +28,12 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
+        uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
         with:
           languages: ${{ matrix.language }}
           queries: security-and-quality
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
+        uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
         with:
           category: "/language:${{ matrix.language }}"
diff --git a/package-lock.json b/package-lock.json
index 385f4664..613e5d5a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,7 +9,7 @@
       "version": "0.5.0",
       "license": "Apache-2.0",
       "dependencies": {
-        "@clack/prompts": "^1.8.0",
+        "@clack/prompts": "^1.8.1",
         "minimist": "^1.2.8",
         "picocolors": "^1.1.1"
       },
@@ -120,9 +120,9 @@
       }
     },
     "node_modules/@clack/core": {
-      "version": "1.5.0",
-      "resolved": "https://registry.npmjs.org/@clack/core/-/core-1.5.0.tgz",
-      "integrity": "sha512-zNikCcd8BbcEvzzG1sbXFrRHFk5kHPrpwZwksPvf9qyQO1Teb7JaXaOAxXZei9nZLDW0gaZawiuTCji88bTBhw==",
+      "version": "1.5.1",
+      "resolved": "https://registry.npmjs.org/@clack/core/-/core-1.5.1.tgz",
+      "integrity": "sha512-iHTrHA8MtVuLl2TfZySmcKv1qO2PoyC9Z7pfSDozEuV5vtY3/wcOPKJXlqJ5Oq2Cx5DDGQGAMVx6HZfRRoVEbQ==",
       "license": "MIT",
       "dependencies": {
         "fast-wrap-ansi": "^0.2.0",
@@ -133,12 +133,12 @@
       }
     },
     "node_modules/@clack/prompts": {
-      "version": "1.8.0",
-      "resolved": "https://registry.npmjs.org/@clack/prompts/-/prompts-1.8.0.tgz",
-      "integrity": "sha512-PXzLZ8N34rxmuo4dJg3xtOXhcBse94qGjDqsteoEYrFrrZ5FSjIGwMAuOcv64ln8rHVBBD06XeVGr+/JX+plcA==",
+      "version": "1.8.1",
+      "resolved": "https://registry.npmjs.org/@clack/prompts/-/prompts-1.8.1.tgz",
+      "integrity": "sha512-dlT1m5e/0yUL0kRNcQn7yGLVThkgbB0Ga/1AmfDDC/8ik6AIiSf2QLQO2zPYvefsHP0aFgxO93cVLCCfDp7kzQ==",
       "license": "MIT",
       "dependencies": {
-        "@clack/core": "1.5.0",
+        "@clack/core": "1.5.1",
         "fast-string-width": "^3.0.2",
         "fast-wrap-ansi": "^0.2.0",
         "sisteransi": "^1.0.5"
diff --git a/package.json b/package.json
index 4b515750..0dc60b15 100644
--- a/package.json
+++ b/package.json
@@ -50,7 +50,7 @@
     "prepublishOnly": "npm run check"
   },
   "dependencies": {
-    "@clack/prompts": "^1.8.0",
+    "@clack/prompts": "^1.8.1",
     "minimist": "^1.2.8",
     "picocolors": "^1.1.1"
   },
diff --git a/tests/remove.test.ts b/tests/remove.test.ts
index 7b3a2b5a..325e74cb 100644
--- a/tests/remove.test.ts
+++ b/tests/remove.test.ts
@@ -247,7 +247,7 @@ describe('runRemove (archetype)', () => {
       archConfig([{ name: 'a11y', role: 'griller' }]),
     );
     setTTY(true, true);
-    vi.mocked(prompts.groupMultiselect).mockResolvedValue(CANCEL);
+    vi.mocked(prompts.groupMultiselect).mockResolvedValue(CANCEL as never);
 
     await expect(runRemove(undefined)).rejects.toMatchObject(
       new ProcessExit(0),