Skip to content

chore(deps): bump the all-dependencies group across 1 directory with 2 updates#8

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/main/all-dependencies-e404fa441b
Open

chore(deps): bump the all-dependencies group across 1 directory with 2 updates#8
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/main/all-dependencies-e404fa441b

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Mar 30, 2026 •
edited by cubic-dev-ai bot
Loading

Bumps the all-dependencies group with 2 updates in the / directory: grimoire-wizard and vitest.

Updates grimoire-wizard from 0.5.2 to 0.6.1

Release notes

Sourced from grimoire-wizard's releases.

v0.6.1

Full Changelog: YosefHayim/grimoire@v0.6.0...v0.6.1

v0.6.0

What's Changed

Full Changelog: YosefHayim/grimoire@v0.5.2...v0.6.0

Changelog

Sourced from grimoire-wizard's changelog.

[0.6.1] - 2026-03-18

Fixed

  • Progress auto-restores even when disabled — resume: false and cache: false now both fully prevent progress file restoration. Previously, a cancelled wizard would save a checkpoint and resume from that step on the next run, ignoring resume: false and cache: false. (#48)
  • Cancel no longer saves progress when resume is disabled — performCancel() now checks resumeEnabled before writing the progress file. Previously it always wrote, causing phantom resume behavior.
  • grimoire cache clear now also clears progress files — the CLI command was only clearing the cache directory (~/.config/grimoire/cache/) but not the progress directory (~/.config/grimoire/progress/), so cleared users still got resume behavior.

Added

  • clearAllProgress() export — new function to programmatically wipe all progress files; used internally by grimoire cache clear and available for library consumers.

[0.6.0] - 2026-03-16

Added

  • HookContext.openBrowser(url) — lifecycle hooks can open a URL in the system browser (macOS/Linux/Windows) with URL validation and no shell injection
  • HookContext.prompt(config) — hooks can ask the user additional questions mid-flow without needing a dedicated wizard step; supports text, password, confirm, select, number
  • checksStyle: 'tasklist' — pre-flight checks render as an in-place animated task list with cursor-aware TTY guard (falls back to spinner in non-TTY/CI)
  • meta.clearBetweenSteps — clears the terminal between each step for a focused one-question-at-a-time UX
  • meta.banner / meta.subtitle — custom ASCII banner text and subtitle shown in the wizard header
  • HookContext.setNextStep('__done__') — call this sentinel to finish the wizard early from any hook
  • NoteStyle on note steps — steps can specify a box style for the rendered note
  • Multi-column layout — select/multiselect/search steps support columns to render options side-by-side
  • ChecksStyle type export — checksStyle is now a typed export from the package

Fixed

  • SIGINT saves progress — Ctrl-C cancellation now runs onCancel, persists resume state, and emits session:end before exiting
  • ClackRenderer tasklist mode — suppresses duplicate check:pass/check:fail lines when tasklist owns the terminal
  • Note/message steps excluded from answers — note, message, and browser step answers are no longer stored in the final answers object
  • Mock fail-fast — mock mode always throws on missing answers instead of silently falling through to interactive prompt
Commits
  • 2c3f576 chore: release v0.6.1 — fix resume/progress ignoring cache:false and resume:f...
  • 422a7f6 test: add 6 regression tests for resume/progress behavior (issue #48)
  • ec38ceb fix: resume/progress respects cache:false and resume:false; cache clear also ...
  • 03d548e ci: skip CI on dependabot PRs, auto-merge all updates, add dependabot config
  • 45c238f chore: release v0.6.0
  • 871b9e6 feat: batch 10 — compound steps via HookContext.prompt + openBrowser (#7) (#36)
  • 04000ef feat: batch 8 — expanded loading TUI (#24) (#34)
  • 7f91570 feat: batch 4 — custom banner/logo, screen clearing, demo showcase (#9, #15) ...
  • 86153a1 feat: batch 9 — multi-column layout for select/multiselect/search (#19) (#35)
  • 5f1ff06 feat: batch 7 — async lifecycle hooks with HookContext (#4, #5) (#33)
  • Additional commits viewable in compare view

Updates vitest from 4.1.0 to 4.1.2

Release notes

Sourced from vitest's releases.

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

   🐞 Bug Fixes

    View changes on GitHub

v4.1.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • fc6f482 chore: release v4.1.2
  • 6f97b55 feat: disable colors if agent is detected (#9851)
  • b3c992c fix(coverage): correct coverageConfigDefaults values and types (#9940)
  • 7c06598 fix: ensure sequential mock/unmock resolution (#9830)
  • f54abad chore: add typo-checker skill and fix typos (#9963)
  • 7aa9377 fix: don't resolve setupFiles from parent directory (#9960)
  • 1f2d318 chore: release v4.1.1
  • ebfde79 refactor: rename matchesTagsFilter to matchesTags (#9956)
  • 5611500 feat(experimental): introduce experimental.vcsProvider (#9928)
  • eec53d9 feat(experimental): expose matchesTagsFilter to test if the current filter ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Upgrade grimoire-wizard to 0.6.1 and vitest to 4.1.2 to add new wizard features, fix resume/cache behavior, and address a transitive CVE in Vitest’s dependencies.

  • Dependencies
    • grimoire-wizard 0.6.1
      • Adds HookContext.openBrowser(), HookContext.prompt(), banner/subtitle, meta.clearBetweenSteps, and multi-column selects.
      • Fixes progress handling to honor resume: false / cache: false; grimoire cache clear now wipes progress files.
    • vitest 4.1.2
      • Updates flatted to resolve a CVE and includes small fixes (e.g., stops resolving setupFiles from parent).
      • No config changes required.

Written for commit 335f4bb. Summary will update on new commits.

@dependabot
chore(deps): bump the all-dependencies group across 1 directory with …
335f4bb 
…2 updates

Bumps the all-dependencies group with 2 updates in the / directory: [grimoire-wizard](https://github.com/YosefHayim/grimoire) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `grimoire-wizard` from 0.5.2 to 0.6.1
- [Release notes](https://github.com/YosefHayim/grimoire/releases)
- [Changelog](https://github.com/YosefHayim/grimoire/blob/main/CHANGELOG.md)
- [Commits](YosefHayim/grimoire@v0.5.2...v0.6.1)

Updates `vitest` from 4.1.0 to 4.1.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/vitest)

---
updated-dependencies:
- dependency-name: grimoire-wizard
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: vitest
  dependency-version: 4.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 30, 2026
@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Mar 30, 2026

⚠️ No Changeset found

Latest commit: 335f4bb

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@codeant-ai
Copy link
Copy Markdown

codeant-ai bot commented Mar 30, 2026

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

cubic-dev-ai[bot]
cubic-dev-ai bot reviewed Mar 30, 2026
View reviewed changes
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cubic-dev-ai cubic-dev-ai[bot] cubic-dev-ai[bot] left review comments

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants