Bump the production-dependencies group across 1 directory with 3 updates

[dependabot]

Bumps the production-dependencies group with 3 updates in the / directory: inquirer, joi and ws.

Updates inquirer from 14.0.2 to 14.1.0

Release notes

Sourced from inquirer's releases.

inquirer@14.1.0

The umbrella package, bundling @inquirer/prompts and @inquirer/core.

What's new

• Updated to @inquirer/prompts@^8.6.0 and @inquirer/core@^12.0.0.
• Includes the new initialValue option for search, floating-point step fixes for number, and explicit-undefined default handling in number/confirm/editor.

⚠️ Note on @inquirer/core@12

inquirer@14.1.0 depends on @inquirer/core@^12.0.0, which changed the useState setter to accept a reducer function (currentValue) => nextValue. This is a type-level change for consumers of the core hook API (relevant if you build custom prompts with @inquirer/core). The built-in prompts are unaffected.

Included

• @inquirer/core@^12.0.0
• @inquirer/prompts@^8.6.0
• @inquirer/type@^4.0.7
• @inquirer/ansi@^2.0.7

Commits

• 9997067 fix(release): serialize staging with --concurrency 1
• 2073546 fix(release): disable auto-install hook event in postpack restore
• 7f00eb7 fix(release): bypass auto-install hook in postpack restore
• 5384fa6 chore(release): add workflow_dispatch trigger to publish workflow
• d11785f fix(release): warm turbo cache before staging in publish job
• 36d4928 chore: Publish new release
• 15dfc54 chore(deps): Bump globby from 16.2.2 to 16.2.3 (#2234)
• 6678f5f chore(deps-dev): Bump oxfmt in the formatting group (#2233)
• e57dafa chore: secure release pipeline with npm Trusted Publishing
• 2d677bb fix: don't restore package.json in postpack before publish (#2231)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for inquirer since your current version.

Updates joi from 18.2.3 to 18.2.5

Commits

• 58ce83e 18.2.5
• 120672d Merge pull request #3131 from Hashim1999164/fix/email-allow-underscore
• 5bd73b8 fix: allow allowUnderscore option on string().email()
• 2b4f443 Merge pull request #3138 from hapijs/fix/messages-proto-injection
• 90d0757 fix: prevent messages proto injection
• 82ff29f Merge pull request #3136 from hapijs/chore/improve-unique-documentation
• ad308cc chore: improve unique documentation
• ea3e156 18.2.4
• 262c4f1 Merge pull request #3134 from hapijs/fix/rename-proto
• 162f367 fix: prevent proto on renames
• See full diff in compare view

Updates ws from 8.21.2 to 8.21.3

Release notes

Sourced from ws's releases.

8.21.3

Bug fixes

• The server now correctly rejects permessage-deflate offers if the incoming client_max_window_bits parameter value is smaller than its configured clientMaxWindowBits (e97a20ea).

Commits

• c791e70 [dist] 8.21.3
• e97a20e [fix] Reject offers with client_max_window_bits below config
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions