Bump the production-dependencies group with 4 updates

[dependabot]

Bumps the production-dependencies group with 4 updates: @clack/prompts, isomorphic-git, yaml and @types/node.

Updates @clack/prompts from 1.7.0 to 1.8.0

Release notes

Sourced from @​clack/prompts's releases.

@​clack/prompts@​1.8.0

Minor Changes

• #592 caa32e8 Thanks @​gameroman! - Export CANCEL_SYMBOL constant from @clack/core and @clack/prompts

• #594 37fca4e Thanks @​dreyfus92! - Add tab-completion to the path prompt: pressing Tab fills the input with the focused suggestion, so you can quickly descend into deep directories (type / and Tab again). Powered by a new opt-in completeOnTab option on autocomplete, which also shows a Tab: complete hint in the instructions footer. Default autocomplete behavior is unchanged.

• #583 ae636dd Thanks @​43081j! - Add async validation support to prompts, and validation state rendering to text prompts.

Patch Changes

• #588 6506135 Thanks @​danielroe! - Style the guide bar rendered by box({ withGuide: true }) in grey so it matches the gutter drawn by log, note and the spinner

• #599 0547d6f Thanks @​43081j! - Fixes a withGuide rendering issue leaving extra spaces in text prompts.

• Updated dependencies [227583e, caa32e8, 37fca4e, ae636dd, b20fa2b]:

  • @​clack/core@​1.5.0

Changelog

Sourced from @​clack/prompts's changelog.

1.8.0

Minor Changes

• #592 caa32e8 Thanks @​gameroman! - Export CANCEL_SYMBOL constant from @clack/core and @clack/prompts

• #594 37fca4e Thanks @​dreyfus92! - Add tab-completion to the path prompt: pressing Tab fills the input with the focused suggestion, so you can quickly descend into deep directories (type / and Tab again). Powered by a new opt-in completeOnTab option on autocomplete, which also shows a Tab: complete hint in the instructions footer. Default autocomplete behavior is unchanged.

• #583 ae636dd Thanks @​43081j! - Add async validation support to prompts, and validation state rendering to text prompts.

Patch Changes

• #588 6506135 Thanks @​danielroe! - Style the guide bar rendered by box({ withGuide: true }) in grey so it matches the gutter drawn by log, note and the spinner

• #599 0547d6f Thanks @​43081j! - Fixes a withGuide rendering issue leaving extra spaces in text prompts.

• Updated dependencies [227583e, caa32e8, 37fca4e, ae636dd, b20fa2b]:

  • @​clack/core@​1.5.0

Commits

• de1ef16 [ci] release (#589)
• 0547d6f fix: output submit gap only when guide enabled (#599)
• ae636dd feat: add async validation (#583)
• 37fca4e feat(prompts): add tab-completion to path prompt (#594)
• caa32e8 feat: export CANCEL_SYMBOL (#592)
• 8d81248 chore: stop publishing CHANGELOG.md to npm (#591)
• e238070 test(box): remove redundant test (#590)
• 6506135 fix(prompts): style box guide bar to match other gutters (#588)
• See full diff in compare view

Updates isomorphic-git from 1.41.9 to 1.42.2

Release notes

Sourced from isomorphic-git's releases.

v1.42.2

1.42.2 (2026-09-11)

Bug Fixes

• sanitize remote refs (#2431) (243d924)
• wrong ref (#2432) (66ae89c)

v1.42.1

1.42.1 (2026-09-11)

Bug Fixes

• restore PushRejectedError when pushing against advanced remote (#2429) (14764ae), closes #2421

v1.42.0

1.42.0 (2026-09-10)

Features

• abort signal (#2428) (f6746a6)

Bug Fixes

• fix prototype pollution (#2426) (b3db111)

Commits

• 66ae89c fix: wrong ref (#2432)
• 243d924 fix: sanitize remote refs (#2431)
• 14764ae fix: restore PushRejectedError when pushing against advanced remote (#2429)
• f6746a6 feat: abort signal (#2428)
• 72f384d chore: building docs (#2427)
• 71201ef fix: prototype pollution via malicious ref names in getRemoteInfo
• b3db111 fix prototype polution (#2426)
• See full diff in compare view

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

• Limit recursive merge aliases (#685, #713)
• Simplify line unfolding during quoted string parsing (#714)

Commits

• 1440ecd 2.9.1
• c699bc5 fix: Simplify line unfolding during quoted string parsing (#714)
• d11ce77 fix: Limit recursive merge aliases (#713)
• c5f49f4 chore: Update docs-slate
• See full diff in compare view

Updates @types/node from 26.4.1 to 26.5.1

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions