dev: bump the safe group with 3 updates

[dependabot]

Bumps the safe group with 3 updates: @inquirer/prompts, @storybook/cli and cypress.

Updates @inquirer/prompts from 8.5.2 to 8.6.0

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.6.0

The all-in-one prompts package, re-exporting every individual prompt at its latest version.

Highlights

This release rides on @inquirer/core@12.0.0, which makes the useState setter accept a reducer/updater function. It also brings a new initialValue option to search, plus fixes for number, confirm, and editor.

What's new

• @inquirer/search — new initialValue?: string option to pre-fill the search input (#2205)

What's fixed

• @inquirer/number — avoid floating-point step errors; accept explicit undefined as default (#2166, #2182)
• @inquirer/confirm — accept explicit undefined as default (#2182)
• @inquirer/editor — accept explicit undefined as default (#2182)

Included prompts

• @inquirer/checkbox@5.2.2
• @inquirer/confirm@6.2.0
• @inquirer/editor@5.3.0
• @inquirer/expand@5.1.2
• @inquirer/input@5.1.3
• @inquirer/number@4.2.0
• @inquirer/password@5.1.2
• @inquirer/rawlist@5.3.2
• @inquirer/search@4.3.0
• @inquirer/select@5.2.2

Note: This release depends on @inquirer/core@^12.0.0, which contains a breaking change to the useState setter type (it now accepts a reducer function). See the @inquirer/core@12.0.0 release notes for details.

Commits

• 9997067 fix(release): serialize staging with --concurrency 1
• 2073546 fix(release): disable auto-install hook event in postpack restore
• 7f00eb7 fix(release): bypass auto-install hook in postpack restore
• 5384fa6 chore(release): add workflow_dispatch trigger to publish workflow
• d11785f fix(release): warm turbo cache before staging in publish job
• 36d4928 chore: Publish new release
• 15dfc54 chore(deps): Bump globby from 16.2.2 to 16.2.3 (#2234)
• 6678f5f chore(deps-dev): Bump oxfmt in the formatting group (#2233)
• e57dafa chore: secure release pipeline with npm Trusted Publishing
• 2d677bb fix: don't restore package.json in postpack before publish (#2231)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​inquirer/prompts since your current version.

Updates @storybook/cli from 10.5.8 to 10.5.10

Release notes

Sourced from @​storybook/cli's releases.

v10.5.10

10.5.10

• Core: Fetch static open-service snapshots relative to the document - #35945, thanks @​valentinpalkovic!
• Core: Pin oxc-resolver to 11.21.2 to keep tsconfig path aliases on solution-style tsconfigs - #35929, thanks @​valentinpalkovic!
• Dependencies: Bump Vitest to 4.1.6 (CVE-2026-47428) - #35530, thanks @​anupamme!
• Docs: Declare the font on overlay surfaces so docs tooltips are not left to inherit - #35966, thanks @​valentinpalkovic!
• ESLint Plugin: Bundle CSF helpers so the plugin loads without storybook - #35950, thanks @​ndelangen!
• React: Preserve discriminated union prop values in metadata extraction - #35844, thanks @​s-robertson!

v10.5.9

10.5.9

• Addon-Pseudo-States: Fix pseudo-states rewriting for nested functional selectors - #34318, thanks @​filipw01!
• Core: Skip module-graph reverse-index mirror when a patch is a no-op - #35825, thanks @​ndelangen!
• Core: Split module-graph into hot revisions and cold index services - #35831, thanks @​ndelangen!
• Preview: Fix crash when initialising UrlStore on a docs path - #35521, thanks @​TheSeydiCharyyev!
• Pseudo-States: Make stylesheet rewrites WebKit-safe - #35629, thanks @​ethriel3695!
• TanStack: Keep the layout id when cloning a standalone index file route - #35660, thanks @​Insik-Han!
• TanStack: Render real link hrefs in the Link mock - #35505, thanks @​unpunnyfuns!
• Webpack: Prevent long preview output filenames - #35533, thanks @​zhangli091011!

Changelog

Sourced from @​storybook/cli's changelog.

10.5.10

• Core: Fetch static open-service snapshots relative to the document - #35945, thanks @​valentinpalkovic!
• Core: Pin oxc-resolver to 11.21.2 to keep tsconfig path aliases on solution-style tsconfigs - #35929, thanks @​valentinpalkovic!
• Dependencies: Bump Vitest to 4.1.6 (CVE-2026-47428) - #35530, thanks @​anupamme!
• Docs: Declare the font on overlay surfaces so docs tooltips are not left to inherit - #35966, thanks @​valentinpalkovic!
• ESLint Plugin: Bundle CSF helpers so the plugin loads without storybook - #35950, thanks @​ndelangen!
• React: Preserve discriminated union prop values in metadata extraction - #35844, thanks @​s-robertson!

10.5.9

• Addon-Pseudo-States: Fix pseudo-states rewriting for nested functional selectors - #34318, thanks @​filipw01!
• Core: Skip module-graph reverse-index mirror when a patch is a no-op - #35825, thanks @​ndelangen!
• Core: Split module-graph into hot revisions and cold index services - #35831, thanks @​ndelangen!
• Preview: Fix crash when initialising UrlStore on a docs path - #35521, thanks @​TheSeydiCharyyev!
• Pseudo-States: Make stylesheet rewrites WebKit-safe - #35629, thanks @​ethriel3695!
• TanStack: Keep the layout id when cloning a standalone index file route - #35660, thanks @​Insik-Han!
• TanStack: Render real link hrefs in the Link mock - #35505, thanks @​unpunnyfuns!
• Webpack: Prevent long preview output filenames - #35533, thanks @​zhangli091011!

Commits

• a2db752 Bump version from "10.5.9" to "10.5.10" [skip ci]
• 17080b7 Merge pull request #35939 from storybookjs/fix/react-native-sandbox-age-gate-...
• 8f56104 Bump version from "10.5.8" to "10.5.9" [skip ci]
• See full diff in compare view

Updates cypress from 15.20.1 to 15.21.0

Release notes

Sourced from cypress's releases.

v15.21.0

Changelog: https://docs.cypress.io/app/references/changelog#15-21-0

Commits

• f7281ba deprecation: deprecate cy.exec() in favor of cy.task() (#34645)
• ae31593 chore: Add test-level rerun filtering (#34594)
• c81f956 chore: update help content (#34572)
• 007a2f3 chore: updating v8 snapshot cache (#34644)
• e9c3831 chore: stringify command manager script options (#34641)
• 407e7bd fix: label the cy.env() console output (#34615)
• 9bca4c9 chore: update semantic-release to 25.0.8 (#34453)
• 9dd798b chore: Update v8 snapshot cache (#34634)
• e51ac78 feat: add the cypress tap CLI for driving a running Cypress session (#34540)
• c3befad test: pin the accepted CDP drift in net_stubbing.cy.ts when the proxy is disa...
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
cypress	[>= 9.a, < 10]
cypress	[>= 10.a, < 11]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions