Upgrading inquirer 8 to 9
Breaking8.2.7 → 9.3.8Breaking1Security1New2Changed7Fixed3Other1
BreakingUpgrade verdict
1 breaking change and a security fix.
In plain terms
- The package can no longer be loaded the old way. Your project must use modern JavaScript modules, and if it does not, you should stay on version 8.x for now.
- Closes a security hole where specially crafted input could tamper with built-in JavaScript object behavior.
Must act 2 items need code or config changes
Node.js requirement changed in 9.2.14: >=12.0.0 → >=18.
Adds @inquirer/figures ^1.0.3, yoctocolors-cjs ^2.1.2.
Drops chalk, cli-cursor, figures, lodash, through.
Installs 47 packages in all (was 49).
What you must change
Breaking1
Converts inquirer to a native Node ECMAScript module, requiring an ESM-capable Node runtime and an ESM app.
Security1
Fixes a risk of prototype injection.