Bump the production-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the production-dependencies group with 5 updates in the / directory:

Package	From	To
chalk	6.0.0	6.0.1
dotenv	18.0.3	18.0.6
express-rate-limit	8.7.0	8.7.1
inquirer	14.2.2	14.2.3
ws	8.21.3	8.22.0

Updates chalk from 6.0.0 to 6.0.1

Release notes

Sourced from chalk's releases.

v6.0.1

• Fix inconsistent coercion of two arguments 9c93a04

---

chalk/chalk@v6.0.0...v6.0.1

Commits

• 47fc05a 6.0.1
• 9c93a04 Fix inconsistent coercion of two arguments
• 8960ada Meta tweaks
• See full diff in compare view

Updates dotenv from 18.0.3 to 18.0.6

Changelog

Sourced from dotenv's changelog.

18.0.6 (2026-10-06)

Changed

• Use smarter parseBoolean not Boolean() to fix override (#1069)

18.0.5 (2026-09-30)

Changed

• Fix missing typescript module declaration (#1068)
• Improve performance for large .env files (#1066)

18.0.4 (2026-09-25)

Changed

• import dotenv/config should default quiet: true (#1063)

Commits

• 5d7cc39 18.0.6
• 750ba03 changelog
• caa14f0 Merge pull request #1069 from kevin9327/populate-parse-boolean-options
• a8b9720 fix: parse debug and override in populate like config does
• 05215e0 18.0.5
• 25bdd0a changelog
• 2d640d2 Merge pull request #1066 from AyanAta42/master
• c84e2b4 Merge pull request #1068 from matzehecht/fix-typescript
• 570146a Optimize fast parser comment scanning
• 4aa0665 add typescript module declaration for dotenv/config
• Additional commits viewable in compare view

Updates express-rate-limit from 8.7.0 to 8.7.1

Release notes

Sourced from express-rate-limit's releases.

v8.7.1

You can view the changelog here.

Commits

• c2e30b3 8.7.1
• b40a390 v8.7.1 changelog
• ccbee88 fix: correct es2020/es2022 version mismatch between tsconfig and esbuild comm...
• 11a143a chore: fix duplicate entries in pnpm-lockfile.yaml (#685)
• 92f685d chore(deps): bump softprops/action-gh-release from 1 to 3 (#692)
• 0c7c066 chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 (#694)
• 9735b69 chore(deps): bump pnpm/action-setup from 3.0.0 to 6.1.0 (#695)
• 7f401b7 chore(deps): bump actions/setup-node from 4.4.0 to 7.0.0 (#693)
• 7a49bb0 ci: add guard that fails the build on unpinned GitHub Actions (companion to #...
• 784c447 ci: pin GitHub Actions to immutable commit SHAs (#690)
• Additional commits viewable in compare view

Updates inquirer from 14.2.2 to 14.2.3

Release notes

Sourced from inquirer's releases.

inquirer@14.2.3

What's new

• Rolled up the prompt fixes from this release: search() stale-choice submission (#2291), confirm() always accepting y/n (#2281), expand()/rawlist() whitespace handling (#2280).
• All package READMEs now document the Deno install command (#2269).

Dependencies

• @inquirer/prompts bumped to ^8.7.3
• @inquirer/core bumped to ^12.0.4

Commits

• a9436bd chore(release): bump @​inquirer/type range to ^4.2.0
• 61be5df chore: Publish new release
• 7dc77e2 fix(search): prevent submissions while the prompt is loading
• 73b5eab docs: document Deno installation (#2269)
• 79a092a ci: add Deno compatibility test suite (#2271)
• 148a96a chore: enable vitest fsModuleCache to persist transforms across runs
• e928543 chore: bump yarn to 4.18.1 via corepack
• 2348c7b fix(external-editor): use BSD/GNU-compatible truncate flag in test
• 3c1fdb3 fix(confirm): always accept y/n and reject unrecognized input (#2281)
• eae8b3e fix(expand, rawlist): ignore surrounding whitespace in answers (#2280)
• Additional commits viewable in compare view

Updates ws from 8.21.3 to 8.22.0

Release notes

Sourced from ws's releases.

8.22.0

Features

• Introduced the protocols option (8b918b01).

Bug fixes

• Calling websocket.close() with invalid arguments no longer transitions the state to WebSocket.CLOSING (#2337).

Commits

• 297202c [dist] 8.22.0
• 8b918b0 [feature] Introduce the protocols option
• 73e03eb [ci] Update actions/setup-node action to v7
• d9b8954 [fix] Change the ready state after validating the arguments (#2337)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions