Skip to content

fix(cli): update marked-terminal to 7.3.1 - #483

Merged
coryrylan merged 1 commit into
mainfrom
topic/dependencies/cli/marked-terminal
Oct 30, 2026
Merged

coryrylan merged 1 commit into
mainfrom
topic/dependencies/cli/marked-terminal

Conversation

@cursor

@cursor cursor Bot commented Oct 30, 2026

Copy link
Copy Markdown

Update the CLI runtime dependency marked-terminal from 7.3.0 to 7.3.1.

marked-terminal is a runtime dependency of @nvidia-elements/cli, declared as an exact version in projects/cli/package.json under dependencies.

Release review:

  • 7.3.1 was published on 2026-10-28 and is outside the 1140-minute release-age window.
  • The license stays MIT and the engine stays node >= 16.
  • The patch strips C0 and C1 control characters from rendered text, code, HTML, links, and images so Markdown cannot inject terminal escape sequences.
  • The marked peer range widens from >=1 <16 to >=1 <19, which still accepts the pinned marked 18.0.14. marked itself was not updated.
  • 8.0.0 is a breaking major and was not selected.

Generated changes:

  • The CLI lockfile pin and package integrity move to 7.3.1(marked@18.0.14).
  • ansi-regex 6.5.0 is added because 7.3.1 requires ansi-regex ^6.4.0.
  • The transitive marked-terminal@7.3.0 required by semantic-release stays.
  • The root NOTICE.md and projects/cli/NOTICE.md record 7.3.1.

Validation:

  • mise exec -- pnpm run ci in projects/cli: passed (32 scripts, 0 skipped, 44s).
  • mise exec -- node .agents/skills/agent-dependencies/scripts/verify-update.js --type=fix --scope=cli: passed.
  • CI=1 mise exec -- pnpm install --frozen-lockfile: passed.
  • mise exec -- pnpm run ci from the repository root: passed (162 scripts, 32 skipped, 126.5s).
  • git diff --check: passed.
  • pnpm run notice is not a package script. Notices were regenerated with node ./projects/internals/ci/notice/index.js.
Open in Web View Automation 

@coderabbitai

coderabbitai Bot commented Oct 30, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@github-actions github-actions Bot added scope(ci) scope(cli) dependencies Pull requests that update a dependency file labels Oct 30, 2026
@cursor
cursor Bot marked this pull request as ready for review October 30, 2026 12:17
@github-code-quality

github-code-quality Bot commented Oct 30, 2026 •

Copy link
Copy Markdown

Code coverage overview

Languages: TypeScript

TypeScript / code-coverage/vitest

main ab3068c topic/dependencies/c... f4eaa64 +/-
99% 99% 0%

ℹ️ Calculations represent line coverage. Results may change as calculations are updated.


Updated October 30, 2026 13:28 UTC

Co-authored-by: Cory Rylan  <coryrylan@users.noreply.github.com>
Signed-off-by: Cursor Agent <cursoragent@cursor.com>
@coryrylan
coryrylan force-pushed the topic/dependencies/cli/marked-terminal branch from 9567c66 to f4eaa64 Compare October 30, 2026 13:18
@coryrylan
coryrylan merged commit d11932c into main Oct 30, 2026
17 checks passed
@coryrylan
coryrylan deleted the topic/dependencies/cli/marked-terminal branch October 30, 2026 14:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file scope(ci) scope(cli)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants