Update dependency typescript to v6

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
typescript (source)	^5.9.3 → ^6.0.0

---

Release Notes

microsoft/TypeScript (typescript)

v6.0.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - "after 7am every weekday,before 7pm every weekday" in timezone CET, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: bun.lock

Command failed: bun install --ignore-scripts
Resolving dependencies
Resolved, downloaded and extracted [1]
error: GET https://repox.jfrog.io/artifactory/api/npm/npm/typescript - 401
error: typescript@^6.0.0 failed to resolve

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: CLI-261

[sonar-review-alpha]

Summary

Upgrades TypeScript from 5.9.3 to 6.0.3 and updates TypeScript-ESLint tooling (8.56.1 → 8.59.0) to maintain compatibility with the new major version. The TypeScript-ESLint peer dependency constraints have been updated to accept TypeScript 6.x.

The test files show removal of unnecessary type assertions (e.g., as unknown as never, as Response), suggesting TypeScript 6.0's improved type inference eliminates these workarounds while maintaining correctness.

What reviewers should know

What to focus on:

1. Type assertion removals in tests — The bulk of changes are in test files where explicit type casts are being removed (lines like as unknown as never, as Response, as Promise<...>). This is expected with TS 6.0's improved type inference and is a sign the upgrade is compatible.

2. Check for compilation errors locally — While test files show clean removal of casts, verify the full codebase compiles without errors (npm run build or tsc).

3. Peer dependency bounds — TypeScript-ESLint's upper bound changed from <6.0.0 to <6.1.0, aligning with TS 6.0 support. This is correct but may affect other projects consuming this package.

4. No breaking API changes observed — The changes are minimal and don't suggest any breaking behavior changes required in the application code itself.

To review:

• Run the full test suite to ensure everything passes
• Check that linting rules work as expected with the new versions

---

• Generate Walkthrough
• Generate Diagram

🗣️ Give feedback

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[sonar-review-alpha]

Conclusion: This PR has a real compatibility problem that blocks merge — typescript-eslint@8.56.1 explicitly declares "typescript": ">=4.8.4 <6.0.0" as a peer dependency (visible in the lock file), meaning it does not support TypeScript 6.x. typescript-eslint needs to be bumped to a version that supports TS 6 before this can land safely.

🗣️ Give feedback

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 New dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonar-review-alpha]

LGTM! ✅

Clean, well-scoped upgrade. All type assertion removals are correct and backed by the types in the actual source code — no hidden bugs are being papered over. The TypeScript-ESLint peer dependency upper bound (<6.1.0) correctly admits TS 6.0.x. Package versions are consistent between package.json and bun.lock.

🗣️ Give feedback