Skip to content

fix: bump typescript from 5.9.3 to 6.0.3 - #272

Merged
dannyneira merged 2 commits into
mainfrom
dependabot/npm_and_yarn/typescript-7.0.2
Aug 3, 2026
Merged

fix: bump typescript from 5.9.3 to 6.0.3#272
dannyneira merged 2 commits into
mainfrom
dependabot/npm_and_yarn/typescript-7.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Summary

Bumps typescript from 5.9.3 to 6.0.3 (latest 6.x stable) and merges origin/main to resolve conflicts.

Originally proposed by Dependabot as a bump to 7.0.2, but TypeScript 7.x is incompatible with the repo's pinned peer dependencies. This PR targets 6.0.3 instead — the maximum safe upgrade within all peer constraints.

Why not TypeScript 7.0.2?

TypeScript 7.0.2 violates two install-blocking peer dependency constraints:

Dependency Peer constraint TS 6.0.3 TS 7.0.2
@typescript-eslint/parser@8.65.0 typescript >=4.8.4 <6.1.0
ts-jest@29.4.11 typescript >=4.3 <7

No published typescript-eslint release supports TypeScript 7 yet (latest 8.66.0 still caps at <6.1.0). TS 7 is blocked on upstream support.

Changes

  • package.json: typescript: "^5.0.0""^6.0.0" (resolves to 6.0.3)
  • package-lock.json: regenerated via npm install --legacy-peer-deps + npm audit fix
  • dist/: rebuilt with TypeScript 6.0.3 (ncc build)

Validation

Check Result
tsc (build) ✅ Pass
prettier --check (format-check) ✅ Pass
ncc build (package) ✅ Pass
check-dist equivalent (git diff dist/ after rebuild) ✅ Pass (0 lines)
npm audit ✅ 0 vulnerabilities
eslint (lint) ❌ Pre-existing main failure (see note)

ESLint note

The npm run lint step fails due to a pre-existing issue on main unrelated to this TypeScript bump:
@stylistic/eslint-plugin@5.10.0 rule naming incompatibility with eslint@10.8.0
(Could not find "func-call-spacing" in plugin "@stylistic").

This was introduced by PRs #271 (eslint 9→10) and #278 (@Stylistic 2.13→5.10) and
also causes npm install to ERESOLVE-fail on main (eslint-plugin-import@2.32.0
does not support eslint 10). Both issues exist on main independent of this PR.

Merge info

  • Merged origin/main (63719a8) into the branch via git merge --no-ff (no rebase/force-push)
  • Conflicts resolved by taking main as baseline for package.json and package-lock.json,
    then setting typescript: "^6.0.0" and regenerating the lockfile via npm

Co-Authored-By: Warp Agent agent@warp.dev

Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 7.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 27, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot can't resolve your JavaScript dependency files. Because of this, Dependabot cannot update this pull request.

@dependabot @github

dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot can't resolve your JavaScript dependency files. Because of this, Dependabot cannot update this pull request.

Resolve merge conflicts in package.json and package-lock.json by taking
main as baseline and setting typescript to ^6.0.0 (resolves to 6.0.3).

TypeScript 7.0.2 (the original dependabot proposal) is incompatible with
the repo's pinned peer dependencies:
- @typescript-eslint/parser@8.65.0 peer: typescript >=4.8.4 <6.1.0
- ts-jest@29.4.11 peer: typescript >=4.3 <7
6.0.3 is the latest 6.x stable and the maximum safe upgrade within all
peer constraints.

Lockfile regenerated via npm install --legacy-peer-deps + npm audit fix:
- typescript: 5.9.3 -> 6.0.3
- brace-expansion: 5.0.8 -> 5.0.9 (remediates GHSA-rgw5-rvv9-x895 /
  CVE-2026-69152, Dependabot alert #76)
- npm audit: 0 vulnerabilities

dist/ rebuilt with TypeScript 6.0.3 (ncc build).

Note: ESLint lint step fails due to a pre-existing main issue
(@stylistic/eslint-plugin@5.10.0 rule naming incompatibility with
eslint@10.8.0), unrelated to this TypeScript bump.

Co-Authored-By: Warp Agent <agent@warp.dev>
@dannyneira dannyneira changed the title fix: bump typescript from 5.9.3 to 7.0.2 fix: bump typescript from 5.9.3 to 6.0.3 Aug 3, 2026
@dannyneira
dannyneira merged commit 1adbb20 into main Aug 3, 2026
3 of 5 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/typescript-7.0.2 branch August 3, 2026 23:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant