Skip to content

chore(deps): bump typescript from 5.9.3 to 7.0.2 in /tui - #7

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tui/typescript-7.0.2
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tui/typescript-7.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown
Contributor

Bumps typescript from 5.9.3 to 7.0.2.

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 7.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v7.0.2)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 28, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 28, 2026 15:46
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Oct 28, 2026

@elmarhepp elmarhepp left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Requesting changes: one blocking issue, see the inline comments.

The PR bumps TypeScript in tui/ to the major version 7.0.2 without touching typescript-eslint. The lockfile shows that typescript-eslint 8.72.0 and all nested @typescript-eslint/* packages declare the peer range typescript >=4.8.4 <6.1.0, which 7.0.2 violates. As a result, npm ci with npm 7+ fails with a peer conflict. The PR should not be merged as it is: either keep TypeScript below 6.1 or upgrade typescript-eslint to a release that supports TypeScript 7 in the same PR.

Notes:

  1. tui/package-lock.json: Dependabot notes that this release was pushed to npm by a new releaser, microsoft1es, since the current version. The lockfile integrity hashes match the registry, but for a major version with a new distribution model (native per-platform optional packages), it is worth confirming that the publisher is the expected Microsoft TypeScript release channel before merging.

Questions:

  • What does the failing CI check show? Is it the npm ci peer conflict, a lint failure, or a build failure with TypeScript 7?
  • Do the tui scripts or tooling use tsserver or the TypeScript JS API directly, or only the tsc binary?
  • Does tui/tsconfig.json use options that were deprecated in TypeScript 6.0 (for example baseUrl, moduleResolution: node10, or target: es5)?
  • Was the dependency resolved with --legacy-peer-deps or a similar flag locally, and does npm ci pass without it?

Prepared with Meow (Claude), reviewed by Elmar.

Comment thread tui/package.json
"ink-testing-library": "^4.0.0",
"prettier": "^3.9.10",
"typescript": "^5.6.0",
"typescript": "^7.0.2",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

typescript is bumped to ^7.0.2, but the installed typescript-eslint 8.72.0 (and its nested @typescript-eslint/* packages in the lockfile) declare the peer range typescript >=4.8.4 <6.1.0. This peer conflict makes npm ci fail under npm 7+ unless --legacy-peer-deps is used, and it is a likely cause of the failing CI check. Keep TypeScript within the range that typescript-eslint supports, or upgrade typescript-eslint to a release that supports TypeScript 7 in the same PR, and confirm that npm ci, lint and build pass.

Comment thread tui/package-lock.json
@@ -2360,6 +2541,186 @@
"typescript": ">=4.8.4 <6.1.0"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note, not blocking: The lockfile now nests @typescript-eslint/eslint-plugin, parser, typescript-estree, utils and ignore under node_modules/typescript-eslint/node_modules/..., and the top-level @typescript-eslint/* entries were moved or removed. The diff alone does not show why. Any ESLint configuration or tool that imports these packages from the top level could resolve different versions or fail. Regenerate the lockfile with the tooling pinned in the repo and verify that the ESLint config still loads.

Comment thread tui/package-lock.json
@@ -2323,17 +2483,38 @@
}

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note, not blocking: TypeScript 7 is a native rewrite. The tsserver bin was removed from the package, and the JavaScript API may differ from 5.x. Any script, editor integration, or tool in tui/ that calls tsserver or require('typescript') will break. The PR does not show a build or test run against TypeScript 7, and tsconfig options that were deprecated in 6.0 may be removed in 7. Run tsc --noEmit and the test suite locally before merging, and check the tsconfig for removed options.

@dependabot @github

dependabot Bot commented on behalf of github Oct 29, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #10.

@dependabot dependabot Bot closed this Oct 29, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/tui/typescript-7.0.2 branch October 29, 2026 15:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant