Skip to content

build(deps-dev): bump typescript from 6.0.3 to 7.0.2 - #66

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/typescript-7.0.2
Closed

build(deps-dev): bump typescript from 6.0.3 to 7.0.2#66
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/typescript-7.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Contributor

Bumps typescript from 6.0.3 to 7.0.2.

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.



View with Codesmith Autofix with Codesmith
Need help on this PR? Tag /codesmith with what you need. Autofix is disabled.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 22, 2026
@socket-security

socket-security Bot commented Jul 22, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedtypescript@​6.0.3 ⏵ 7.0.294 -610089 -1100100 +10

View full report

Bumps [typescript](https://github.com/microsoft/TypeScript) from 6.0.3 to 7.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bun/typescript-7.0.2 branch from dd37408 to 36c107c Compare July 22, 2026 15:08
@ualtinok

Copy link
Copy Markdown
Contributor

Holding this update for now. TypeScript 7.0.2 is not a safe standalone merge because the current OpenTUI dependency graph still declares an incompatible TypeScript peer constraint. Please leave this pending until that peer graph supports TypeScript 7, then refresh the branch and rerun typecheck, build, tests, and strict-peer installation.

@ualtinok

Copy link
Copy Markdown
Contributor

Re-evaluated this on an isolated branch off main at v0.4.3, since the earlier deferral no longer holds: 7.0.2 is now the stable latest release, not the prerelease I originally declined.

Full gate under TypeScript 7.0.2:

  • Typecheck: clean, both packages
  • Build: clean, including the AOT TUI compile and the 22 emitted declaration files
  • Tests: 714 OpenCode, 2 Pi, 0 failures
  • Format, lint, and npm pack --dry-run: clean

I also re-checked the peer constraint I originally cited as the blocker. Nothing in the installed tree declares a TypeScript peer except bun-ffi-structs, a transitive dependency of @opentui/core, and it declares ^5 — already unsatisfied by our current 6.0.3 with no observable effect. It is a stale range on a transitive package, not a real constraint. @opentui/core and @opentui/solid declare no TypeScript peer at all.

So the blocker is retracted. This is mergeable on the evidence; holding it only for batching with the other green dependency updates.

ualtinok added a commit that referenced this pull request Aug 10, 2026
TypeScript 7.0.2, Biome 2.5.6, @opencode-ai/plugin 1.18.11, ai 7.0.48,
and jdx/mise-action 4.2.4. Supersedes #66, #71, #76, #79, and #81, which
each carried the same lockfile and could not land independently.

TypeScript 7.0.2 is now the stable release rather than the prerelease
that was previously declined. The only TypeScript peer range left in the
tree belongs to bun-ffi-structs, a transitive dependency of @opentui/core
that pins ^5 and is already unsatisfied today with no observable effect.

Also replaces the fixed 50ms sleeps in the account-add tests with polling
on the observable effect. The completion runs detached and performs
lock-based file I/O, so its duration tracks machine load; the fixed tick
failed once under contention during this batch. The two tests asserting
that an add is REJECTED keep a sleep, since an absence has no effect to
poll for, and use a longer one.
@dependabot @github

dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like typescript is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 10, 2026
@dependabot
dependabot Bot deleted the dependabot/bun/typescript-7.0.2 branch August 10, 2026 21:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant