Skip to content

Bump typescript from 6.0.3 to 7.0.2 - #1341

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/typescript-7.0.2
Open

Bump typescript from 6.0.3 to 7.0.2#1341
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/typescript-7.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps typescript from 6.0.3 to 7.0.2.

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [typescript](https://github.com/microsoft/TypeScript) from 6.0.3 to 7.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 20, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 20, 2026 03:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 20, 2026
@priya-kinthali

Copy link
Copy Markdown
Contributor

@copilot Fix the failing checks on this PR (Basic validation + Licensed). Run npm install to refresh the lockfile, resolve all npm audit failures (npm audit fix), then npm run format, npm run build, and npm test. Regenerate licenses with licensed cache and confirm licensed status passes.

Copilot AI commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

@copilot Fix the failing checks on this PR (Basic validation + Licensed). Run npm install to refresh the lockfile, resolve all npm audit failures (npm audit fix), then npm run format, ...

I dug into this and the Basic validation failures aren't fixable with an install/audit refresh — TypeScript 7.0.2 (the native compiler) can't be consumed by this repo's toolchain at all. Every build step breaks, and no released tool versions support TS 7 yet:

  • Install (npm ci): @typescript-eslint/* peer-requires typescript >=4.8.4 <6.1.0 (latest, 8.65.0, still caps <6.1.0), so resolution fails.
  • npm run build: @vercel/ncc@0.44.1 (latest) ts-loader crashes → TypeError: Cannot read properties of undefined (reading 'fileExists').
  • npm run lint: @typescript-eslint/parser hard-throws → typescript-eslint does not support TS 7.0.
  • npm test: ts-jest errors → "typescript (version 7.0.2) does not expose the JavaScript compiler API required by ts-jest … install it as @typescript/native and alias @typescript/typescript6 as typescript."

These all stem from TS 7 (native, Go port) not exposing the JS compiler API that ncc, ts-jest, and typescript-eslint rely on. I didn't commit anything, since regenerating the lockfile / running npm audit fix on top of a TS 7 that can't build/lint/test would still leave every check red (and npm audit fix here actually cascades 2 highs → 22 by pulling in vulnerable glob/minimatch).

How would you like to proceed?

  1. Hold/close this bump until ncc, ts-jest, and typescript-eslint ship TS 7 support (keep typescript on 6.x, which the toolchain supports).
  2. Migrate the toolchain to the TS 6 JS API side-by-side — alias @typescript/typescript6 as typescript and add @typescript/native. This can go green, but it turns the PR from a version bump into a build-system migration, and typescript would no longer resolve to 7.0.2 for the tools.

Separately, I can fix the two pre-existing npm audit highs (brace-expansion <=5.0.7, fast-xml-parser <5.10.1) via overrides (bumping the nested minimatch/glob/test-exclude so brace-expansion@^5.0.8 stays API-compatible) — that's independent of the TS bump and probably belongs in its own PR. Let me know if you'd like that.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants