Skip to content

chore(deps-dev): Bump the dev-dependencies group across 1 directory with 2 updates - #10

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-f07d571036
Open

chore(deps-dev): Bump the dev-dependencies group across 1 directory with 2 updates#10
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-f07d571036

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown

Bumps the dev-dependencies group with 2 updates in the / directory: @types/node and typescript.

Updates @types/node from 22.20.1 to 26.2.0

Commits

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 11, 2026
@dependabot dependabot Bot changed the title chore(deps-dev): Bump the dev-dependencies group with 2 updates chore(deps-dev): Bump the dev-dependencies group across 1 directory with 2 updates Aug 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-f07d571036 branch 2 times, most recently from b3bbe3d to 13783a8 Compare August 16, 2026 15:48
@earthwalker17

Copy link
Copy Markdown
Owner

Holding this one, and flagging that its title undersells it.

"Bump the dev-dependencies group across 1 directory with 2 updates" reads as routine, but the contents are two majors:

  • typescript ~5.9.3~7.0.2
  • @types/node ^22.10.0^26.2.0

Both are worth taking eventually; neither is release polish. A TypeScript major on a codebase running strict + noUncheckedIndexedAccess + exactOptionalPropertyTypes routinely surfaces new errors, which is exactly why typescript is tilde-pinned and why .github/dependabot.yml says the bump should be deliberate and hand-reviewed. And @types/node 26 describes APIs above this package's own engines.node: >=22 floor, so the types would stop matching the runtime this project supports.

Left open rather than closed so it stays visible as a decision to make on purpose, in a session that can absorb whatever the compiler says.

earthwalker17 added a commit that referenced this pull request Aug 16, 2026
Applied on current main rather than by merging Dependabot #12: that branch
predates this session's CI change, so its Linux leg — no longer advisory — runs
without the three portability fixes and would fail on a bump that has nothing
to do with it.

The SDK reaches exactly one module (src/provider/anthropic.ts), so the blast
radius is the Anthropic adapter. Typecheck clean; the anthropic, provider-infra,
wire-image, mock-provider and architecture suites pass (57 tests). The live
adapter smoke stays opt-in and was not run — it costs money.

Deliberately NOT taken in the same pass:

- #10, despite its "dev-dependencies group" title, is typescript ~5.9 -> ~7.0
  and @types/node ^22 -> ^26. Two majors, one of them a TypeScript major on a
  codebase with noUncheckedIndexedAccess and exactExactOptionalPropertyTypes,
  and @types/node 26 describes APIs above this package's own Node 22 floor.
  dependabot.yml already says a TS major should be a deliberate, hand-reviewed
  upgrade; it is not release polish.
- #11 is undici 7 -> 8, deferred on the record because the proxy dispatcher
  needs live verification, not a green unit suite.

Both stay open with that reasoning on the PR.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
…ith 2 updates

Bumps the dev-dependencies group with 2 updates in the / directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [typescript](https://github.com/microsoft/TypeScript).


Updates `@types/node` from 22.20.1 to 26.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `typescript` from 5.9.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-f07d571036 branch from 13783a8 to d0686ad Compare August 18, 2026 04:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant