build(deps-dev): bump the npm-dependencies group across 1 directory with 4 updates - #67
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
| "semantic-release": "25.0.9", | ||
| "turbo": "2.10.12", | ||
| "typescript": "6.0.3", | ||
| "typescript": "7.0.2", |
There was a problem hiding this comment.
🔴 Blocker [policy]: This grouped bump moves typescript to 7.0.2 (a major version) while leaving typescript-eslint unchanged at 8.69.0, whose own declared peer dependency is typescript >=4.8.4 <6.1.0 (see package-lock.json's node_modules/typescript-eslint entry). That range excludes 7.0.2 outright, and this isn't theoretical — it's already broken every check on this PR's own head commit: Typecheck, Lint, Format, and Commitlint all fail in CI with the identical root cause:
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: typescript-eslint@8.69.0
npm error Found: typescript@7.0.2
npm error node_modules/typescript
npm error dev typescript@"7.0.2" from the root project
npm ci (what CI runs) refuses to install this combination at all, so nothing downstream of it can pass — this repository's required-checks gate job is failing as a direct consequence, tagged [policy] since commitlint.config.ts/release.config.ts and this repo's own strict npm ci-based CI are the enforced convention that makes an unresolvable peer conflict a hard failure rather than a warning.
The typescript-eslint side of this is unchanged in the diff, so the fix isn't something in this diff to edit directly — it's a Dependabot-grouping problem: .github/dependabot.yml's npm-dependencies group has no semver-level or per-package granularity (patterns: ["*"], only @anthropic-ai/claude-code excluded), so a major typescript bump can land bundled with unrelated minor/patch bumps whenever typescript-eslint hasn't caught up yet. Until typescript-eslint ships peer-dep support for TypeScript 7, this PR should not merge with typescript at 7.0.2 — either drop just that one line back to a 6.x release compatible with typescript-eslint@8.69.0's peer range, or hold the whole group until typescript-eslint catches up.
…ith 4 updates Bumps the npm-dependencies group with 4 updates in the / directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [eslint](https://github.com/eslint/eslint), [lint-staged](https://github.com/lint-staged/lint-staged) and [typescript](https://github.com/microsoft/TypeScript). Updates `@types/node` from 26.4.1 to 26.5.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 10.9.1 to 10.10.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.9.1...v10.10.0) Updates `lint-staged` from 17.4.1 to 17.5.0 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.4.1...v17.5.0) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v6.0.3...v7.0.2) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: eslint dependency-version: 10.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: lint-staged dependency-version: 17.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
99cc82c to
ebc0655
Compare
Superseded by re-review on the latest commit.
There was a problem hiding this comment.
Re-review after rebase (new head ebc0655, previously 99cc82c) — verdict unchanged. The diff content is identical to the prior revision; only the commit SHA changed. I've dismissed and cleared my two stale reviews from the prior commit, since a stale CHANGES_REQUESTED from before this rebase shouldn't keep blocking under its own now-superseded write-up.
🔴 Blocker [policy] (still open on the existing inline thread at package.json:39 — not duplicating it, just reconfirming on this commit): typescript is bumped 6.0.3 → 7.0.2 (major) while typescript-eslint@8.69.0 is left unchanged. Re-verified fresh for this revision:
package-lock.jsonstill declares"peerDependencies": {"typescript": ">=4.8.4 <6.1.0", ...}throughout thetypescript-eslint/@typescript-eslint/*sub-tree — unchanged, and still excludes7.0.2.- The GitHub Checks API for this exact head commit (
ebc0655) showsRequired Checks,Format,Typecheck,Commitlint, andLintallfailure.
Same fix as before: bump typescript-eslint to a release whose peer range covers TypeScript 7, or hold typescript at a 6.x release compatible with the current typescript-eslint@8.69.0.
No new findings. Title/description are Dependabot's own standard, accurate summary of the grouped bump — no change needed. No unreadiness signal, so no draft conversion.
|
🗜️ Headroom context compression
|
Bumps the npm-dependencies group with 4 updates in the / directory: @types/node, eslint, lint-staged and typescript.
Updates
@types/nodefrom 26.4.1 to 26.5.0Commits
Updates
eslintfrom 10.9.1 to 10.10.0Release notes
Sourced from eslint's releases.
Commits
3f20a5710.10.0f4e5284Build: changelog update for 10.10.0bb47dc6fix: update dependency file-entry-cache to v11 (#20801)427ac0afix: use format strings in debug calls (#21247)b3d876bchore: disable npm audit in ecosystem tests (#21306)9d81532fix: support__proto__in/* exported */comments (#21261)264b434feat: adddandvflags tono-unexpected-multiline(#21305)1696682ci: restore EMFILE test on Node.js 26 (#21297)2c7f5d6chore: update github/codeql-action action to v4.37.9 (#21296)87e0a08fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282)Updates
lint-stagedfrom 17.4.1 to 17.5.0Release notes
Sourced from lint-staged's releases.
Changelog
Sourced from lint-staged's changelog.
Commits
dcb59f6Merge pull request #1846 from lint-staged/changeset-release/main9c8c6dcchore(changeset): release586466fMerge pull request #1849 from lint-staged/improve-intent-to-add45eda5frefactor: improve--intent-to-adddetection26372e3Merge pull request #1848 from lint-staged/fix-color-detectiond718cccfix: honor FORCE_COLOR/NO_COLOR env variables in non-TTY streamsbe78a51Merge pull request #1847 from lint-staged/intent-to-addf9063b7feat: refuse to run when files were staged with--intent-to-adda767299Merge pull request #1845 from lint-staged/updates61ffd25style: add VS Code extension configUpdates
typescriptfrom 6.0.3 to 7.0.2Release notes
Sourced from typescript's releases.
Commits
1e4744dMerge branch 'main' into ts7-releasea5a219cmicrosoft/typescript-go#4558ecfe30dUpdate status localization5de25b5Hide executable name in TypeScript statusd7ce74aShow bundled TypeScript version for packaged servers29be66aCorrect TS 7 release version to 7.0.2ed2bd1bMerge branch 'main' into ts7-release8873075Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...9427131Set up stable / nightly extension split, other prep (microsoft/typescript-go#...d4eaca5microsoft/typescript-go#4549Maintainer changes
This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.