Repository navigation
build(deps-dev): Bump typescript from 5.9.3 to 6.0.2 - #502
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
|
The latest updates on your projects. Learn more about Vercel for GitHub. |
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.2. - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.2) --- updated-dependencies: - dependency-name: typescript dependency-version: 6.0.2 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/development/typescript-6.0.2
branch
from
April 6, 2026 19:12
7e7644b to
995fe55
Compare
|
RobertLD
added a commit
that referenced
this pull request
Oct 8, 2026
…alerts (#516) * build(deps): update npm dependencies Includes the Dependabot updates from #514 (minor and patch group), #504 (@xmldom/xmldom, lodash, path-to-regexp) and #502 (TypeScript 6), plus in-range updates of transitive dependencies. node-cron 4.6 ships its own types, so @types/node-cron is removed. * ci: bump actions/checkout to v7, dependency-review-action to v5, release-please-action to v5 From #512. All three only move the action runtime to Node 24. * style: apply Prettier 3.9 formatting and drop assertions TypeScript 6 makes unnecessary * fix(deps): replace @xenova/transformers with @huggingface/transformers @xenova/transformers 2.x is deprecated and pulls protobufjs 6 (critical advisory), sharp 0.32 and an old onnxruntime-web. @huggingface/transformers 4.3.1 brings protobufjs 7.6.6, sharp 0.35.5 and onnxruntime-node 1.30. The local provider loads the same model with dtype q8 (onnx/model_quantized.onnx, the 2.x default), so vectors stay compatible with existing indexes. The model is now cached in ~/.libscope/models. The library default is a folder inside its own package; version 4 fails the model load when it cannot write there (global installs, the non-root user of the Docker image). sharp and onnxruntime-node ship prebuilt binaries, so CI and the Docker image rebuild only better-sqlite3. * fix(deps): drop epub2 and parse EPUB files with pizzip epub2 pulls adm-zip 0.5 (high advisories). The EPUB parser now reads META-INF/container.xml, the OPF package and its spine with pizzip, which the PPTX parser already uses, and extracts chapter text with a linear tag scanner. The output format is unchanged: body text of each spine document in reading order, chapters separated by a blank line. Character references are now decoded. Entries are inflated with a bounded output size, and an EPUB whose content exceeds 100 MiB uncompressed (the indexing.maxDocumentSize default) is refused with a ValidationError. * fix(deps): bump csv-parse to v7 csv-parse < 7.0.2 has a moderate advisory (prototype replacement via columns). Version 7 keeps the csv-parse/sync API that the CSV parser uses. * chore(deps): ignore undici major updates in Dependabot undici 8 requires Node.js >= 22.19, and libscope supports Node.js 20.
Owner
Contributor
Author
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/development/typescript-6.0.2
branch
October 8, 2026 19:14
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps typescript from 5.9.3 to 6.0.2.
Release notes
Sourced from typescript's releases.
Commits
607a22aBump version to 6.0.2 and LKG9e72ab7🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...35ff23d🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...e175b69Bump version to 6.0.1-rc and LKGaf4caacUpdate LKG8efd7e8Merge remote-tracking branch 'origin/main' into release-6.0206ed1aDeprecate assert in import() (#63172)e688ac8Update dependencies (#63156)29b300dBump the github-actions group across 1 directory with 2 updates (#63205)0c2c7a3DOM update (#63183)