Skip to content

chore(deps-dev): bump typescript from 5.9.3 to 6.0.3#13

Merged
mike-diamond merged 2 commits into
mainfrom
dependabot/npm_and_yarn/typescript-6.0.3
Jun 2, 2026
Merged

chore(deps-dev): bump typescript from 5.9.3 to 6.0.3#13
mike-diamond merged 2 commits into
mainfrom
dependabot/npm_and_yarn/typescript-6.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Copy link
Copy Markdown
Contributor

Bumps typescript from 5.9.3 to 6.0.3.

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits
  • 050880c Bump version to 6.0.3 and LKG
  • eeae9dd 🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...
  • ad1c695 🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)
  • 0725fb4 🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...
  • 607a22a Bump version to 6.0.2 and LKG
  • 9e72ab7 🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...
  • 35ff23d 🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...
  • e175b69 Bump version to 6.0.1-rc and LKG
  • af4caac Update LKG
  • 8efd7e8 Merge remote-tracking branch 'origin/main' into release-6.0
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 25, 2026
@vercel

vercel Bot commented May 25, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
txkit-docs Ready Ready Preview, Comment Jun 2, 2026 11:01am
txkit-land Ready Ready Preview, Comment Jun 2, 2026 11:01am
txkit-story Ready Ready Preview, Comment Jun 2, 2026 11:01am

@socket-security

socket-security Bot commented May 25, 2026

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/typescript-6.0.3 branch from 85d00fb to ee1d9d0 Compare May 26, 2026 13:50
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/typescript-6.0.3 branch from ee1d9d0 to 90a5a93 Compare May 29, 2026 10:23
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/typescript-6.0.3 branch from 90a5a93 to 815522d Compare June 1, 2026 10:21
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/typescript-6.0.3 branch from 815522d to f4334b3 Compare June 2, 2026 09:20
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
TypeScript 6 turns previously-tolerated tsconfig patterns into errors:
- baseUrl is deprecated (TS5101). Removed the vestigial baseUrl from the base config and react (neither needs it under moduleResolution: bundler) and set ignoreDeprecations: '6.0' because tsup injects baseUrl into its DTS compiler pass regardless.
- Side-effect CSS imports now need an ambient module declaration (TS2882) - added one mirroring the existing svg.d.ts.
- react's path mapping target must be relative once baseUrl is gone (TS5090) - changed 'src/*' to './src/*'.
@mike-diamond mike-diamond merged commit 7278838 into main Jun 2, 2026
12 of 15 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/typescript-6.0.3 branch June 2, 2026 11:07
mike-diamond added a commit that referenced this pull request Jun 4, 2026
…ending UX + graceful errors (#25)

* fix(example): unblock arbitrum-london typecheck on typescript 6

TypeScript 6 (merged in #13) regressed the example app typecheck, which CI does not cover (CI builds packages only). Two errors blocked next build:

- TS2882: side-effect imports of @txkit/themes/base, @txkit/themes/dark and globals.css need ambient module declarations. Added globals.d.ts.
- TS2769: the as-const tool definitions typed required as a readonly tuple, not assignable to the Anthropic SDK Tool input_schema required string[]. Switched to satisfies Anthropic.Tool, which keeps literal types without readonly.

* feat(example): surface deploy-pending state on the pendle flow

Before deploy, deployed.json holds placeholder addresses and preparing an envelope returns a 503; the flow only surfaced that reactively after a visitor typed a prompt. DeployPendingBanner reads the checkIsAgentPolicyGateDeployed / checkIsMockPendleRouterDeployed predicates and shows a preview-mode banner up front, rendering nothing once both contracts hold real addresses.

* fix(example): use opus-4-8 and align pendle prompt with single-shot loop

Bump the agent model from claude-opus-4-5 to claude-opus-4-8 (current default; same request surface, none of the removed params are in use).

The system prompt told the model to summarise after calling the tool, but the route is single-shot - it never feeds a tool result back, so that turn never happens. Reworded to state intent in one sentence before the tool call, which lands in the same response and shows up as the assistant reply.

* fix(example): treat blank env vars as unset for a graceful 503

A blank ANTHROPIC_API_KEY= (from clearing a copied .env.example value, or a host that injects empty vars) passed through as an empty string and failed z.string().min(1), surfacing a raw 500 zod dump instead of the route intended friendly not-set 503. Coerce blank values to undefined before parsing so optional fields stay optional and defaulted fields fall back to their default.

* docs(example): correct stale decoder-data path in contracts readme

The post-deploy sync step pointed at packages/tx-decoder/src/registry/data/agent-policy-gate.json, which no longer carries AgentPolicyGate after the alpha.4 cleanup. The address lives in examples/arbitrum-london/decoder-data/agent-policy-gate.json, matching DEPLOY.md, the deploy script comment, and the decode route.

* perf(example): cut agent api spend for the pendle flow

Two changes in /api/agent, both reducing Claude cost without touching demo quality:

- Model claude-opus-4-8 -> claude-haiku-4-5. The route does one thing: turn a natural-language intent into a single validated tool call against known token addresses. That is simple structured extraction, not reasoning - Haiku 4.5 handles it at ~1/5 the price ($1/$5 vs $5/$25 per 1M tokens), roughly $0.0015 per interaction.
- Skip the model call entirely when the scenario A contracts are still placeholder addresses. Previously a visitor typing in preview mode would spend a Claude call that then 503s because the envelope cannot be built. Now the deploy check short-circuits to 503 before the API call, so preview mode costs nothing.

* feat(example): add SmokeExecuteEnvelope script for reproducible on-chain tx hashes

The AI Agentic category requires real tx hashes, not preview-only. The UI sign button already lands a real executeEnvelope tx, but Robinhood Chain has no UI flow (scenario C is a placeholder), so a script is the only way to get a verifiable tx there.

SmokeExecuteEnvelope reproduces exactly what the dApp does - build the inner MockPendleRouter swap, agent-sign the EIP-712 envelope, execute through the gate - and is chain-agnostic, so the same command lands a real tx on Arbitrum Sepolia and on Robinhood (sponsor bonus). DEPLOY.md gains the router deploy + allow-list on Robinhood and a step-7 capture flow. The full deploy -> allow-list -> smoke tx path was rehearsed on a local anvil (executeEnvelope succeeded, real tx hash produced).

* docs(example): add demo README with verifiable on-chain artifacts

Judge-facing overview plus a Live on-chain section with placeholder tables for both chains contract addresses and example executeEnvelope tx hashes, filled in after deploy. States what the demo proves (agent prepares, human verifies, gate enforces) and the honest scope (deterministic mock router; scenario C UI still roadmap).

* refactor(example): decompose PendleAgentChat into flow-a helpers and actions

Split the 348-line chat component (now 237). Extracted the pure formatters plus a new resolveExplorerLabel to utils/formatters.ts, the /api/decode call and its DecodedCall type to utils/fetchDecoded.ts, and the sign/reject/tx-link block to SignEnvelopeActions.tsx.

Also from review: split the double ternary in the error path into named consts, stable crypto.randomUUID keys instead of array index, aria-live on the thinking status, role=alert on errors, aria-label plus focus-visible on the input, and the explorer link label now matches the chain (Arbiscan vs Robinhood explorer) instead of a hardcoded Arbiscan. Color classes use the Tailwind theme shorthands.

* a11y(example): add focus-visible rings to copy button, explorer link, and summary

The copy button, the explorer link, and the decoded-arguments summary had hover styles but no keyboard focus indicator. Added a focus-visible ring matching the project standard so keyboard and switch-access users can see focus.

* style(example): Tailwind color shorthands plus review cleanup

Replace 104 verbose bg-[color:var(--color-*)] arbitrary values with the Tailwind v4 theme shorthands (bg-accent, text-muted, border-border, ...) already registered in @theme inline - no config change, identical output.

Review cleanup folded in: rename isDeployed -> checkIsDeployed (predicate naming rule), drop the milestone sprint-diary strings and the past-dated Phase 2 Day 10 text from /api/agent responses and the RWA builder, neutralize past-deadline footer/comment text on flow-c, extract alignClass in ChatMessage, single blank line before return where missing, remove the void unused-import hack in envelope-builder, and trim a redundant decoder comment.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant