PR Review: build(deps-dev): bump typescript from 5.9.3 to 6.0.2

Summary

This is a Dependabot PR that bumps TypeScript from 5.9.3 to 6.0.2 (a major version bump), with a follow-up commit that adds "types": ["node"] to tsconfig.json to fix a TS 6.0 behavioral change around @types/* auto-discovery when lib is explicitly set.

CI passes. Two commits: the Dependabot version bump, and the manual compatibility fix.

Code Quality & Correctness

The tsconfig.json fix is correct and well-placed. Since the project already sets "lib": ["ES2022"], TS 6.0's stricter type resolution no longer auto-discovers @types/node. Adding "types": ["node"] is the right fix — it's explicit, minimal, and matches the existing @types/node dev dependency in package.json.

The commit message on the fix commit is excellent — it explains why the change is needed and which types were missing. This is exactly the kind of context future maintainers will appreciate.

Potential Concerns

1. Major version bump with a caret range (^6.0.2): The package.json now has "typescript": "^6.0.2". Since TypeScript is a dev dependency and not a runtime dependency, this is fine — it won't affect consumers. The caret range will allow minor/patch upgrades within 6.x, which is the expected behavior.

2. TS 6.0 breaking changes beyond type resolution: TypeScript 6.0 deprecated assert in import attributes in favor of with. This codebase doesn't use import assertions, so this isn't a concern. I scanned the source and don't see any usage patterns that would be affected by other TS 6.0 breaking changes (e.g., no enum merging edge cases, no import = syntax).

3. skipLibCheck: true is already set: This provides a safety net against type conflicts in node_modules. Good — no change needed.

Security

No security concerns. This is a dev-only dependency bump with no runtime impact. The lockfile integrity hashes are updated correctly.

Test Coverage

CI tests pass. Since this is a compiler toolchain upgrade rather than a code change, the existing test suite serves as an adequate regression check — if the code compiles and tests pass under TS 6.0, the upgrade is safe.

Verdict

Looks good to merge. The changes are minimal, correct, and well-documented. The types: ["node"] addition is the right fix for TS 6.0 compatibility, and CI confirms everything works.

🤖 Generated with Claude Code