chore(deps-dev): bump typescript from 5.9.3 to 6.0.3#17
chore(deps-dev): bump typescript from 5.9.3 to 6.0.3#17dependabot[bot] wants to merge 2 commits into
Conversation
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
7807c7e to
fddcba5
Compare
Resolves Dependabot alert #6 (GHSA-5xrq-8626-4rwp / CVE-2026-47429, vitest UI arbitrary file read). Practical exposure here is nil since this repo only runs `vitest run` headlessly, but moving to 4.x clears the alert and stays current. vitest 4 requires Node ^20 || ^22 || >=24, so the CI test matrix drops 18.x and adds 24.x. `engines.node` stays at >=18 — the SDK runtime itself doesn't need 20+, only the test toolchain does. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.3. - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.3) --- updated-dependencies: - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
fddcba5 to
86e48da
Compare
|
Superseded by 473348b on main: typescript ^6.0.3. tsconfig.cjs.json updated to use the explicit 'node10' moduleResolution literal with ignoreDeprecations: 6.0 (the legacy 'Node' alias is deprecated in TS 6). Build + tests pass. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps typescript from 5.9.3 to 6.0.3.
Release notes
Sourced from typescript's releases.
Commits
050880cBump version to 6.0.3 and LKGeeae9dd🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...ad1c695🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)0725fb4🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...607a22aBump version to 6.0.2 and LKG9e72ab7🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...35ff23d🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...e175b69Bump version to 6.0.1-rc and LKGaf4caacUpdate LKG8efd7e8Merge remote-tracking branch 'origin/main' into release-6.0