chore: 4.1.1-f7d5b45 maintenance — dependency updates#13
Conversation
Dependency-only maintenance release. The abieos submodule is unchanged (f7d5b45), so the published native binary and JS/typings bundle are byte-identical to 4.1.0. - typescript 5.9.3 -> 6.0.3 (major); tsconfig adds "types": ["node"] for the TS 6.0 default-types change. Build output validated identical. - @microsoft/api-extractor 7.57.2 -> 7.58.7 (bundled TS 5.8.2 -> 5.9.3). - c8 10.1.3 -> 11.0.0 (major; coverage, validated by CI). - @types/node 25.3.0 -> 25.8.0. - @wharfkit/antelope 1.1.1 -> 1.2.0 (test-only). - node-addon-api 8.5.0 -> 8.7.0 (build-time headers). Regenerated package-lock.json and bun.lock. dist/ unchanged (content byte-identical; tsc --noEmit and npm run build pass under TS 6.0).
There was a problem hiding this comment.
Pull request overview
Dependency-only maintenance bump from 4.1.0-f7d5b45 to 4.1.1-f7d5b45. Upgrades several devDependencies (notably typescript to 6.0.3 and c8 to 11.0.0), applies the documented TS 6.0 types migration in tsconfig.json, and regenerates lockfiles. No runtime/source code changes; the native binary and JS bundle are reported byte-identical.
Changes:
- Bump devDependencies: typescript 5.9.3→6.0.3, c8 10→11, api-extractor 7.57.2→7.58.7, @types/node, @wharfkit/antelope, node-addon-api.
- Add
"types": ["node"]totsconfig.jsonto compensate for TS 6.0 default change. - Bump package version to
4.1.1-f7d5b45and document inCHANGELOG.md; regeneratepackage-lock.jsonandbun.lock.
Reviewed changes
Copilot reviewed 2 out of 5 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| tsconfig.json | Adds "types": ["node"] for TS 6.0 compatibility. |
| package.json | Version bump and devDependency upgrades. |
| package-lock.json | Regenerated lockfile reflecting upgrades. |
| bun.lock | Regenerated Bun lockfile. |
| CHANGELOG.md | New 4.1.1-f7d5b45 entry describing the maintenance release. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Code Review
This pull request updates the project version to 4.1.1-f7d5b45 and performs a maintenance update of several development dependencies, most notably upgrading TypeScript to version 6.0.3. To accommodate changes in TypeScript 6.0 regarding type inclusion, the tsconfig.json has been updated to explicitly include Node.js types. Other updated dependencies include @microsoft/api-extractor, c8, @types/node, @wharfkit/antelope, and node-addon-api. I have no feedback to provide.
Summary
Dependency-only maintenance release
4.1.0-f7d5b45→4.1.1-f7d5b45. Theabieossubmodule is unchanged (f7d5b45), so the published native binary (dist/abieos.node) and the JS/typings bundle are byte-identical to 4.1.0 — this ships no behavioral change to consumers.Dependency changes (all devDependencies)
typescript@microsoft/api-extractorc8@types/node@wharfkit/antelopenode-addon-apipackage-lock.jsonandbun.lockregenerated.TypeScript 6.0 migration
TS 6.0 changed the default
typesvalue from "auto-include all@types" to[]. Without a fix,tscfails withCannot find name 'Buffer' / 'node:module'. Applied the documented one-line migration:tsconfig.jsonnow sets"types": ["node"].Local validation
npx tsc --noEmitpasses under TS 6.0.npm run buildsucceeds under TS 6.0 + api-extractor 7.58.7 + tsup.dist/_tsup-dts-rollup.d.ts/.d.ctsanddist/abieos.js/.cjsare byte-identical in content to the committed TS 5.9 baseline (git diff --ignore-cr-at-eolempty).dist/abieos.nodeSHA256 unchanged (5dcf0c6d…).npm pack --dry-runlists the expected 12 files at version4.1.1-f7d5b45.npm testsurface imports onlydist/abieos.js+ Node builtins (no bumped dep is loaded at test runtime); that surface is byte-identical to green-CI 4.1.0.api-extractor 7.58.7 still bundles TS 5.9.3 and emits a non-fatal informational notice about the newer project TypeScript during the typings rollup; output is unaffected (validated identical).
CI is the gate
This PR exists so the Linux + Bun matrix (Node 22/24/25) validates TS 6.0 and c8 11 on the real toolchain (couldn't run locally on Windows; WSL
aptis sudo-gated). Merge once green, then the maintainer tagsv4.1.1-f7d5b45and runsnpm publish(requires npm auth; no automated publish job).Audit note
npm auditreports advisories confined to dev/build transitive tooling (e.g.minimatch,tar,rollup,ellipticvia test/build deps). The package has zero runtime dependencies, so none reach the published artifact. Not addressed here to keep the maintenance scope tight.