Bump typescript from 6.0.3 to 7.0.2 by dependabot[bot] · Pull Request #1341 · actions/setup-python · GitHub
Skip to content

Bump typescript from 6.0.3 to 7.0.2 - #1341

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/typescript-7.0.2
Open

Bump typescript from 6.0.3 to 7.0.2#1341
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/typescript-7.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps typescript from 6.0.3 to 7.0.2.

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 20, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 20, 2026 03:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 20, 2026
@v-priya-kinthali

v-priya-kinthali commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

Copilot AI commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

@copilot Fix the failing checks on this PR (Basic validation + Licensed). Run npm install to refresh the lockfile, resolve all npm audit failures (npm audit fix), then npm run format, ...

I dug into this and the Basic validation failures aren't fixable with an install/audit refresh — TypeScript 7.0.2 (the native compiler) can't be consumed by this repo's toolchain at all. Every build step breaks, and no released tool versions support TS 7 yet:

  • Install (npm ci): @typescript-eslint/* peer-requires typescript >=4.8.4 <6.1.0 (latest, 8.65.0, still caps <6.1.0), so resolution fails.
  • npm run build: @vercel/ncc@0.44.1 (latest) ts-loader crashes → TypeError: Cannot read properties of undefined (reading 'fileExists').
  • npm run lint: @typescript-eslint/parser hard-throws → typescript-eslint does not support TS 7.0.
  • npm test: ts-jest errors → "typescript (version 7.0.2) does not expose the JavaScript compiler API required by ts-jest … install it as @typescript/native and alias @typescript/typescript6 as typescript."

These all stem from TS 7 (native, Go port) not exposing the JS compiler API that ncc, ts-jest, and typescript-eslint rely on. I didn't commit anything, since regenerating the lockfile / running npm audit fix on top of a TS 7 that can't build/lint/test would still leave every check red (and npm audit fix here actually cascades 2 highs → 22 by pulling in vulnerable glob/minimatch).

How would you like to proceed?

  1. Hold/close this bump until ncc, ts-jest, and typescript-eslint ship TS 7 support (keep typescript on 6.x, which the toolchain supports).
  2. Migrate the toolchain to the TS 6 JS API side-by-side — alias @typescript/typescript6 as typescript and add @typescript/native. This can go green, but it turns the PR from a version bump into a build-system migration, and typescript would no longer resolve to 7.0.2 for the tools.

Separately, I can fix the two pre-existing npm audit highs (brace-expansion <=5.0.7, fast-xml-parser <5.10.1) via overrides (bumping the nested minimatch/glob/test-exclude so brace-expansion@^5.0.8 stays API-compatible) — that's independent of the TS bump and probably belongs in its own PR. Let me know if you'd like that.

Copilot AI requested a review from v-priya-kinthali July 28, 2026 12:06
@v-priya-kinthali

v-priya-kinthali commented Aug 25, 2026

Copy link
Copy Markdown
Contributor

@dependabot
Bump typescript from 6.0.3 to 7.0.2
41a839d 
Bumps [typescript](https://github.com/microsoft/TypeScript) from 6.0.3 to 7.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/typescript-7.0.2 branch from 32d1828 to 41a839d Compare August 25, 2026 05:59

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@v-priya-kinthali v-priya-kinthali Awaiting requested review from v-priya-kinthali

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@v-priya-kinthali @v-HarithaVattikuti