Skip to content

chore(deps-dev): bump typescript from 5.9.3 to 7.0.2 - #199

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/typescript-7.0.2
Open

chore(deps-dev): bump typescript from 5.9.3 to 7.0.2#199
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/typescript-7.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor

Bumps typescript from 5.9.3 to 7.0.2.

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 8, 2026
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 7.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump typescript from 5.9.3 to 7.0.2 chore(deps-dev): bump typescript from 5.9.3 to 7.0.2 Jul 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/typescript-7.0.2 branch from 9818119 to 2626ae5 Compare July 10, 2026 06:20

@clestons clestons left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review — REQUEST_CHANGES [2-round: CI 证据核验]

typescript ^5.9.3 → ^7.0.2(dev dep,major 跳跃)。不能合入——依赖树无法解析,全线 CI 失败。

阻断证据(来自 Type Check job 日志)

npm error code ERESOLVE
npm error While resolving: @typescript-eslint/eslint-plugin@8.63.0
npm error Found: typescript@7.0.2
npm error Could not resolve dependency ...

npm ci安装阶段即 ERESOLVE 失败——工具链(@typescript-eslint@8.63@nestjs/*)尚未声明兼容 TS 7.x 的 peer 范围。因此下游 check 连锁全红:

Check 结果
Build / Type Check / Tests / Code Quality / Security Audit ❌ fail(install 阶段挂)
Smart Contracts / CodeQL / cla ✅ pass(不依赖该 install)

根因

TypeScript 7.0 是原生(Go)编译器大版本,工具链生态尚未跟上。这不是本仓库代码问题,是 dependabot 提了一个当前不可解析的 major dev-dep 跳跃。

建议

  • REQUEST_CHANGES / 关闭此 PR,等 @typescript-eslint + @nestjs 出支持 TS 7.x 的版本再升;
  • 或在 dependabot.ymltypescriptignore: [{ update-types: ["version-update:semver-major"] }],避免重复提。
  • 若确要试 TS 7,需同步升级整条 lint/build 工具链并用 --legacy-peer-deps 验证——当前 PR 只动了 typescript 一项,必红。

结论:REQUEST_CHANGES — install 都过不了,纯 bump 却破坏全部 CI,不可合。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant