chore(deps): update dependency typescript to v7 - autoclosed by renovate[bot] · Pull Request #84 · rishitank/holocron

renovate · 2026-09-26T12:12:25Z

This PR contains the following updates:

Package	Change	Age	Confidence
typescript (source)	`^5.7.0` → `^7.0.0`

Release Notes

microsoft/TypeScript (typescript)

`v7.0.2`: TypeScript 7.0.2

Compare Source

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

`v6.0.3`: TypeScript 6.0.3

Compare Source

For release notes, check out the release announcement blog post.

Downloads are available on:

npm

`v6.0.2`: TypeScript 6.0

Compare Source

For release notes, check out the release announcement blog post.

Downloads are available on:

npm

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-09-26T12:12:27Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn cli npm v12.2.0 does not support Node.js v25.9.0. This version of npm supports the following node versions: `^22.22.2 || ^24.15.0 || >=26.0.0`. You can find the latest version at https://nodejs.org/.
npm warn Unknown env config "store". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
npm warn ERESOLVE overriding peer dependency
npm warn While resolving: @typescript-eslint/eslint-plugin@8.70.0
npm warn Found: typescript@7.0.2
npm warn node_modules/typescript
npm warn   dev typescript@"^7.0.0" from the root project
npm warn   2 more (ts-api-utils, tsup)
npm warn
npm warn Could not resolve dependency:
npm warn peer typescript@">=4.8.4 <6.1.0" from @typescript-eslint/eslint-plugin@8.70.0
npm warn node_modules/@typescript-eslint/eslint-plugin
npm warn   @typescript-eslint/eslint-plugin@"8.70.0" from typescript-eslint@8.70.0
npm warn   node_modules/typescript-eslint
npm warn
npm warn Conflicting peer dependency: typescript@6.0.3
npm warn node_modules/typescript
npm warn   peer typescript@">=4.8.4 <6.1.0" from @typescript-eslint/eslint-plugin@8.70.0
npm warn   node_modules/@typescript-eslint/eslint-plugin
npm warn     @typescript-eslint/eslint-plugin@"8.70.0" from typescript-eslint@8.70.0
npm warn     node_modules/typescript-eslint
npm warn ERESOLVE overriding peer dependency
npm warn While resolving: @typescript-eslint/parser@8.70.0
npm warn Found: typescript@7.0.2
npm warn node_modules/typescript
npm warn   dev typescript@"^7.0.0" from the root project
npm warn   2 more (ts-api-utils, tsup)
npm warn
npm warn Could not resolve dependency:
npm warn peer typescript@">=4.8.4 <6.1.0" from @typescript-eslint/parser@8.70.0
npm warn node_modules/@typescript-eslint/parser
npm warn   peer @typescript-eslint/parser@"^8.70.0" from @typescript-eslint/eslint-plugin@8.70.0
npm warn   node_modules/@typescript-eslint/eslint-plugin
npm warn   1 more (typescript-eslint)
npm warn
npm warn Conflicting peer dependency: typescript@6.0.3
npm warn node_modules/typescript
npm warn   peer typescript@">=4.8.4 <6.1.0" from @typescript-eslint/parser@8.70.0
npm warn   node_modules/@typescript-eslint/parser
npm warn     peer @typescript-eslint/parser@"^8.70.0" from @typescript-eslint/eslint-plugin@8.70.0
npm warn     node_modules/@typescript-eslint/eslint-plugin
npm warn     1 more (typescript-eslint)
npm warn ERESOLVE overriding peer dependency
npm warn While resolving: @typescript-eslint/project-service@8.70.0
npm warn Found: typescript@7.0.2
npm warn node_modules/typescript
npm warn   dev typescript@"^7.0.0" from the root project
npm warn   2 more (ts-api-utils, tsup)
npm warn
npm warn Could not resolve dependency:
npm warn peer typescript@">=4.8.4 <6.1.0" from @typescript-eslint/project-service@8.70.0
npm warn node_modules/@typescript-eslint/project-service
npm warn   @typescript-eslint/project-service@"8.70.0" from @typescript-eslint/typescript-estree@8.70.0
npm warn   node_modules/@typescript-eslint/typescript-estree
npm warn
npm warn Conflicting peer dependency: typescript@6.0.3
npm warn node_modules/typescript
npm warn   peer typescript@">=4.8.4 <6.1.0" from @typescript-eslint/project-service@8.70.0
npm warn   node_modules/@typescript-eslint/project-service
npm warn     @typescript-eslint/project-service@"8.70.0" from @typescript-eslint/typescript-estree@8.70.0
npm warn     node_modules/@typescript-eslint/typescript-estree
npm warn ERESOLVE overriding peer dependency
npm warn While resolving: @typescript-eslint/tsconfig-utils@8.70.0
npm warn Found: typescript@7.0.2
npm warn node_modules/typescript
npm warn   dev typescript@"^7.0.0" from the root project
npm warn   2 more (ts-api-utils, tsup)
npm warn
npm warn Could not resolve dependency:
npm warn peer typescript@">=4.8.4 <6.1.0" from @typescript-eslint/tsconfig-utils@8.70.0
npm warn node_modules/@typescript-eslint/tsconfig-utils
npm warn   @typescript-eslint/tsconfig-utils@"^8.70.0" from @typescript-eslint/project-service@8.70.0
npm warn   node_modules/@typescript-eslint/project-service
npm warn   1 more (@typescript-eslint/typescript-estree)
npm warn
npm warn Conflicting peer dependency: typescript@6.0.3
npm warn node_modules/typescript
npm warn   peer typescript@">=4.8.4 <6.1.0" from @typescript-eslint/tsconfig-utils@8.70.0
npm warn   node_modules/@typescript-eslint/tsconfig-utils
npm warn     @typescript-eslint/tsconfig-utils@"^8.70.0" from @typescript-eslint/project-service@8.70.0
npm warn     node_modules/@typescript-eslint/project-service
npm warn     1 more (@typescript-eslint/typescript-estree)
npm warn ERESOLVE overriding peer dependency
npm warn While resolving: @typescript-eslint/type-utils@8.70.0
npm warn Found: typescript@7.0.2
npm warn node_modules/typescript
npm warn   dev typescript@"^7.0.0" from the root project
npm warn   2 more (ts-api-utils, tsup)
npm warn
npm warn Could not resolve dependency:
npm warn peer typescript@">=4.8.4 <6.1.0" from @typescript-eslint/type-utils@8.70.0
npm warn node_modules/@typescript-eslint/type-utils
npm warn   @typescript-eslint/type-utils@"8.70.0" from @typescript-eslint/eslint-plugin@8.70.0
npm warn   node_modules/@typescript-eslint/eslint-plugin
npm warn
npm warn Conflicting peer dependency: typescript@6.0.3
npm warn node_modules/typescript
npm warn   peer typescript@">=4.8.4 <6.1.0" from @typescript-eslint/type-utils@8.70.0
npm warn   node_modules/@typescript-eslint/type-utils
npm warn     @typescript-eslint/type-utils@"8.70.0" from @typescript-eslint/eslint-plugin@8.70.0
npm warn     node_modules/@typescript-eslint/eslint-plugin
npm warn ERESOLVE overriding peer dependency
npm warn While resolving: @typescript-eslint/typescript-estree@8.70.0
npm warn Found: typescript@7.0.2
npm warn node_modules/typescript
npm warn   dev typescript@"^7.0.0" from the root project
npm warn   2 more (ts-api-utils, tsup)
npm warn
npm warn Could not resolve dependency:
npm warn peer typescript@">=4.8.4 <6.1.0" from @typescript-eslint/typescript-estree@8.70.0
npm warn node_modules/@typescript-eslint/typescript-estree
npm warn   @typescript-eslint/typescript-estree@"8.70.0" from @typescript-eslint/parser@8.70.0
npm warn   node_modules/@typescript-eslint/parser
npm warn   3 more (@typescript-eslint/type-utils, ...)
npm warn
npm warn Conflicting peer dependency: typescript@6.0.3
npm warn node_modules/typescript
npm warn   peer typescript@">=4.8.4 <6.1.0" from @typescript-eslint/typescript-estree@8.70.0
npm warn   node_modules/@typescript-eslint/typescript-estree
npm warn     @typescript-eslint/typescript-estree@"8.70.0" from @typescript-eslint/parser@8.70.0
npm warn     node_modules/@typescript-eslint/parser
npm warn     3 more (@typescript-eslint/type-utils, ...)
npm warn ERESOLVE overriding peer dependency
npm warn While resolving: @typescript-eslint/utils@8.70.0
npm warn Found: typescript@7.0.2
npm warn node_modules/typescript
npm warn   dev typescript@"^7.0.0" from the root project
npm warn   2 more (ts-api-utils, tsup)
npm warn
npm warn Could not resolve dependency:
npm warn peer typescript@">=4.8.4 <6.1.0" from @typescript-eslint/utils@8.70.0
npm warn node_modules/@typescript-eslint/utils
npm warn   @typescript-eslint/utils@"8.70.0" from @typescript-eslint/eslint-plugin@8.70.0
npm warn   node_modules/@typescript-eslint/eslint-plugin
npm warn   2 more (@typescript-eslint/type-utils, typescript-eslint)
npm warn
npm warn Conflicting peer dependency: typescript@6.0.3
npm warn node_modules/typescript
npm warn   peer typescript@">=4.8.4 <6.1.0" from @typescript-eslint/utils@8.70.0
npm warn   node_modules/@typescript-eslint/utils
npm warn     @typescript-eslint/utils@"8.70.0" from @typescript-eslint/eslint-plugin@8.70.0
npm warn     node_modules/@typescript-eslint/eslint-plugin
npm warn     2 more (@typescript-eslint/type-utils, typescript-eslint)
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: typescript-eslint@8.70.0
npm error Found: typescript@7.0.2
npm error node_modules/typescript
npm error   dev typescript@"^7.0.0" from the root project
npm error   peer typescript@">=4.8.4" from ts-api-utils@2.5.0
npm error   node_modules/ts-api-utils
npm error     ts-api-utils@"^2.5.0" from @typescript-eslint/eslint-plugin@8.70.0
npm error     node_modules/@typescript-eslint/eslint-plugin
npm error       @typescript-eslint/eslint-plugin@"8.70.0" from typescript-eslint@8.70.0
npm error       node_modules/typescript-eslint
npm error         dev typescript-eslint@"^8.56.0" from the root project
npm error     ts-api-utils@"^2.5.0" from @typescript-eslint/type-utils@8.70.0
npm error     node_modules/@typescript-eslint/type-utils
npm error       @typescript-eslint/type-utils@"8.70.0" from @typescript-eslint/eslint-plugin@8.70.0
npm error       node_modules/@typescript-eslint/eslint-plugin
npm error         @typescript-eslint/eslint-plugin@"8.70.0" from typescript-eslint@8.70.0
npm error         node_modules/typescript-eslint
npm error     1 more (@typescript-eslint/typescript-estree)
npm error   1 more (tsup)
npm error
npm error Could not resolve dependency:
npm error peer typescript@">=4.8.4 <6.1.0" from typescript-eslint@8.70.0
npm error node_modules/typescript-eslint
npm error   dev typescript-eslint@"^8.56.0" from the root project
npm error
npm error Conflicting peer dependency: typescript@6.0.3
npm error node_modules/typescript
npm error   peer typescript@">=4.8.4 <6.1.0" from typescript-eslint@8.70.0
npm error   node_modules/typescript-eslint
npm error     dev typescript-eslint@"^8.56.0" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-10-05T22_06_13_345Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-10-05T22_06_13_345Z-debug-0.log

coderabbitai · 2026-09-26T12:12:32Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI
Review profile: ASSERTIVE
Plan: Advanced
Run ID: f21da679-39ef-4a52-9e1c-90b4fc8501f3

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

…; hold TypeScript 7 - simple-git ^3 -> ^4.0.2: GHSA-858h-whjf-mvg5, GHSA-g4wm-2vf7-vfgr, GHSA-x6jw-m9v5-85vh and @simple-git/argv-parser GHSA-v5rq-49vh-5v5c are fixed only in 4.x (Renovate #85 / Dependabot #91 show it is compatible). - vitest and @vitest/coverage-v8 ^3 -> ^4.1.11 together: GHSA-82fw-gwwq-j7x9 (vitest/@vitest/mocker) and tinypool GHSA-5gmw-xhrv-c9v3 / GHSA-85c8-ppgw-ccpr. coverage-v8 peers the exact vitest version, which is why #74 (vitest only) and #82 (coverage-v8 5 only) each fail npm ci. - @eslint/js is imported by eslint.config.js but was never declared; it only resolved because eslint 9 depends on it. ESLint 10 no longer does (#83), so declare it explicitly. - renovate.json: hold TypeScript 7 (typescript-eslint 8.x peers typescript <6.1.0, #84) and group vitest with @vitest/* so they can't split again. - Lockfile refreshed on a runner by the one-shot deps-refresh-once workflow. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012rYJxu978iUSGFZ1UuqTsi

…simple-git 4 and vitest 4 (#94) * ci: add shared security scan and actionlint workflows - security.yml: osv-scanner and full-history gitleaks via rishitank/.github security.yml@v1 (ecosystem node). Runs alongside the existing CodeQL and npm audit jobs in ci.yml, which stay as they are. - workflows-lint.yml: actionlint via the shared workflow. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012rYJxu978iUSGFZ1UuqTsi * chore(renovate): extend the house preset instead of config:base config:base is deprecated (renamed config:recommended), and matchPackagePatterns is deprecated in favour of regex entries in matchPackageNames. Switch the base to github>rishitank/.github:node (which already includes config:recommended) and convert the patterns to /regex/ matchPackageNames. Both custom packageRules are kept. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012rYJxu978iUSGFZ1UuqTsi * chore(deps): override tsup's esbuild; prepare an in-range lockfile refresh - package.json: override tsup's esbuild to ^0.28.1. tsup 8.5.1 asks for ^0.27.0, and GHSA-g7r4-m6w7-qqqr affects esbuild >=0.27.3 <0.28.1, so no 0.27.x fix exists. `npm run build` passes with 0.28.2. - .github/workflows/deps-refresh-once.yml: one-shot runner job running `npm update` within the declared ranges. This clears hono, ip-address, js-yaml, minimatch, nanoid, path-to-regexp, picomatch, postcss, proxy-addr, qs, rollup, sharp, source-map-js and vite. Checked locally on the refreshed lock: typecheck, lint (same 22 warnings as before, 0 errors), all 240 tests and the build pass. Deleted in the next commit. Not fixable here without a major upgrade: simple-git 3 -> 4 (GHSA-858h-whjf-mvg5, GHSA-g4wm-2vf7-vfgr, GHSA-x6jw-m9v5-85vh; Renovate #85/#91) and vitest/@vitest/coverage-v8 3 -> 4.1.11+ (GHSA-82fw-gwwq-j7x9, plus tinypool through vitest; Renovate #74/#82). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012rYJxu978iUSGFZ1UuqTsi * chore(deps): refresh lockfile to pick up patched versions Ran on a runner by the one-shot deps-refresh-once workflow: npm update --package-lock-only --ignore-scripts --no-audit --no-fund * ci: remove the one-shot deps-refresh-once workflow It refreshed package-lock.json in ed5ae35 (`npm update` within the declared ranges, tsup's esbuild override applied). This commit is what runs CI against the refreshed lockfile. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012rYJxu978iUSGFZ1UuqTsi * fix(deps): simple-git 4, vitest + coverage-v8 4.1, declare @eslint/js; hold TypeScript 7 - simple-git ^3 -> ^4.0.2: GHSA-858h-whjf-mvg5, GHSA-g4wm-2vf7-vfgr, GHSA-x6jw-m9v5-85vh and @simple-git/argv-parser GHSA-v5rq-49vh-5v5c are fixed only in 4.x (Renovate #85 / Dependabot #91 show it is compatible). - vitest and @vitest/coverage-v8 ^3 -> ^4.1.11 together: GHSA-82fw-gwwq-j7x9 (vitest/@vitest/mocker) and tinypool GHSA-5gmw-xhrv-c9v3 / GHSA-85c8-ppgw-ccpr. coverage-v8 peers the exact vitest version, which is why #74 (vitest only) and #82 (coverage-v8 5 only) each fail npm ci. - @eslint/js is imported by eslint.config.js but was never declared; it only resolved because eslint 9 depends on it. ESLint 10 no longer does (#83), so declare it explicitly. - renovate.json: hold TypeScript 7 (typescript-eslint 8.x peers typescript <6.1.0, #84) and group vitest with @vitest/* so they can't split again. - Lockfile refreshed on a runner by the one-shot deps-refresh-once workflow. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012rYJxu978iUSGFZ1UuqTsi * chore(deps): refresh lockfile to pick up patched versions Ran on a runner by the one-shot deps-refresh-once workflow: npm install --package-lock-only --ignore-scripts --no-audit --no-fund * ci: remove the one-shot deps-refresh-once workflow Its job is done: a5e9414 committed the lockfile resolved on a runner. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012rYJxu978iUSGFZ1UuqTsi --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

renovate Bot requested a review from rishitank as a code owner September 26, 2026 12:12

github-actions Bot enabled auto-merge (squash) September 26, 2026 12:12

renovate Bot force-pushed the renovate/typescript-7.x branch 2 times, most recently from aa93218 to 95977dc Compare October 3, 2026 00:25

chore(deps): update dependency typescript to v7

ae66b14

renovate Bot force-pushed the renovate/typescript-7.x branch from 95977dc to ae66b14 Compare October 5, 2026 22:06

rishitank mentioned this pull request Oct 8, 2026

ci: shared security scan, actionlint, house Renovate preset; upgrade simple-git 4 and vitest 4 #94

Merged

renovate Bot changed the title ~~chore(deps): update dependency typescript to v7~~ chore(deps): update dependency typescript to v7 - autoclosed Oct 8, 2026

renovate Bot closed this Oct 8, 2026

auto-merge was automatically disabled October 8, 2026 23:16
Pull request was closed

renovate Bot deleted the renovate/typescript-7.x branch October 8, 2026 23:16

rishitank mentioned this pull request Sep 25, 2026

fix(security): clear all open Dependabot alerts #72

Draft

Navigation Menu

Repository navigation

chore(deps): update dependency typescript to v7 - autoclosed - #84

chore(deps): update dependency typescript to v7 - autoclosed#84
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/typescript-7.x

renovate Bot commented Sep 26, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Sep 26, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 26, 2026 •

edited

Loading

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Sep 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v7.0.2: TypeScript 7.0.2

v6.0.3: TypeScript 6.0.3

v6.0.2: TypeScript 6.0

Configuration

Uh oh!

renovate Bot commented Sep 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: package-lock.json

Uh oh!

coderabbitai Bot commented Sep 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Sep 26, 2026 •

edited

Loading

`v7.0.2`: TypeScript 7.0.2

`v6.0.3`: TypeScript 6.0.3

`v6.0.2`: TypeScript 6.0

renovate Bot commented Sep 26, 2026 •

edited

Loading

coderabbitai Bot commented Sep 26, 2026 •

edited

Loading