Skip to content

Update TypeScript to v6#67

Merged
Andarist merged 2 commits into
changesets:mainfrom
ocavue-forks:ocavue/update-actions
May 19, 2026
Merged

Update TypeScript to v6#67
Andarist merged 2 commits into
changesets:mainfrom
ocavue-forks:ocavue/update-actions

Conversation

@ocavue
Copy link
Copy Markdown
Contributor

@ocavue ocavue commented May 19, 2026

Update TypeScript from v5 to v6. Notice that only one version of TS is in the repo, as shown below:

$ pnpm -r why typescript
typescript@6.0.3
├── @changesets/ghcommit@2.0.1 (devDependencies)
├─┬ cosmiconfig@8.3.6
│ ├─┬ @graphql-codegen/cli@5.0.2
│ │ └── @changesets/ghcommit@2.0.1 (devDependencies)
│ └─┬ graphql-config@5.0.3
│   └── @graphql-codegen/cli@5.0.2 [deduped]
├─┬ rolldown-plugin-dts@0.25.0
│ └─┬ tsdown@0.22.0
│   └── @changesets/ghcommit@2.0.1 (devDependencies)
└── tsdown@0.22.0 [deduped]

Found 1 version of typescript

This PR also includes some other deps updates. See my GitHub comments for more details.

The CI cannot pass because this PR is from a fork.

@socket-security
Copy link
Copy Markdown

socket-security Bot commented May 19, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedtypescript@​6.0.3100100909690
Added@​actions/​github@​9.1.19710010092100

View full report

Comment thread package.json
},
"devDependencies": {
"@actions/github": "^6.0.0",
"@actions/github": "^9.0.0",
Copy link
Copy Markdown
Contributor Author

@ocavue ocavue May 19, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note for reviewers:

Update @actions/github to reduce the required trustPolicyExclude changes in pnpm-workspace.yaml. Since @actions/github is only a devDep, this won't affect users.

Comment thread package.json
"pino-pretty": "^11.2.2",
"prettier": "^3.3.3",
"publint": "^0.3.20",
"ts-node": "^10.9.2",
Copy link
Copy Markdown
Contributor Author

@ocavue ocavue May 19, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note for reviewers:

We not longer need ts-node.

Comment thread pnpm-workspace.yaml
Comment on lines +10 to +11
trustPolicyExclude:
- semver@6.3.1
Copy link
Copy Markdown
Contributor Author

@ocavue ocavue May 19, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note for reviewers:

I need to add this to bypass the PNPM install error.

We cannot update semver@6.3.1 to the latest trusted version because it's an indirect dependency of Babel.

$ pnpm -r why semver
semver@6.3.1
├─┬ @babel/core@7.24.8
....

semver@7.8.0
├─┬ @changesets/apply-release-plan@7.0.4
....

Found 2 versions of semver

@ocavue ocavue marked this pull request as ready for review May 19, 2026 10:23
@Andarist Andarist added this pull request to the merge queue May 19, 2026
Merged via the queue into changesets:main with commit aa60c37 May 19, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants