Skip to content

chore(deps-dev): bump typescript from 4.9.5 to 6.0.3 - #1093

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/typescript-6.0.3
Open

chore(deps-dev): bump typescript from 4.9.5 to 6.0.3#1093
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/typescript-6.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps typescript from 4.9.5 to 6.0.3.

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

Downloads are available on:

... (truncated)

Commits
  • 050880c Bump version to 6.0.3 and LKG
  • eeae9dd 🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...
  • ad1c695 🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)
  • 0725fb4 🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...
  • 607a22a Bump version to 6.0.2 and LKG
  • 9e72ab7 🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...
  • 35ff23d 🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...
  • e175b69 Bump version to 6.0.1-rc and LKG
  • af4caac Update LKG
  • 8efd7e8 Merge remote-tracking branch 'origin/main' into release-6.0
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
typescript [>= 7.a, < 8]

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [typescript](https://github.com/microsoft/TypeScript) from 4.9.5 to 6.0.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v4.9.5...v6.0.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 9, 2026
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Sep 9, 2026
Make the changed TypeScript 6 defaults explicit and update Mocha imports for ES module interoperability.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@chagong

Changyong Gong (chagong) commented Sep 10, 2026

Copy link
Copy Markdown
Contributor

Decision: NOT_MERGED

Dependabot PR Manager result

  • Repository: microsoft/vscode-java-dependency
  • Pull request: microsoft/vscode-java-dependency#1093 — chore(deps-dev): bump typescript from 4.9.5 to 6.0.3
  • Update: TypeScript 4.9.5 -> 6.0.3 — major development-dependency update; not known to be security-related.
  • Safety assessment: The Compatibility Remediation Gate applies because the major update includes compiler configuration and source import migrations. TypeScript remains necessary as the project compiler and ts-loader dependency. The Dependabot commit and recorded Copilot remediation are verified, but merge commit 0854f27d7c13eeac1faf56a6fae6971228301f42 is human-authored and absent from the prior provenance ledger, so it cannot be recognized as an authorized update-branch merge. Unattended safety eligibility therefore fails despite its parents matching the remediation head and current base.
  • Final state: Head 0854f27d7c13eeac1faf56a6fae6971228301f42; open, MERGEABLE, merge state BLOCKED, review decision REVIEW_REQUIRED. CI: 34 successful, 0 failed, 0 non-terminal; all 4 required checks passed. No unresolved review threads.
  • Actions taken: Validated the target and Dependabot authorship; verified all commit identities, merge parents, branch freshness (behind_by=0), remediation ancestry, complete diff, reviews, threads, and current-head checks. No rebase, rerun, remediation, approval, or merge was attempted.
  • Reason: Human-authored merge commit 0854f27d7c13eeac1faf56a6fae6971228301f42 is not recorded in the existing provenance ledger and cannot be accepted as an expected update-branch merge.
  • Next action: A maintainer must manually audit and approve or merge the PR.
  • Workflow run: https://github.com/chagong/JavaForge/actions/runs/34745166209

@chagong Changyong Gong (chagong) left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Compatibility migration verified against the current head; all checks pass.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

The major TypeScript upgrade and related compiler and test-runner changes warrant final human validation.

Pull request overview

Updates the development TypeScript toolchain from 4.9.5 to 6.0.3.

Changes:

  • Updates TypeScript dependency and lockfile.
  • Adds TypeScript 6 compatibility options.
  • Converts Mocha imports across test suites.
File summaries
File Description
tsconfig.json Adds TypeScript 6 compatibility options.
test/suite/index.ts Updates Mocha imports.
test/simple-suite/index.ts Updates Mocha imports.
test/non-java-gradle-suite/index.ts Updates Mocha imports.
test/multiple-suite/index.ts Updates Mocha imports.
test/multi-module-suite/index.ts Updates Mocha imports.
test/maven-suite/index.ts Updates Mocha imports.
test/invisible-suite/index.ts Updates Mocha imports.
test/gradle-suite/index.ts Updates Mocha imports.
package.json Updates the TypeScript dependency.
package-lock.json Locks TypeScript 6.0.3 metadata.
Review details
  • Files reviewed: 9/11 changed files
  • Comments generated: 0
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants