Skip to content

chore(deps-dev): bump @types/node from 22.19.1 to 25.2.3#120

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/types/node-25.2.3
Open

chore(deps-dev): bump @types/node from 22.19.1 to 25.2.3#120
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/types/node-25.2.3

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 11, 2026

Bumps @types/node from 22.19.1 to 25.2.3.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 11, 2026
@chatgpt-codex-connector
Copy link

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

@augmentcode
Copy link

augmentcode bot commented Feb 11, 2026

🤖 Augment PR Summary

Summary: Updates the project’s Node.js TypeScript type definitions via a Dependabot dev-dependency bump.

Changes:

  • Bumps @types/node from 22.x to ^25.2.3 in package.json
  • Updates the lockfile accordingly (Dependabot-generated)

Technical Notes: This is a major version jump in Node typings and should be kept consistent with the repo’s supported Node runtime/tooling versions to avoid type/runtime drift.

🤖 Was this summary useful? React with 👍 or 👎

Copy link

@augmentcode augmentcode bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review completed. 1 suggestions posted.

Fix All in Augment

Comment augment review to trigger a new review at any time.

package.json Outdated
"@types/cors": "^2.8.19",
"@types/express": "^5.0.5",
"@types/node": "^22.18.12",
"@types/node": "^25.2.3",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@types/node v25 corresponds to Node 25 APIs; since this repo declares engines.node >=22 (and CI/Docker appear to target 22), this can make the type surface ahead of the actual supported runtime. It may also require a newer TypeScript than the pinned typescript@^5.3.3, so it’s worth confirming toolchain/runtime alignment before taking the major type bump.

Severity: medium

Fix This in Augment

🤖 Was this useful? React with 👍 or 👎, or 🚀 if it prevented an incident/outage.

@greptile-apps
Copy link
Contributor

greptile-apps bot commented Feb 11, 2026

Greptile Summary

This PR is a dependabot-generated bump of @types/node from 22.18.12 to 25.3.3. It also transitively upgrades undici-types from 6.21.0 to 7.18.2, and introduces a nested copy of @types/node@22.19.13 under @inquirer/core to satisfy that package's own peer dependency constraint.

Key points:

  • This is a dev-only change (type definitions); no runtime code is modified.
  • The 3-major-version jump (22 → 25) introduces Node.js 25-specific APIs in TypeScript while the declared engines range remains >=22.0.0, creating a potential type/runtime mismatch.
  • undici-types also receives a major bump (6.x7.x), which could affect fetch/HTTP-related type signatures.
  • skipLibCheck: true in tsconfig.json reduces immediate build noise but won't catch misuse of Node 25-only APIs in source code.
  • A full npm run build and TypeScript compile check is recommended before merging.

Confidence Score: 3/5

  • Safe to merge with caution — dev-only change, but the 3-major-version type jump against a Node 22 engine target warrants a build verification pass.
  • No runtime code is changed, so immediate breakage is unlikely. However, the gap between @types/node@25.x and the engines: >=22.0.0 declaration is wide enough that Node 25-only API typings could silently enter the codebase undetected. The undici-types major bump may also affect fetch-related type signatures. Confidence is moderate until a clean TypeScript build is confirmed.
  • package.json — the engines field should be reconciled with the new @types/node major version.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["@types/node ^25.3.3\n(top-level devDep)"] --> B["undici-types ~7.18.0\n(resolved: 7.18.2)"]
    C["@inquirer/core"] --> D["@types/node 22.19.13\n(nested, to satisfy ^22.x peer)"]
    D --> E["undici-types ~6.21.0\n(resolved: 6.21.0)"]
    F["engines: node >=22.0.0"] -. "type/runtime gap" .-> A
Loading

Last reviewed commit: 7035d2d

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/types/node-25.2.3 branch 2 times, most recently from 02f9f93 to 369a2fa Compare February 18, 2026 02:56
Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 files reviewed, 1 comment

Edit Code Review Agent Settings | Greptile

package.json Outdated
"@types/cors": "^2.8.19",
"@types/express": "^5.0.5",
"@types/node": "^22.18.12",
"@types/node": "^25.2.3",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

3 major version bump (22 → 25). Check that npm run build succeeds and all TypeScript compilation passes.

Prompt To Fix With AI
This is a comment left during a code review.
Path: package.json
Line: 101

Comment:
3 major version bump (22 → 25). Check that `npm run build` succeeds and all TypeScript compilation passes.

How can I resolve this? If you propose a fix, please make it concise.

Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 22.19.1 to 25.2.3.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 25.2.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/types/node-25.2.3 branch from 369a2fa to 7035d2d Compare March 4, 2026 02:56
@greptile-apps
Copy link
Contributor

greptile-apps bot commented Mar 4, 2026

Additional Comments (1)

package.json, line 101
@types/node version ahead of declared engine range

The engines field in package.json declares "node": ">=22.0.0" (line 73), but this bump installs @types/node@25.x type definitions. This creates a type/runtime mismatch: any Node.js 25-specific APIs (e.g., new built-ins or changed signatures) will type-check cleanly, but would fail at runtime on a Node 22 environment.

Since skipLibCheck: true is set in tsconfig.json, this won't cause immediate build failures, but it could silently permit usage of Node 25-only APIs in source code.

Consider either:

  1. Pinning @types/node closer to the minimum supported runtime (e.g., ^22.x), or
  2. Updating the engines field to reflect the Node.js versions this project actually targets.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 7, 2026

Dependabot can't resolve your JavaScript dependency files. Because of this, Dependabot cannot update this pull request.

2 similar comments
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 7, 2026

Dependabot can't resolve your JavaScript dependency files. Because of this, Dependabot cannot update this pull request.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 8, 2026

Dependabot can't resolve your JavaScript dependency files. Because of this, Dependabot cannot update this pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants