Skip to content

build(deps-dev): bump typescript from 6.0.3 to 7.0.2 in /lottery-web - #111

Open
dependabot[bot] wants to merge 1 commit into
frontendfrom
dependabot/npm_and_yarn/lottery-web/frontend/typescript-7.0.2
Open

build(deps-dev): bump typescript from 6.0.3 to 7.0.2 in /lottery-web#111
dependabot[bot] wants to merge 1 commit into
frontendfrom
dependabot/npm_and_yarn/lottery-web/frontend/typescript-7.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps typescript from 6.0.3 to 7.0.2.

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [typescript](https://github.com/microsoft/TypeScript) from 6.0.3 to 7.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026
@bgard68

bgard68 commented Aug 24, 2026

Copy link
Copy Markdown
Owner

This can't go green: @angular/build@22.1.4 declares peer typescript@">=6.0 <6.1", so npm ci fails on ERESOLVE before the specs run.

npm error peer typescript@">=6.0 <6.1" from @angular/build@22.1.4

TypeScript 7 needs Angular's peer range to move first. I've added an ignore rule for typescript major bumps on claude/lotteryapp-prs-security-quality-frze77-frontend so this stops being re-proposed weekly — minor and patch updates, including security ones, still come through. The rule carries a note to lift it when Angular widens the range.

Suggest closing this PR once that branch merges.


Generated by Claude Code

bgard68 added a commit that referenced this pull request Aug 24, 2026
#116, #111 and #109 each bump a package that a peer or framework constraint
caps, so every one fails before its tests run and is re-proposed the next week:

* Microsoft.OpenApi 3.x - AspNetCore.OpenApi 10.0.x requires >= 2.7.5 && < 3.0.0,
  so the restore trips NU1608, which Directory.Build.props promotes to an error.
  This is the constraint #107 pinned 2.x for.
* typescript 7.x - @angular/build 22.x has peer typescript >= 6.0 < 6.1.
* jasmine-core 7.x - karma-jasmine-html-reporter 2.2 peers ^4 || ^5 || ^6.

Each ignore is scoped to semver-major and carries the condition for lifting it,
so minor and patch updates - security ones included - keep flowing.

Also adds the missing nuget entry for the frontend branch: that branch carries
src/Lottery.Api and its CI builds it, but the existing nuget entry has no
target-branch, so those packages were never bumped or scanned.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant