Skip to content

ci(dependabot): ignore TypeScript major (7.x) bumps until toolchain supports it - #524

Merged
Seth Juarez (sethjuarez) merged 1 commit into
mainfrom
sethjuarez/live-integration-vectors
Sep 9, 2026
Merged

Seth Juarez (sethjuarez) merged 1 commit into
mainfrom
sethjuarez/live-integration-vectors

Conversation

@sethjuarez

Copy link
Copy Markdown
Member

What

Adds a Dependabot ignore rule for typescript major version bumps (version-update:semver-major) in both npm ecosystems — the 2.x (default branch) block and the v1 block.

Why

The npm version-update groups bumped typescript to ^7.0.2 — TypeScript 7, the new native/Go port — which our build/test toolchain doesn't support yet. This is the root cause of the failing Dependabot version PRs:

Holding typescript on the 5.x/6.x line keeps grouped version PRs green. The rule is scoped to major bumps only, so 5.x→5.y minor/patch updates still flow.

Follow-up

Once this lands on main, re-trigger the affected PRs so they regenerate without the TS7 bump:

Remove this ignore rule once ts-jest and tsup support TypeScript 7.

…upports it

The npm version-update groups bumped 	ypescript to ^7.0.2 (the new native
port), which breaks our build/test toolchain:
  - ts-jest@29 requires 	ypescript >=4.3 <7 -> npm ERESOLVE (PR #514)
  - tsup/esbuild crash with Cannot read properties of undefined
    (reading 'useCaseSensitiveFileNames') against TS7 (PR #513)

Ignore �ersion-update:semver-major for typescript in both the 2.x and v1
npm ecosystems so grouped version PRs stay on the 5.x/6.x line. Remove once
ts-jest and tsup support TypeScript 7.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@sethjuarez
Seth Juarez (sethjuarez) merged commit 13f920c into main Sep 9, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant