Skip to content

chore(deps): update the TypeScript toolchain and locked runtime dependencies - #52

Merged
Boulea7 merged 8 commits into
mainfrom
dependabot/npm_and_yarn/development-dependencies-80659a7bc6
Oct 2, 2026
Merged

Boulea7 merged 8 commits into
mainfrom
dependabot/npm_and_yarn/development-dependencies-80659a7bc6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Update the TypeScript toolchain and locked dependencies while preserving the existing command and Node 20+ contracts.

What changed

  • TypeScript 6.0.3 → 7.0.2; @types/node 24.12.0 → 26.1.1.
  • Vitest and V8 coverage 4.1.4 → 4.1.10; tsx 4.21.0 → 4.23.1.
  • The lockfile also updates runtime dependencies: smol-toml 1.6.1 → 1.7.0 and Zod 4.3.6 → 4.4.3. Their declared ranges are unchanged.
  • Integrate with current main, including the rollout fix and setup-node v7.

Product impact

No command, configuration, or memory-format change is intended.

Validation

  • TypeScript 7.0.2 typecheck and build passed locally on Linux/Node 24.
  • 85 affected tests passed; a separate 23-test V8 run covers a subset.
  • All 83 compiled JavaScript files match the TypeScript 6 baseline. This does not establish runtime dependency equivalence.
  • Fresh full verification on Node 20 and all seven supported runtime/platform/install jobs passed on eed4a2fb (CI run). July checks are historical.

Docs

No public interface or onboarding change requires documentation updates.

Risks

Local checks cover Node 24. The new head must pass hosted full verification and the supported runtime/platform jobs before merging, including behavior affected by the runtime lockfile updates.

dependabot Bot added 2 commits July 15, 2026 03:04
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6 to 7.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v6...v7)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…ectory with 5 updates

Bumps the development-dependencies group with 2 updates in the / directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [typescript](https://github.com/microsoft/TypeScript).


Updates `@types/node` from 24.12.0 to 26.1.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 4.1.4 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8)

Updates `tsx` from 4.21.0 to 4.23.1
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.21.0...v4.23.1)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `vitest` from 4.1.4 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: tsx
  dependency-version: 4.23.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the enhancement New feature or request label Jul 15, 2026
@dependabot
dependabot Bot requested a review from Boulea7 as a code owner July 15, 2026 03:05
Read metadata and evidence with a shared UTF-8 line iterator so a
multiline rollout can exceed the JavaScript string limit without a
whole-file allocation. Preserve parsing and file-error behavior.

Refs #44

Signed-off-by: boulea7 <zln1905391059@163.com>
Avoid combining a representable line with following lines in a temporary
string or rescanning the growing prefix on every chunk. Add a regression
at the actual V8 string limit through the public metadata reader.

Refs #44

Signed-off-by: boulea7 <zln1905391059@163.com>
fix: stream rollout JSONL instead of reading the whole file
…/setup-node-7

chore(deps): bump actions/setup-node from 6 to 7
@coderabbitai

coderabbitai Bot commented Oct 2, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 6892e940-202f-402f-a980-1ec5d2e3d085

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@Boulea7 Boulea7 changed the title chore(deps-dev): bump the development-dependencies group across 1 directory with 5 updates chore(deps): update the TypeScript toolchain and locked runtime dependencies Oct 2, 2026

@Boulea7 Boulea7 left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed the complete package and lockfile update, including smol-toml and Zod. TypeScript 7 typecheck/build and the refreshed Node 20/22/24 CI, platform smoke, and install smoke pass.

@Boulea7
Boulea7 merged commit e25d7e0 into main Oct 2, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant