Skip to content

Bump typescript from 5.4.5 to 6.0.3 - #25

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/typescript-6.0.3
Open

Bump typescript from 5.4.5 to 6.0.3#25
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/typescript-6.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 23, 2026

Copy link
Copy Markdown

Bumps typescript from 5.4.5 to 6.0.3.

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

Downloads are available on:

TypeScript 5.9

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

... (truncated)

Commits
  • 050880c Bump version to 6.0.3 and LKG
  • eeae9dd 🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...
  • ad1c695 🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)
  • 0725fb4 🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...
  • 607a22a Bump version to 6.0.2 and LKG
  • 9e72ab7 🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...
  • 35ff23d 🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...
  • e175b69 Bump version to 6.0.1-rc and LKG
  • af4caac Update LKG
  • 8efd7e8 Merge remote-tracking branch 'origin/main' into release-6.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.4.5 to 6.0.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.4.5...v6.0.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 23, 2026
@vercel

vercel Bot commented May 23, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
aleph Ready Ready Preview, Comment May 23, 2026 5:03pm
aleph-web Ready Ready Preview, Comment May 23, 2026 5:03pm

@coderabbitai

coderabbitai Bot commented May 23, 2026

Copy link
Copy Markdown

Review Change Stack

📝 Walkthrough

Walkthrough

web/package.json updates the TypeScript development dependency from version 5.4.5 to 6.0.3.

Changes

TypeScript Dependency Update

Layer / File(s) Summary
TypeScript version upgrade
web/package.json
The TypeScript devDependency is bumped from 5.4.5 to 6.0.3.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately and concisely describes the main change: updating the TypeScript dependency from version 5.4.5 to 6.0.3, which directly matches the file modification shown in the raw summary.
Description check ✅ Passed The description is directly related to the changeset, providing TypeScript release notes, commits, and Dependabot documentation that explain the dependency bump and its context.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.


Comment @coderabbitai help to get the list of available commands and usage tips.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@web/package.json`:
- Line 20: The package.json was bumped to TypeScript 6.0.3 but the lockfile
still pins 5.4.5; regenerate the lockfile so installs actually use 6.0.3 by
running npm ci (or delete web/package-lock.json and run npm install in the web
folder) to update web/package-lock.json, then run npm run build and tsc --noEmit
to catch compile errors; also review web/tsconfig.json and
web/tsconfig.base.json for deprecated/removed compiler options introduced in TS6
and adjust (or remove) any deprecated flags so the project builds cleanly with
TypeScript 6.0.3.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: cae4d7a2-6364-4a80-84c8-7df5a806a1a4

📥 Commits

Reviewing files that changed from the base of the PR and between 7adbcc1 and 61423b0.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • web/package.json

Comment thread web/package.json
"@types/react": "18.3.3",
"@types/react-dom": "18.3.0",
"typescript": "5.4.5"
"typescript": "6.0.3"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | 🏗️ Heavy lift

🧩 Analysis chain

🌐 Web query:

Does TypeScript 6.0.3 exist and what are the breaking changes in TypeScript 6.0?

💡 Result:

Yes—TypeScript 6.0.3 exists. It’s published as release tag v6.0.3 in the microsoft/TypeScript repository, with a release date of 2026-04-16. [1] Breaking changes in TypeScript 6.0 (not 6.0.3 patch): 1) Transition/compat goals: TypeScript 6.0 is a bridge toward TypeScript 7.0 (native port) and introduces breaking changes and deprecations intended to be resolved before 7.0. [2][3] 2) New default deprecations behavior via tsconfig: The release notes explain that TypeScript 6.0 deprecations can be ignored by setting "ignoreDeprecations": "6.0" in tsconfig, but TypeScript 7.0 will not support any of these deprecated options. [2][3] 3) strict is now true by default: The TypeScript 6.0 RC announcement states that strict is now true by default. If you previously relied on the default false, you must explicitly set "strict": false. [4] 4) types now defaults to []: The RC announcement notes that "types" now defaults to an empty array ([]). [4] 5) Deprecations of several compiler options in 6.0: The RC announcement lists deprecated options including target: es5, moduleResolution node (node10), moduleResolution classic, --alwaysStrict false, outFile, and others (as shown in its “Deprecated:” sections). [4] If you want, paste your tsconfig.json and I’ll map which of the above are likely to affect your project specifically.

Citations:


🌐 Web query:

Is Next.js 16.2.6 compatible with TypeScript 6.0.3?

💡 Result:

Not fully guaranteed: Next.js 16.2.6 requires a minimum TypeScript version of 5.1.0, so TypeScript 6.0.3 should be compatible based on the minimum-version requirement. However, Next.js does not explicitly state compatibility with specific newer TypeScript patch versions (like 6.0.3) in the official docs—only that you must use at least 5.1.0. [1][2] Evidence from the official Next.js docs: - Next.js “Minimum TypeScript version: v5.1.0” in its installation/TypeScript guidance. [2] - The Next.js TypeScript configuration docs also describe TypeScript support and note errors with older TypeScript, recommending upgrading to the latest. [3] Conclusion: - Since 6.0.3 is greater than the stated minimum 5.1.0, it is expected to work with Next.js 16.2.6. [2] - If you hit any build/typecheck issues, the official guidance is to update TypeScript and related types (e.g., @types/react) to latest compatible versions. [3]

Citations:


🏁 Script executed:

#!/bin/bash
# Verify that package-lock.json contains TypeScript 6.0.3

echo "Checking package-lock.json for TypeScript version..."
if [ -f "web/package-lock.json" ]; then
  jq -r '.packages."node_modules/typescript".version // .dependencies.typescript.version // "NOT FOUND"' web/package-lock.json
else
  echo "package-lock.json not found in web directory"
fi

echo -e "\nChecking for TypeScript configuration files..."
fd -e json tsconfig --type f

Repository: p-to-q/aleph

Length of output: 200


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "=== web/package.json typescript ==="
node -e 'const p=require("./web/package.json"); console.log(p.devDependencies?.typescript ?? p.dependencies?.typescript ?? "MISSING");'

echo -e "\n=== web/package-lock.json typescript resolved ==="
if [ -f "web/package-lock.json" ]; then
  node - <<'NODE'
const fs=require('fs');
const lock=JSON.parse(fs.readFileSync('web/package-lock.json','utf8'));
const v = lock?.packages?.["node_modules/typescript"]?.version
  ?? lock?.dependencies?.typescript?.version
  ?? null;
console.log(v ?? "NOT FOUND");
NODE
fi

echo -e "\n=== tsconfig strict / ignoreDeprecations ==="
for f in web/tsconfig.json tsconfig.base.json; do
  if [ -f "$f" ]; then
    echo -e "\n--- $f ---"
    rg -n '"strict"\s*:' "$f" || true
    rg -n 'ignoreDeprecations' "$f" || true
    rg -n 'compilerOptions' "$f" | head -n 20 || true
  fi
done

Repository: p-to-q/aleph

Length of output: 351


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "=== web/package.json typescript ==="
node -e 'const p=require("./web/package.json"); console.log(p.devDependencies?.typescript ?? p.dependencies?.typescript ?? "MISSING");'

echo -e "\n=== web/package-lock.json typescript resolved ==="
if [ -f "web/package-lock.json" ]; then
  node - <<'NODE'
const fs=require('fs');
const lock=JSON.parse(fs.readFileSync('web/package-lock.json','utf8'));
const v = lock?.packages?.["node_modules/typescript"]?.version
  ?? lock?.dependencies?.typescript?.version
  ?? null;
console.log(v ?? "NOT FOUND");
NODE
fi

echo -e "\n=== tsconfig strict / ignoreDeprecations ==="
for f in web/tsconfig.json tsconfig.base.json; do
  if [ -f "$f" ]; then
    echo -e "\n--- $f ---"
    rg -n '"strict"\s*:' "$f" || true
    rg -n 'ignoreDeprecations' "$f" || true
    rg -n 'compilerOptions' "$f" | head -n 20 || true
  fi
done

Repository: p-to-q/aleph

Length of output: 351


Fix lockfile sync: TypeScript set to 6.0.3 but lockfile still pins 5.4.5

web/package.json updates typescript to 6.0.3, but web/package-lock.json still resolves typescript to 5.4.5, so the upgrade may not actually take effect unless the lockfile is updated in this PR.

Next.js 16.2.6 should work with TS 6.0.3 (Next requires TypeScript >= 5.1.0), but TS 6.0 introduces breaking/deprecation changes—your web/tsconfig.json and tsconfig.base.json already have "strict": true, so focus on deprecated compiler options and run npm ci + npm run build/tsc --noEmit to confirm.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@web/package.json` at line 20, The package.json was bumped to TypeScript 6.0.3
but the lockfile still pins 5.4.5; regenerate the lockfile so installs actually
use 6.0.3 by running npm ci (or delete web/package-lock.json and run npm install
in the web folder) to update web/package-lock.json, then run npm run build and
tsc --noEmit to catch compile errors; also review web/tsconfig.json and
web/tsconfig.base.json for deprecated/removed compiler options introduced in TS6
and adjust (or remove) any deprecated flags so the project builds cleanly with
TypeScript 6.0.3.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants