Skip to content

Bump typescript from 5.9.3 to 6.0.3 - #2734

Open
dependabot[bot] wants to merge 1 commit into
development/8.6from
dependabot/npm_and_yarn/typescript-6.0.3
Open

dependabot[bot] wants to merge 1 commit into
development/8.6from
dependabot/npm_and_yarn/typescript-6.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps typescript from 5.9.3 to 6.0.3.

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits
  • 050880c Bump version to 6.0.3 and LKG
  • eeae9dd 🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...
  • ad1c695 🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)
  • 0725fb4 🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...
  • 607a22a Bump version to 6.0.2 and LKG
  • 9e72ab7 🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...
  • 35ff23d 🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...
  • e175b69 Bump version to 6.0.1-rc and LKG
  • af4caac Update LKG
  • 8efd7e8 Merge remote-tracking branch 'origin/main' into release-6.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 14, 2026
@bert-e

bert-e commented Oct 14, 2026

Copy link
Copy Markdown
Contributor

Hello dependabot[bot],

My role is to assist you with the merge of this
pull request. Please type @bert-e help to get information
on this process, or consult the user documentation.

Available options
name description privileged authored
/after_pull_request Wait for the given pull request id to be merged before continuing with the current one.
/bypass_author_approval Bypass the pull request author's approval ⭐
/bypass_build_status Bypass the build and test status ⭐
/bypass_commit_size Bypass the check on the size of the changeset TBA ⭐
/bypass_incompatible_branch Bypass the check on the source branch prefix ⭐
/bypass_jira_check Bypass the Jira issue check ⭐
/bypass_peer_approval Bypass the pull request peers' approval ⭐
/bypass_leader_approval Bypass the pull request leaders' approval ⭐
/bypass_source_branch_lineage Bypass the cross-branch contamination check ⭐
/approve Instruct Bert-E that the author has approved the pull request. ✍️
/create_pull_requests Allow the creation of integration pull requests.
/create_integration_branches Allow the creation of integration branches.
/no_octopus Prevent Wall-E from doing any octopus merge and use multiple consecutive merge instead
/unanimity Change review acceptance criteria from one reviewer at least to all reviewers
/wait Instruct Bert-E not to run until further notice.
Available commands
name description privileged
/help Print Bert-E's manual in the pull request.
/status Print Bert-E's current status in the pull request.
/clear Remove all comments from Bert-E from the history TBA
/retry Re-start a fresh build TBA
/build Re-start a fresh build TBA
/force_reset Delete integration branches & pull requests, and restart merge process from the beginning.
/reset Try to remove integration branches unless there are commits on them which do not appear on the source branch.

Status report is not available.

The following options are set: bypass_author_approval, bypass_jira_check

@bert-e

bert-e commented Oct 14, 2026

Copy link
Copy Markdown
Contributor

Waiting for approval

The following approvals are needed before I can proceed with the merge:

  • the author

  • 2 peers

The following options are set: bypass_author_approval, bypass_jira_check

@github-actions

Copy link
Copy Markdown

Dependency Bump Evaluation

Version change: 5.9.3 -> 6.0.3 (major)
Semver bump type: major

Changes:

  • TypeScript 6.0 overhauls compiler defaults: strict defaults to true, module defaults to esnext, target defaults to es2025, types defaults to []
  • Deprecates moduleResolution: node (node10), module: amd/umd/systemjs/none, baseUrl, outFile, esModuleInterop: false, legacy module keyword for namespaces, and import assertions (assert)
  • New noUncheckedSideEffectImports defaults to true
  • rootDir defaults to . (tsconfig directory) instead of inferred from sources

Breaking changes:

  1. CRITICAL — types defaults to []: The root tsconfig.json has no types field. In TS 6.0 this means @types/* packages (@types/node, @types/async, @types/utf8, @types/xml2js) will no longer be auto-included, causing widespread compilation failures across the codebase. Fix: add "types": ["node", "async", "utf8", "xml2js"] to root tsconfig.json.

  2. HIGH — moduleResolution: node10 deprecated: The root tsconfig.json has "module": "commonjs" with no explicit moduleResolution. The implicit default node10 is deprecated in TS 6.0 and will emit deprecation errors. Fix: add "moduleResolution": "node10" (short-term) or migrate to "moduleResolution": "nodenext" with "module": "nodenext" (long-term).

Security concerns: None — TypeScript is a dev-only build tool with no runtime footprint.

Impact on codebase:

  • 100+ files use import * as patterns (Node.js builtins, local modules, werelogs) — likely safe with esModuleInterop: true but should be monitored
  • No import assertions, no legacy module keyword usage, no side-effect imports, no alwaysStrict override found
  • tests/workflows/tsconfig.json already has "types": ["jest", "node"] and is safe
  • Root tsconfig already sets target, module, strict, rootDir, and esModuleInterop explicitly — these are unaffected

Recommendation: BREAKING CHANGES

Notes: This is a major TypeScript version bump (5.x → 6.x) that requires tsconfig.json updates before it can merge. At minimum:

  1. Add "types": ["node", "async", "utf8", "xml2js"] to root tsconfig.json compilerOptions
  2. Add "moduleResolution": "node10" to root tsconfig.json (or set "ignoreDeprecations": "6.0" as a temporary workaround)
  3. Verify the build compiles cleanly and all tests pass after these changes

CI checks are still in progress at time of evaluation.

— Claude Code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant