build(deps-dev): bump typescript from 6.0.3 to 7.0.2 in the major group across 1 directory

[dependabot]

Bumps the major group with 1 update in the / directory: typescript.

Updates typescript from 6.0.3 to 7.0.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

[michen00]

CI triage: blocked upstream, not by this branch

Both red checks are the same failure, and both hit it during dependency install — nothing compiled, linted, or tested.

Check	Result	Install step
build	fail (11s)	npm ci (.github/workflows/ci.yml:50)
bot-automerge	fail (11s)	make build → make install → npm install (Makefile:61)
test-action	skipped	gated on build

CodeQL, Analyze (actions), Analyze (javascript-typescript), Pre-commit hooks, actionlint, and pre-commit.ci all pass.

Root cause

This PR moves typescript from ^6.0.3 to ^7.0.2. Every @typescript-eslint package in the tree declares:

peer typescript@">=4.8.4 <6.1.0"

TS 7.0.2 is outside that range, so npm ERESOLVEs:

npm error Could not resolve dependency:
npm error peer typescript@">=4.8.4 <6.1.0" from @typescript-eslint/eslint-plugin@8.66.0
npm error Conflicting peer dependency: typescript@6.0.3

A companion bump will not fix this

Checked against the live registry rather than inferred:

Package	Version	typescript peer range
@typescript-eslint/eslint-plugin	8.67.0 (latest)	>=4.8.4 <6.1.0
@typescript-eslint/parser	8.67.0	>=4.8.4 <6.1.0
@typescript-eslint/typescript-estree	8.67.0	>=4.8.4 <6.1.0
@typescript-eslint/eslint-plugin	8.67.1-alpha.22 (canary)	>=4.8.4 <6.1.0

There is no published 9.x line. No released or canary typescript-eslint accepts TypeScript 7, so bumping the plugin alongside TS cannot turn this green. The block is upstream and this branch is just the messenger.

Why not force it through

--legacy-peer-deps or an npm overrides entry would make install succeed, but lint would then run typescript-eslint against a TS version it explicitly does not support. make check would report green while covering less than it claims. Not a trade worth making for a devDependency.

Suggested follow-up

Leaving this PR open to track the upgrade. The npm ecosystem entry in .github/dependabot.yml has no ignore rules today — the 30-day semver-major-days cooldown delayed this bump but cannot prevent the next one — so if the daily re-proposals become noise:

  - package-ecosystem: npm
    directory: /
    ...
    ignore:
      # typescript-eslint 8.x (incl. canary) peers typescript ">=4.8.4 <6.1.0".
      # TS 7 majors ERESOLVE at install. Drop this once upstream ships TS 7 support.
      - dependency-name: typescript
        update-types: [version-update:semver-major]

Unblocks when typescript-eslint widens its typescript peer range to admit 7.x.