deps: bump typescript from 6.0.3 to 7.0.2 in /packages/squad-sdk - #26

Closed

dependabot[bot] wants to merge 1 commit into

devfrom

dependabot/npm_and_yarn/packages/squad-sdk/typescript-7.0.2

dependabot Bot commented on behalf of github Jul 12, 2026 •

edited

Loading

Contributor

Bumps typescript from 6.0.3 to 7.0.2.

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

dependabot Bot commented on behalf of github Jul 12, 2026

Contributor Author

Labels

The following labels could not be found: dependencies, squad:belanna. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

github-actions Bot commented Jul 20, 2026

Contributor

👋 Friendly nudge — this PR has had no activity for 7 days.

What needs attention:

🔴 4 CI check(s) failing: Policy Gates, sdk-exports-validation, test, build-validate. Fix these first.
👀 No approving reviews yet. Request a review from a teammate.
⬇️ 23 commits behind dev. Rebase to pick up latest changes.

If this PR is abandoned, please close it. If it's blocked on something external, leave a comment so the team knows.
This is an automated check that runs on weekdays. It won't nudge the same PR more than once per week.

1 similar comment

github-actions Bot commented Jul 27, 2026

Contributor

👋 Friendly nudge — this PR has had no activity for 7 days.

What needs attention:

🔴 4 CI check(s) failing: Policy Gates, sdk-exports-validation, test, build-validate. Fix these first.
👀 No approving reviews yet. Request a review from a teammate.
⬇️ 23 commits behind dev. Rebase to pick up latest changes.

If this PR is abandoned, please close it. If it's blocked on something external, leave a comment so the team knows.
This is an automated check that runs on weekdays. It won't nudge the same PR more than once per week.

dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/squad-sdk/typescript-7.0.2 branch from c3cb2c8 to 8306673 Compare

August 2, 2026 23:53

dependabot Bot changed the base branch from dev to replatform-0.11

August 7, 2026 23:08

dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/squad-sdk/typescript-7.0.2 branch from 8306673 to 22d2007 Compare

August 7, 2026 23:08


          deps: bump typescript from 6.0.3 to 7.0.2 in /packages/squad-sdk

c9c81d8

Bumps [typescript](https://github.com/microsoft/TypeScript) from 6.0.3 to 7.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/squad-sdk/typescript-7.0.2 branch from 22d2007 to c9c81d8 Compare

August 8, 2026 21:18

github-actions Bot commented Aug 17, 2026

Contributor

👋 Friendly nudge — this PR has had no activity for 8 days.

What needs attention:

🔴 1 CI check(s) failing: sdk-exports-validation. Fix these first.
👀 No approving reviews yet. Request a review from a teammate.

If this PR is abandoned, please close it. If it's blocked on something external, leave a comment so the team knows.
This is an automated check that runs on weekdays. It won't nudge the same PR more than once per week.

github-actions Bot commented Aug 24, 2026

Contributor

👋 Friendly nudge — this PR has had no activity for 7 days.

What needs attention:

🔴 1 CI check(s) failing: sdk-exports-validation. Fix these first.
👀 No approving reviews yet. Request a review from a teammate.

If this PR is abandoned, please close it. If it's blocked on something external, leave a comment so the team knows.
This is an automated check that runs on weekdays. It won't nudge the same PR more than once per week.

1 similar comment

github-actions Bot commented Aug 31, 2026

Contributor

👋 Friendly nudge — this PR has had no activity for 7 days.

What needs attention:

🔴 1 CI check(s) failing: sdk-exports-validation. Fix these first.
👀 No approving reviews yet. Request a review from a teammate.

If this PR is abandoned, please close it. If it's blocked on something external, leave a comment so the team knows.
This is an automated check that runs on weekdays. It won't nudge the same PR more than once per week.

DeDuva mentioned this pull request

Teach the Dependabot reviewer what this repo actually reports #132

Merged

DeDuva commented Sep 1, 2026 •

edited

Loading

Owner

Not merged — needs refresh, then human review (head c9c81d80)

Two problems, either of which alone blocks an automated merge.

Workspace lockfile drift. This PR changes packages/squad-sdk/package.json and nothing else. With a single root package-lock.json across the workspaces, the manifest and lockfile disagree, npm ci refuses to install, and sdk-exports-validation is already FAILURE on this head as a result.
Stale base. mergeStateStatus is blocked: this PR predates the current workflows, so the required claude-md check never ran on it and cannot pass as-is. It was opened 2026-07-12 against a base that has moved a long way since.

Asking Dependabot to rebuild the update against current dev, so the root lockfile moves with the manifest and the current required checks run:

·@·d·ependabot r·ecreate

Once refreshed, this still needs a human. TypeScript 6.0.3 → 7.0.2 is a compiler major, and toolchain majors are never merged automatically here regardless of green checks — their failures show up at publish time and in downstream consumers of @deduvafork/squad-sdk, not in this repository's own test run. It also wants checking against engines: >=22.5.0 and against the .d.ts output that sdk-exports-validation guards.

See also #33, which is the same TypeScript 6 → 7 bump at the repository root.

This was referenced Sep 1, 2026

deps: bump typescript from 6.0.3 to 7.0.2 #33

Closed

Stop Dependabot proposing npm updates it cannot lock #135

Merged

DeDuva added a commit that referenced this pull request


          Stop Dependabot proposing npm updates it cannot lock (#135)

fb50d1d

`packages/squad-cli` and `packages/squad-sdk` had their own `package-ecosystem:
npm` entries in dependabot.yml. They are workspace members of `workspaces:
packages/*` and have no `package-lock.json` of their own, so a directory-scoped
entry makes Dependabot edit the member's `package.json` and nothing else. The
manifest and the single root lockfile then disagree, `npm ci` refuses with
EUSAGE, and every check that installs first fails for a reason that has nothing
to do with the dependency being bumped.

That produced three of the open PRs — #111, #112 and #26 — all reporting
`mergeable: MERGEABLE` while being uninstallable. The root `/` entry already
updates every member manifest together with the lockfile, which is the only
combination npm will install, so the two entries are removed rather than fixed.

Lands the upgrades those PRs were trying to make, this time with the lockfile:

- esbuild ^0.25.0 -> ^0.28.2 in squad-cli   (#112)
- @opentelemetry/{exporter-metrics-otlp-grpc,exporter-trace-otlp-grpc,sdk-node}
  ^0.219.0 -> ^0.221.0 in squad-sdk         (#111)

The lockfile diff is large because those two trees are large — 60 @opentelemetry
and 26 @esbuild entries move. A no-op `npm install --package-lock-only` on dev
changes 4 lines, so the churn is the upgrade, not a reformat.

DeDuva mentioned this pull request

Stop re-proposing the two upgrades that have nowhere to land #136

Merged

DeDuva commented Sep 1, 2026

Owner

Closing — this PR no longer has a configuration that owns it, and its content is one we have decided not to pursue for now.

Two independent reasons:

The config entry that created it is gone. /packages/squad-sdk was declared as its own package-ecosystem: npm despite being a workspace member with no lockfile, which is why this PR changes packages/squad-sdk/package.json alone and sdk-exports-validation fails on npm ci. That entry was removed in Stop Dependabot proposing npm updates it cannot lock #135.
The upgrade itself is blocked upstream. typescript 6 → 7 cannot pass lint: typescript-eslint peer-requires typescript >=4.8.4 <6.1.0, still true at its newest release (8.69.0). Stop re-proposing the two upgrades that have nowhere to land #136 adds a major-version ignore for typescript on the root entry, and deps: bump typescript from 6.0.3 to 7.0.2 #33 — the root-level version of this same upgrade — was closed by Dependabot on the back of it.

When typescript-eslint widens its peer range, remove that ignore and the upgrade will be re-proposed against the root workspace, with a lockfile this time.

DeDuva closed this

dependabot Bot commented on behalf of github Sep 1, 2026

Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot Bot deleted the dependabot/npm_and_yarn/packages/squad-sdk/typescript-7.0.2 branch

September 1, 2026 17:56

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet