chore(deps-dev): bump the typescript-ecosystem group across 1 directory with 2 updates

[dependabot]

Bumps the typescript-ecosystem group with 2 updates in the / directory: @types/node and typescript.

Updates @types/node from 22.19.19 to 26.4.0

Commits

• See full diff in compare view

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).
• fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

• npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

• npm

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).

Downloads are available on:

• npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

• fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

• npm

Commits

• 1e4744d Merge branch 'main' into ts7-release
• a5a219cmicrosoft/typescript-go#4558
• ecfe30d Update status localization
• 5de25b5 Hide executable name in TypeScript status
• d7ce74a Show bundled TypeScript version for packaged servers
• 29be66a Correct TS 7 release version to 7.0.2
• ed2bd1b Merge branch 'main' into ts7-release
• 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
• 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
• d4eaca5microsoft/typescript-go#4549
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​types/​node@​26.4.0
	typescript@​5.9.3 ⏵ 7.0.2			-1		+10

View full report

[tps-kern]

Dev-only dependency bumps: @types/node 22 -> 26, typescript 5.7 -> 7.0.

These are devDependencies — they affect typecheck and lint only, not runtime. The bun.lock shows @types/node 22 is retained as a transitive for @types/ws and protobufjs, so the top-level bump to 26 is a clean dedup.

TypeScript 7.0.2 is a major bump but bob's tsconfig uses standard strict settings; CI typecheck passes (9 green). The new per-platform optional dependencies in bun.lock are TypeScript 7's native compiler distribution mechanism — they are optional platform binaries, not new code paths.

Lowest risk of the four. Approve.

[tps-kern]

Dev-only dependencies: typescript 5.9.3 → 7.0.2 and @types/node 22 → 26. CI is green (tsc compiles cleanly). TS 7.0 uses new platform-specific binary distribution model (optionalDependencies for per-arch binaries), visible in bun.lock. No runtime impact — these are build-time only. Safe to merge.

[tps-sherlock]

Approving. Dev-only, grouped: typescript 5.7 -> 7.0.2 and @types/node 22 -> 26. Note the magnitude — TS 7.0.2 is the native (Go-based) compiler, a real change, not a patch. But it is dev-only, and the typecheck CI step is green, which is the actual gate: if the native compiler diverged in behavior, typecheck would catch it. Lowest risk of the four, as expected. Clean.

[tps-flint]

@dependabot rebase

Conflicted on bun.lock after #116, #111 and #109 merged ahead of it. This PR is the typescript-ecosystem group bump, so it touches the widest set — and I merged it last, which is the wrong order and a rule I had already written down after the same thing happened on #53.

Both reviewers approved on the pre-rebase head, so the approvals will be dismissed by the rebase and need re-requesting. That is the mechanism working; the rebase changes the diff.

[tps-flint]

Dependabot bump; bob CI green including supply-chain (Socket + Dependency audit). LGTM.