Skip to content

fix(deps): bump typescript from 5.9.3 to 6.0.2#234

Merged
panz3r merged 5 commits intomainfrom
dependabot/npm_and_yarn/typescript-6.0.2
Mar 27, 2026
Merged

fix(deps): bump typescript from 5.9.3 to 6.0.2#234
panz3r merged 5 commits intomainfrom
dependabot/npm_and_yarn/typescript-6.0.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 24, 2026

Bumps typescript from 5.9.3 to 6.0.2 and includes the required configuration changes to support the upgrade.

Affected Package(s)

  • @forward-software/react-auth (lib)
  • @forward-software/react-auth-google (packages/google-signin)
  • Examples
  • CI/CD / Repository configuration

Related Issue(s)

Motivation

TypeScript 6.0 deprecated the node/node10 module resolution strategy and made it a hard error (TS5107). Additionally, TypeScript 6.0 tightened lib defaults, surfacing a previously hidden type error in the google-signin package where String.prototype.padEnd (an ES2017 method) was used but not included in the default ES6 lib.

Description of Changes

  • lib/tsconfig.json: Changed "moduleResolution": "node" to "moduleResolution": "bundler" to resolve TS5107 deprecation error in TypeScript 6.0
  • packages/google-signin/tsconfig.json: Changed "moduleResolution": "node" to "moduleResolution": "bundler" and added "lib": ["ES2017", "DOM"] to explicitly include ES2017 string methods (padEnd) and DOM APIs (atob) that are used in base64UrlDecode

Breaking Changes

None

How to Test

  1. CI Checks: Verify that all automated tests (Vitest) and build steps pass successfully on this PR.
  2. Local Verification (Optional):
    • Run pnpm install to install dependencies.
    • Run pnpm --filter <affected-package> test to run tests for the affected package.
    • Run pnpm --filter <affected-package> build to verify the build succeeds.
    • Run pnpm --filter <affected-package> lint to check for linting errors.

Checklist

  • My code follows the project's style guidelines
  • I have added or updated tests to cover the changes
  • I have updated relevant documentation
  • All tests are passing locally
  • CI checks are passing
  • I have reviewed my own code and lock file changes
  • I have checked for any potential security implications
  • I have verified the changes work as expected
  • My commit messages follow Conventional Commits format

Notes for Reviewers

Two TypeScript 6.0 breaking changes required fixes:

  1. TS5107 — deprecated moduleResolution: node: TypeScript 6.0 deprecated node (an alias for node10) and now raises it as a hard error. Updated both packages to use "moduleResolution": "bundler", which is the appropriate modern choice for React libraries consumed by bundlers.

  2. TS2550 — padEnd not in ES6 lib: TypeScript 6.0 tightened lib defaults, surfacing that String.prototype.padEnd is an ES2017 API not included in the default ES6 lib. Explicitly specifying "lib": ["ES2017", "DOM"] in the google-signin tsconfig resolves this.


✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 24, 2026
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/typescript-6.0.2 branch from eac3b5d to 963733d Compare March 24, 2026 11:10
@github-actions github-actions bot enabled auto-merge (squash) March 24, 2026 11:11
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/typescript-6.0.2 branch from 963733d to e93f3ae Compare March 24, 2026 11:11
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.2)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/typescript-6.0.2 branch from e93f3ae to aa10e3f Compare March 26, 2026 11:12
@panz3r
Copy link
Copy Markdown
Member

panz3r commented Mar 26, 2026

@copilot the upgrade to Typescript 6 is failing the CI build and checks.
Can you update this PR to include required configuration and code changes in order to allow the upgrade?

Agent-Logs-Url: https://github.com/forwardsoftware/react-auth/sessions/8f5f422d-6211-4173-aa5f-08d0494ecae3

Co-authored-by: panz3r <1754457+panz3r@users.noreply.github.com>
auto-merge was automatically disabled March 26, 2026 23:30

Head branch was pushed to by a user without write access

Copilot AI requested review from IronTony and panz3r as code owners March 26, 2026 23:33
Copy link
Copy Markdown
Contributor

Copilot AI commented Mar 26, 2026

@copilot the upgrade to Typescript 6 is failing the CI build and checks.
Can you update this PR to include required configuration and code changes in order to allow the upgrade?

Fixed in commit 0f1bc16. Two changes were needed:

  1. Both tsconfig.json files: "moduleResolution": "node""moduleResolution": "bundler" — TypeScript 6.0 deprecated node (alias for node10) and now raises TS5107 as a hard error.

  2. packages/google-signin/tsconfig.json only: Added "lib": ["ES2017", "DOM"] — TypeScript 6.0 tightened lib defaults, exposing that String.prototype.padEnd (used in base64UrlDecode) is an ES2017 method not included in the default ES6 lib. Explicitly specifying the lib resolves both the padEnd and atob type errors.

Builds and all 58 tests pass locally with TypeScript 6.0.2.

@panz3r panz3r merged commit 631b117 into main Mar 27, 2026
12 checks passed
@panz3r panz3r deleted the dependabot/npm_and_yarn/typescript-6.0.2 branch March 27, 2026 00:07
@panz3r panz3r mentioned this pull request Mar 27, 2026
13 tasks
IronTony pushed a commit that referenced this pull request Mar 28, 2026
* fix(deps): bump typescript from 5.9.3 to 6.0.2

Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.2)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* initial plan

Agent-Logs-Url: https://github.com/forwardsoftware/react-auth/sessions/8f5f422d-6211-4173-aa5f-08d0494ecae3

Co-authored-by: panz3r <1754457+panz3r@users.noreply.github.com>

* fix: update tsconfig moduleResolution for TypeScript 6.0 compatibility

Agent-Logs-Url: https://github.com/forwardsoftware/react-auth/sessions/8f5f422d-6211-4173-aa5f-08d0494ecae3

Co-authored-by: panz3r <1754457+panz3r@users.noreply.github.com>

* chore: rebuild lock-file

* chore: update `packageManager` version to `pnpm@10.33.0`

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: panz3r <1754457+panz3r@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants