chore(deps-dev): bump typescript from 5.8.3 to 6.0.2

[dependabot]

Bumps typescript from 5.8.3 to 6.0.2.

Release notes

Sourced from typescript's releases.

TypeScript 6.0

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

• npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

• fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

• npm

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)
• fixed issues query for Typescript 5.9.3 (Stable).

Downloads are available on:

• npm

TypeScript 5.9

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)

Downloads are available on:

• npm

TypeScript 5.9 RC

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).

... (truncated)

Commits

• 607a22a Bump version to 6.0.2 and LKG
• 9e72ab7 🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...
• 35ff23d 🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...
• e175b69 Bump version to 6.0.1-rc and LKG
• af4caac Update LKG
• 8efd7e8 Merge remote-tracking branch 'origin/main' into release-6.0
• 206ed1a Deprecate assert in import() (#63172)
• e688ac8 Update dependencies (#63156)
• 29b300d Bump the github-actions group across 1 directory with 2 updates (#63205)
• 0c2c7a3 DOM update (#63183)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[urugus]

TypeScript 5.8.3 → 6.0.2 調査レポート

概要

TypeScript 6.0 は JSベースコンパイラとしての最後のメジャーリリース（7.0 は Go で書き直し予定）。7.0 への「ブリッジリリース」として多数の非推奨化・デフォルト変更を含む。

主な破壊的変更

設定	旧デフォルト	新デフォルト
strict	false	true
target	es3	es2025
module	commonjs	esnext
types	自動検出	[] (空配列)
rootDir	ソースから推論	tsconfig.jsonのディレクトリ

• module: amd/umd/systemjs/none, moduleResolution: classic, outFile が完全削除
• moduleResolution: node (node10) が非推奨化（7.0で機能停止予定）
• esModuleInterop: false / allowSyntheticDefaultImports: false が設定不可（常に有効）

セキュリティ

• CVE・脆弱性の報告: なし
• サプライチェーン攻撃の懸念: なし

CI失敗の原因と対応

エラー1: moduleResolution: "node" の非推奨エラー

error TS5107: Option 'moduleResolution=node10' is deprecated

エラー2: types デフォルト変更により @types/node が自動検出されない

error TS2591: Cannot find name 'process'.
error TS2304: Cannot find name '__dirname'.

必要な tsconfig.json の修正:

{
  "compilerOptions": {
    "moduleResolution": "nodenext",  // "node" から変更
    "module": "nodenext",            // 整合性のため変更が必要な可能性
    "types": ["node"]                // 追加
  }
}

結論

セキュリティリスクなし。ただしメジャーバージョンアップのため tsconfig.json の修正が必須であり、単純マージは不可。Dependabotの自動PRでは対応できないため、この PR を閉じて手動で tsconfig.json 修正と合わせた新 PR を作成することを推奨。