Skip to content

chore(deps): bump dependency updates#594

Open
vdaas-ci wants to merge 1 commit into
mainfrom
chore/update-npm
Open

chore(deps): bump dependency updates#594
vdaas-ci wants to merge 1 commit into
mainfrom
chore/update-npm

Conversation

@vdaas-ci
Copy link
Copy Markdown
Collaborator

@vdaas-ci vdaas-ci commented Mar 24, 2026

Automated pull request to update dependencies.

@kpango
Copy link
Copy Markdown
Contributor

kpango commented Mar 24, 2026

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
🔚 Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Mar 24, 2026

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review
📝 Walkthrough

Walkthrough

Bumped the devDependencies.typescript version in package.json from ^5.4.5 to ^6.0.2. No other dependencies, scripts, or package metadata were changed.

Changes

Cohort / File(s) Summary
Dependency Update
package.json
Changed devDependencies.typescript from ^5.4.5 to ^6.0.2. Verify CI/build tooling, custom TypeScript compiler options, and any transforms/plugins for compatibility.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Suggested labels

type/dependency

Poem

TypeScript climbs to six today,
One-line change, then run the play.
Lint and build, keep errors few,
Ship the tweak and start anew. 🚀

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name Status Explanation Resolution
Title check ❓ Inconclusive The title 'chore(deps): bump dependency updates' is vague and generic, using non-descriptive phrasing that doesn't specify which dependencies were updated or their scope. Replace with a specific title like 'chore(deps): bump typescript to ^6.0.2' to clearly indicate which dependency changed and its target version.
✅ Passed checks (2 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/update-npm

Tip

💬 Introducing Slack Agent: The best way for teams to turn conversations into code.

Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.

  • Generate code and open pull requests
  • Plan features and break down work
  • Investigate incidents and troubleshoot customer tickets together
  • Automate recurring tasks and respond to alerts with triggers
  • Summarize progress and report instantly

Built for teams:

  • Shared memory across your entire org—no repeating context
  • Per-thread sandboxes to safely plan and execute work
  • Governance built-in—scoped access, auditability, and budget controls

One agent for your entire SDLC. Right inside Slack.

👉 Get started


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@package.json`:
- Line 14: Update package.json to use ts-jest 30+ and ts-node 11+ (replace the
current ts-jest and ts-node versions) to ensure compatibility with "typescript":
"^6.0.2"; then update tsconfig.json to explicitly set any breaking-change
defaults you rely on (add or adjust "strict", "target", "module", and ensure
"rootDir" and "types": ["node"] are present if they were previously inferred) so
the project behavior remains stable under TypeScript 6.0.2.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 181d196b-6ac2-4594-a8de-d20d8d29e984

📥 Commits

Reviewing files that changed from the base of the PR and between 3e09d89 and 8ba4d68.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • package.json

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@package.json`:
- Around line 12-14: The package.json currently pins "typescript": "^6.0.2"
which is incompatible with "ts-jest" ^29.1.4 (peer dependency <6); change the
TypeScript dependency in package.json to a 5.x release compatible with ts-jest
(e.g., "typescript": "^5.2.2" or another 5.x stable you prefer), update the
lockfile (npm/yarn/pnpm install) and run the test suite to confirm; keep
"ts-jest" and "ts-node" unchanged until ts-jest officially supports TS 6.0.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: d71d3946-63d1-4fd5-80d5-73d40a5ae65a

📥 Commits

Reviewing files that changed from the base of the PR and between 8ba4d68 and 360ac91.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • package.json

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

♻️ Duplicate comments (1)
package.json (1)

12-14: ⚠️ Potential issue | 🔴 Critical

TypeScript 6 bump breaks the Jest TypeScript pipeline with current ts-jest.

ts-jest (Line 12) is still on ^29.1.4, while TS is bumped to ^6.0.2 (Line 14). In this repo, jest.config.ts uses ts-jest as the TS transformer, and the installed ts-jest peer range is <6, so this upgrade is currently incompatible.

Proposed fix (safe unblock)
-    "typescript": "^6.0.2"
+    "typescript": "^5.4.5"
#!/bin/bash
# Verify current ts-jest/TypeScript compatibility from authoritative metadata.
set -euo pipefail

echo "package.json entries:"
jq -r '.devDependencies["ts-jest"], .devDependencies["typescript"]' package.json

echo
echo "Installed lockfile peer constraint for ts-jest:"
jq -r '.packages["node_modules/ts-jest"].peerDependencies.typescript' package-lock.json

echo
echo "Registry peer constraint for ts-jest@29.1.4:"
npm view ts-jest@29.1.4 peerDependencies --json | jq -r '.typescript'
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@package.json` around lines 12 - 14, The TypeScript 6 bump is incompatible
with the current ts-jest (ts-jest `@29.x`) used as the transformer in
jest.config.ts; revert the TypeScript devDependency to a ts-jest-compatible
range (e.g. change the typescript entry from "^6.0.2" to a 5.x version such as
"^5.2.2" or whatever matches ts-jest's peerDependency) so the installed ts-jest
peer constraint is satisfied, then run install and verify tests; alternatively,
if you prefer TS 6, upgrade ts-jest to a version that declares support for
TypeScript 6 instead of changing typescript.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Duplicate comments:
In `@package.json`:
- Around line 12-14: The TypeScript 6 bump is incompatible with the current
ts-jest (ts-jest `@29.x`) used as the transformer in jest.config.ts; revert the
TypeScript devDependency to a ts-jest-compatible range (e.g. change the
typescript entry from "^6.0.2" to a 5.x version such as "^5.2.2" or whatever
matches ts-jest's peerDependency) so the installed ts-jest peer constraint is
satisfied, then run install and verify tests; alternatively, if you prefer TS 6,
upgrade ts-jest to a version that declares support for TypeScript 6 instead of
changing typescript.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 5470d865-6a48-496e-9871-1bdd548f5749

📥 Commits

Reviewing files that changed from the base of the PR and between 360ac91 and d937e82.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • package.json

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@package.json`:
- Line 14: Change the package.json TypeScript dependency from "typescript":
"^6.0.2" to a compatible 5.x release (for example "typescript": "^5.7.2") so
ts-jest 29.1.4 (which requires "typescript": ">=4.3 <6") will install; then
update your tsconfig.json compilerOptions to explicitly set "moduleResolution":
"node" and add "types": ["jest", "node"] (also ensure sensible options like
"target": "es2020" and "module": "commonjs") so Jest globals are recognized and
module resolution behavior is stable across TS versions.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 03cb4e33-cf24-4b94-8250-b5fc20fd259e

📥 Commits

Reviewing files that changed from the base of the PR and between d937e82 and e16fb68.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • package.json

Comment thread package.json Outdated
"ts-jest": "^29.1.4",
"ts-node": "^10.9.2",
"typescript": "^5.4.5"
"typescript": "^6.0.2"
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check ts-jest peer dependencies for latest versions
echo "=== ts-jest 29.1.4 peer dependencies ==="
npm view ts-jest@29.1.4 peerDependencies

echo -e "\n=== Latest ts-jest version and peer dependencies ==="
npm view ts-jest version peerDependencies

echo -e "\n=== Check for ts-jest versions released in 2026 ==="
npm view ts-jest time --json | jq 'to_entries | map(select(.value | startswith("2026"))) | from_entries'

Repository: vdaas/vald-client-node

Length of output: 681


🏁 Script executed:

#!/bin/bash
# Check for ts-jest major versions (especially 30.x)
echo "=== All ts-jest major versions available ==="
npm view ts-jest versions --json | jq -r '.[-20:]' 2>/dev/null || npm view ts-jest versions

echo -e "\n=== ts-jest 30.x peer dependencies (if available) ==="
npm view ts-jest@30 peerDependencies 2>/dev/null || echo "ts-jest@30.x not found"

echo -e "\n=== jest 30.0.2 info ==="
npm view jest@30.0.2 peerDependencies 2>/dev/null || echo "jest@30.0.2 not found"

echo -e "\n=== ts-node 10.9.2 peer dependencies ==="
npm view ts-node@10.9.2 peerDependencies 2>/dev/null || echo "ts-node@10.9.2 info unavailable"

echo -e "\n=== Latest ts-jest that supports TypeScript 6.0 ==="
npm search ts-jest --json 2>/dev/null | jq '.[] | select(.name == "ts-jest") | .version' || echo "Search unavailable"

Repository: vdaas/vald-client-node

Length of output: 714


🏁 Script executed:

#!/bin/bash
# Check jest version details more thoroughly
echo "=== jest 30.0.2 existence and info ==="
npm view jest@30.0.2 2>/dev/null || echo "jest@30.0.2 does not exist"

echo -e "\n=== Latest jest version ==="
npm view jest version

echo -e "\n=== jest v30 (major version) info ==="
npm view jest@30 2>/dev/null | head -20 || echo "jest@30 info unavailable"

echo -e "\n=== Check actual package.json jest version ==="
grep -A 2 '"jest"' package.json | head -5

Repository: vdaas/vald-client-node

Length of output: 1981


🏁 Script executed:

#!/bin/bash
echo "=== jest 30.0.2 peer dependencies ==="
npm view jest@30.0.2 peerDependencies

echo -e "\n=== `@jest/core` 30.0.2 peer dependencies ==="
npm view "@jest/core@30.0.2" peerDependencies

echo -e "\n=== ts-jest latest versions supporting TypeScript 6.0 (search npm registry) ==="
npm view ts-jest peerDependencies --json | jq '.typescript' 2>/dev/null || echo "Check failed"

echo -e "\n=== Check if any package requires TypeScript explicitly ==="
npm view jest@30.0.2 peerDependencies --json | jq 'keys' 2>/dev/null || echo "No explicit TypeScript peer dep in jest"

Repository: vdaas/vald-client-node

Length of output: 425


🏁 Script executed:

#!/bin/bash
echo "=== tsconfig.json content ==="
cat tsconfig.json 2>/dev/null || echo "tsconfig.json not found"

echo -e "\n=== Check for tsconfig files ==="
find . -maxdepth 2 -name "tsconfig*.json" -type f

echo -e "\n=== Check if types field is configured ==="
grep -E '"types"|"moduleResolution"|"rootDir"' tsconfig.json 2>/dev/null || echo "Not found in tsconfig.json"

Repository: vdaas/vald-client-node

Length of output: 475


Critical: TypeScript 6.0.2 is incompatible with ts-jest 29.1.4—test suite will fail.

The ts-jest 29.1.4 peer dependency explicitly requires "typescript": ">=4.3 <6", blocking TypeScript 6.0+. npm install will reject this version constraint. No ts-jest version currently supports TypeScript 6.0 (ts-jest 30.x does not exist).

Additionally, your tsconfig.json lacks explicit configuration for TypeScript 6.0 breaking changes:

  • Missing "types": ["jest"]—TypeScript 6.0 disables auto-inclusion by default; Jest globals (describe, it, expect) will be unrecognized.
  • Missing "moduleResolution": "node"—TypeScript 6.0 defaults to "bundler", changing module resolution behavior.

Resolution: Downgrade TypeScript to the latest 5.x release (e.g., "typescript": "^5.7.2") and add explicit tsconfig configuration for future TypeScript 6.0 readiness:

tsconfig.json updates
{
  "compilerOptions": {
    "target": "es2020",
    "module": "commonjs",
    "moduleResolution": "node",
    "types": ["jest", "node"],
    "rootDir": "./",
    "esModuleInterop": true,
    "forceConsistentCasingInFileNames": true,
    "strict": true,
    "skipLibCheck": true,
    "resolveJsonModule": true
  }
}
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@package.json` at line 14, Change the package.json TypeScript dependency from
"typescript": "^6.0.2" to a compatible 5.x release (for example "typescript":
"^5.7.2") so ts-jest 29.1.4 (which requires "typescript": ">=4.3 <6") will
install; then update your tsconfig.json compilerOptions to explicitly set
"moduleResolution": "node" and add "types": ["jest", "node"] (also ensure
sensible options like "target": "es2020" and "module": "commonjs") so Jest
globals are recognized and module resolution behavior is stable across TS
versions.

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

♻️ Duplicate comments (1)
package.json (1)

14-14: ⚠️ Potential issue | 🔴 Critical

Critical: TypeScript 6.0.2 breaks ts-jest 29.1.4 peer dependency constraint—blocking test execution.

The ts-jest 29.1.4 peer dependency explicitly requires TypeScript >=4.3 <6, preventing installation with TypeScript 6.0.2. Additionally, ts-node 10.9.2 has not declared support for TypeScript 6.x. This dependency mismatch will cause npm install to fail or produce unresolved peer dependency warnings, and the test suite will be non-functional.

Resolution: Revert TypeScript to the latest 5.x release (e.g., ^5.7.2) until ts-jest releases a compatible version supporting TypeScript 6.x.

Run the following verification to confirm peer dependency constraints and compatibility:

#!/bin/bash
# Verify ts-jest and ts-node compatibility with TypeScript 6.0.2

echo "=== ts-jest 29.1.4 peer dependencies ==="
npm view ts-jest@29.1.4 peerDependencies

echo -e "\n=== Latest ts-jest version and peer dependencies ==="
npm view ts-jest@latest version peerDependencies

echo -e "\n=== Check if ts-jest has TypeScript 6 support ==="
npm view ts-jest versions --json | jq -r '.[-10:]'

echo -e "\n=== ts-node 10.9.2 peer dependencies ==="
npm view ts-node@10.9.2 peerDependencies

echo -e "\n=== ts-node latest version supporting TypeScript 6 ==="
npm view ts-node@latest version peerDependencies

echo -e "\n=== Verify jest 30.0.2 existence ==="
npm view jest@30.0.2 version || echo "jest@30.0.2 does not exist"

echo -e "\n=== Latest TypeScript 5.x version ==="
npm view typescript@5 version
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@package.json` at line 14, The package.json currently pins "typescript":
"^6.0.2", which conflicts with ts-jest@29.1.4 and ts-node 10.9.2 peer
constraints; change the TypeScript devDependency back to the latest 5.x (e.g.,
update the "typescript" entry to "^5.7.2") so npm install and the test suite can
run, and then run npm install and the reviewer-provided verification script to
confirm ts-jest/ts-node compatibility; ensure you update only the "typescript"
entry in package.json and do not alter ts-jest or ts-node versions.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Duplicate comments:
In `@package.json`:
- Line 14: The package.json currently pins "typescript": "^6.0.2", which
conflicts with ts-jest@29.1.4 and ts-node 10.9.2 peer constraints; change the
TypeScript devDependency back to the latest 5.x (e.g., update the "typescript"
entry to "^5.7.2") so npm install and the test suite can run, and then run npm
install and the reviewer-provided verification script to confirm ts-jest/ts-node
compatibility; ensure you update only the "typescript" entry in package.json and
do not alter ts-jest or ts-node versions.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: dc7f483e-87e5-42a1-a0f6-4057d0fec01f

📥 Commits

Reviewing files that changed from the base of the PR and between e16fb68 and c3632aa.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • package.json

@vdaas-ci vdaas-ci force-pushed the chore/update-npm branch 7 times, most recently from 4de32dc to 111ac38 Compare April 6, 2026 12:56
@vdaas-ci vdaas-ci force-pushed the chore/update-npm branch 6 times, most recently from 711a3b3 to 10aacce Compare April 13, 2026 13:09
@vdaas-ci vdaas-ci force-pushed the chore/update-npm branch 6 times, most recently from 1f272e1 to 91fb5fc Compare April 19, 2026 12:45
@vdaas-ci vdaas-ci force-pushed the chore/update-npm branch 6 times, most recently from 3ba3cd0 to c135a5f Compare April 27, 2026 13:25
@vdaas-ci vdaas-ci force-pushed the chore/update-npm branch 6 times, most recently from 00e2afc to 5f5be37 Compare May 4, 2026 13:30
@vdaas-ci vdaas-ci force-pushed the chore/update-npm branch 5 times, most recently from 2d5d765 to 5a44c5b Compare May 10, 2026 13:02
Signed-off-by: vdaas-ci <vald@vdaas.org>
@vdaas-ci vdaas-ci force-pushed the chore/update-npm branch from 5a44c5b to 8888283 Compare May 12, 2026 14:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants