Skip to content

chore(deps): ignore major updates for typescript in Dependabot - #928

Open
lerouxb wants to merge 1 commit into
mainfrom
dependabot-typecheck
Open

lerouxb wants to merge 1 commit into
mainfrom
dependabot-typecheck

Conversation

@lerouxb

@lerouxb lerouxb commented Oct 14, 2026

Copy link
Copy Markdown
Member

Dependabot's monthly run has been failing with exit code 1, reported as "typescript | unknown_error | null". The updater attempted to bump typescript 5.9.3 -> 7.0.2 and the underlying
npm install --package-lock-only (run per-workspace with --force) crashed with "npm error Cannot read properties of undefined (reading 'spec')".

This is an npm bug hit by the workspace monorepo during lockfile-only installs, not a real resolution conflict, so it aborts the entire run and blocks the other grouped updates from being processed.

Ignore semver-major updates for typescript so Dependabot stops attempting the 5.x -> 7.x jump, which unsticks the run. Minor and patch typescript updates are still allowed. A TS 5 -> 7 major upgrade should be done and reviewed manually anyway.

Dependabot's monthly run has been failing with exit code 1, reported as
"typescript | unknown_error | null". The updater attempted to bump
typescript 5.9.3 -> 7.0.2 and the underlying
`npm install --package-lock-only` (run per-workspace with --force) crashed
with "npm error Cannot read properties of undefined (reading 'spec')".

This is an npm bug hit by the workspace monorepo during lockfile-only
installs, not a real resolution conflict, so it aborts the entire run and
blocks the other grouped updates from being processed.

Ignore semver-major updates for typescript so Dependabot stops attempting
the 5.x -> 7.x jump, which unsticks the run. Minor and patch typescript
updates are still allowed. A TS 5 -> 7 major upgrade should be done and
reviewed manually anyway.
@lerouxb
lerouxb requested review from a team as code owners October 14, 2026 12:34
@lerouxb
lerouxb requested review from dudaschar and a balanced review from Copilot and removed request for Copilot October 14, 2026 12:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants