build(deps-dev): dev-dependencies group (16 updates, typescript excluded)

[SamTV12345]

The remaining part of dependabot's dev-dependencies group PR (#8069, now closed), rebased onto develop.

#8069 was red because the group bumped typescript to ^7.0.2 in all four workspace packages. That part is handled separately:

• src and bin moved to TypeScript 7 in Migrate server to TypeScript 7 (tsgo) #8039 (by @zi-gae), including the real type fixes tsgo demanded.
• admin and ui stay on typescript 6: their build runs openapi-typescript, which drives the JS compiler API (ts.factory.*) that tsgo does not expose — TS7 there fails the vite build with TypeError: Cannot read properties of undefined (reading 'createKeywordTypeNode').

So this PR carries the other 16 updates only, with no typescript change in any package:

• admin: @radix-ui/react-dialog, react-toast, react-visually-hidden, @typescript-eslint/{eslint-plugin,parser}, @vitejs/plugin-react, eslint, lucide-react, react, react-dom, react-hook-form, react-i18next, vite
• src: @types/supertest, eslint, set-cookie-parser, sinon
• doc: oxc-minify
• ui: vite

Verification (local, Node 26)

• pnpm install --frozen-lockfile clean
• pnpm run build:ui (admin + ui) builds
• full backend suite: 1610 passing, 22 pending, 0 failing

Filed on its own branch rather than pushed onto the dependabot branch, because dependabot force-pushes over hand edits on its own branches.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[qodo-free-for-open-source-projects]

PR Summary by Qodo

Dev dependency group bump with split TypeScript versions (TS7 for src/bin)

⚙️ Configuration changes 🐞 Bug fix ✨ Enhancement 🕐 40+ Minutes

AI Description

• Bump dev-dependencies group and regenerate pnpm lockfile.
• Adopt TypeScript 7 for src/bin while keeping admin/ui on TypeScript 6.
• Fix TS7 type-check failures in TextLinesMutator and hooks test typing.

Diagram

graph TD
  Root["pnpm workspace"] --> Lock["pnpm-lock.yaml"] --> Pkgs["Workspace pkgs"]
  Pkgs --> TS6["TypeScript 6"] --> AdminUI["admin + ui"]
  Pkgs --> TS7["TypeScript 7"] --> SrcBin["src + bin"] --> Mutator["TextLinesMutator"] --> Hooks["hooks spec tests"]

Loading

High-Level Assessment

The following are alternative approaches to this PR:

1. Keep TypeScript 6 everywhere (defer TS7 upgrade)

• ➕ Avoids toolchain split complexity across workspaces
• ➕ Minimizes lockfile and CI variability across packages
• ➖ Blocks adoption of TS7 improvements for src/bin
• ➖ Defers addressing real type mismatches surfaced by TS7

2. Upgrade admin/ui tooling to be TS7-compatible

• ➕ Single TypeScript version across the monorepo
• ➕ Reduces long-term maintenance of split toolchains
• ➖ Requires upstream fixes/changes (e.g., openapi-typescript/tsgo compatibility)
• ➖ Potentially larger PR with higher risk and longer stabilization

3. Use pnpm overrides/resolutions for admin/ui TypeScript constraints

• ➕ Centralizes TS pinning logic at the workspace root
• ➕ Can reduce per-package version drift
• ➖ Overrides can be less explicit/obvious than per-package pins
• ➖ May introduce subtle dependency graph surprises if not scoped carefully

Recommendation: The PR’s approach (pin TS6 for admin/ui while moving src/bin to TS7) is the most pragmatic path: it unblocks TS7 adoption where it works and avoids known admin/ui build blockers. Consider a follow-up effort to eliminate the split by upgrading or replacing the admin/ui generator/tooling once TS7 support is confirmed upstream.

Files changed (8) +850 / -715

Bug fix (1) +17 / -13

TextLinesMutator.tsFix splice tuple typing and newline insertion logic for TS7 +17/-13

Fix splice tuple typing and newline insertion logic for TS7

• Corrects the internal _curSplice tuple type to match its runtime shape ([start, deleteCount, ...lines]) and removes reliance on @ts-ignore patterns. Refactors splice application to use destructuring and guards splitTextLines() nullability to satisfy TS7 without loosening types.

src/static/js/TextLinesMutator.ts

Tests (1) +14 / -3

hooks.tsAdd explicit HookFnTestCase typing for hook-style test matrices +14/-3

Add explicit HookFnTestCase typing for hook-style test matrices

• Introduces a HookFnTestCase type and applies it to the sync/async hook function test case arrays. Removes a @ts-ignore by making the concat result explicitly typed while preserving intentionally varying arity/return behaviors.

src/tests/backend/specs/hooks.ts

Other (6) +819 / -699

package.jsonUpdate admin devDependencies while keeping TypeScript pinned to v6 +13/-13

Update admin devDependencies while keeping TypeScript pinned to v6

• Bumps UI/admin-related devDependencies (Radix UI, eslint, Vite, React ecosystem). Leaves TypeScript at ^6.0.3 to avoid the known openapi-typescript/tsgo compiler API incompatibility.

admin/package.json

package.jsonUpgrade bin workspace to TypeScript 7 +1/-1

Upgrade bin workspace to TypeScript 7

• Updates the bin package devDependency on TypeScript from ^6.0.3 to ^7.0.2 to enable TS7 type-checking for CLI tooling.

bin/package.json

package.jsonBump doc toolchain minifier dependency +1/-1

Bump doc toolchain minifier dependency

• Upgrades oxc-minify from ^0.139.0 to ^0.141.0 for the documentation workspace.

doc/package.json

pnpm-lock.yamlRegenerate lockfile for grouped dev dependency updates and TS split +798/-678

Regenerate lockfile for grouped dev dependency updates and TS split

• Updates the resolved dependency graph to match the dev-dependencies group bumps and workspace-specific TypeScript versions (TS6 in admin/ui, TS7 in src/bin). Includes transitive changes for eslint/vite/react-related packages and the new TypeScript 7 platform packages.

pnpm-lock.yaml

package.jsonUpgrade src workspace to TypeScript 7 and refresh test/tool deps +5/-5

Upgrade src workspace to TypeScript 7 and refresh test/tool deps

• Bumps TypeScript to ^7.0.2 for the src workspace and updates related dev tooling versions (eslint, sinon, set-cookie-parser, @types/supertest). Aligns src with the intended TS7 toolchain while other workspaces remain constrained.

src/package.json

package.jsonBump ui Vite dependency while keeping TypeScript pinned to v6 +1/-1

Bump ui Vite dependency while keeping TypeScript pinned to v6

• Updates Vite to ^8.1.5 for the ui workspace while retaining TypeScript at ^6.0.3 to stay compatible with the current admin/ui build pipeline.

ui/package.json

[qodo-code-review]

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

[qodo-free-for-open-source-projects]

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.