revert: bump typescript from 6.0.3 to 7.0.2 (#882) to unbreak main by groupthinking · Pull Request #890 · groupthinking/EventRelay

groupthinking · 2026-07-19T05:19:11Z

Summary

main is currently red. PR #882 auto-merged the dependabot bump typescript 6.0.3 → 7.0.2 at 2026-07-19T05:06:58Z, and CI on the resulting merge commit (0383146a) failed — the immediately preceding commit (#881) was green.

Root cause is not a type error — tsc --noEmit (type-check) passes. The build job's lint step crashes because @typescript-eslint/typescript-estree is incompatible with TypeScript 7.0:

> eslint src middleware.ts
Oops! Something went wrong! :(
ESLint: 9.39.5
TypeError: Cannot read properties of undefined (reading 'Cjs')
    at Object.<anonymous> (node_modules/@typescript-eslint/typescript-estree/dist/create-program/shared.js:59:18)

The auto-merge (dependabot-auto-merge.yml) merged before the build check finished, so the regression reached main unnoticed and every subsequent merge (#884, #885, #887, #877, …) inherits the red lint.

This PR is a straight git revert of the bump commit (ebc09e5), restoring typescript to ^6.0.3 across package.json, apps/web/package.json, and package-lock.json — i.e. the last known-green dependency state. +10 / −371, the exact inverse of the bump.

This is the immediate unblock. The durable path is to keep TS 7 and bump @typescript-eslint to a TS7-compatible release; until such a version is pinned, dependabot will re-propose this bump — consider adding build/lint as a required check and/or an ignore rule for the TS major until the toolchain catches up.

Linked issue

No tracking issue — opened as an incident revert for the broken main.

Verification

Focused tests — not run: this remediation sandbox cannot install the (dev-only) toolchain, so lint/build could not be exercised here. The change is a mechanical revert restoring the exact lockfile state that was green at build(deps): bump the npm-minor-patch group across 1 directory with 13 updates #881.
Required CI — will run on this PR; note the agent-completion/truth-gate check is independently broken across all open PRs (separate issue) and will show red here regardless.
Review threads resolved

Opened as draft — it targets protected main and should merge only on human sign-off.

Agent provenance

Automated remediation authored by Claude Code (background PR-shepherd routine). No linked agent-task issue / agent-lock manifest exists for this incident revert, so the provenance manifest is intentionally omitted rather than fabricated.

Generated by Claude Code

PR #882 auto-merged the dependabot bump of typescript 6.0.3 -> 7.0.2, which broke `main`: the `build` job's lint step crashes because @typescript-eslint/typescript-estree is incompatible with TypeScript 7.0 (`TypeError: Cannot read properties of undefined (reading 'Cjs')` in create-program/shared.js). Note `tsc --noEmit` type-check still passes — the breakage is purely the ESLint tooling, not the source. The merge landed before the `build` check finished (dependabot-auto-merge does not gate on it), so the regression reached main unnoticed and every subsequent merge inherits the red lint. This reverts the version pin across package.json, apps/web/package.json, and package-lock.json back to the last known-green state (^6.0.3). Immediate fix to unbreak main. The durable path is to keep TS7 and bump @typescript-eslint to a TS7-compatible release; until such a version is pinned, dependabot will re-propose this bump. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CPYC3tfxK9YzvmMsBvX6TN

vercel · 2026-07-19T05:19:17Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
v0-uvai	Ready	Preview, Comment, Open in v0	Jul 19, 2026 5:20am

github-actions · 2026-07-19T05:19:20Z

🔍 PR Validation

✅ Current validation passed.

coderabbitai · 2026-07-19T05:19:21Z

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one) (1)

[‘architecture-gap’, ‘bug’, ‘ci-cd’, ‘ci/cd’, ‘copilot-rabbit’, ‘documentation’, ‘duplicate’, ‘enhancement’, ‘frontend’, ‘github_actions’, ‘good first issue’, ‘help wanted’, ‘high-priority’, ‘invalid’, ‘javascript’, ‘ml-model’, ‘needs-triage’, ‘pipeline-critical’, ‘placeholder-code’, ‘priority:high’, ‘python’, ‘python:uv’, ‘question’, ‘styling’, ‘tests’, ‘v0’]

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository YAML (base), Repository UI (inherited), Organization UI (inherited)

Review profile: ASSERTIVE

Plan: Pro

Run ID: 535e8bf7-727d-4243-b55c-0686dd84bbbc

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch claude/determined-maxwell-ck3sdu

✨ Simplify code

Create PR with simplified code
Commit simplified code in branch claude/determined-maxwell-ck3sdu

_{Comment @coderabbitai help to get the list of available commands.}

github-actions · 2026-07-19T05:19:22Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA a33097c.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Package

Version

Score

Details

npm/typescript

^6.0.3

Unknown

npm/typescript

6.0.3

🟢 7.9

Details

Check	Score	Reason
Maintained	🟢 10	17 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Code-Review	🟢 10	all changesets reviewed
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Vulnerabilities	⚠️ 1	9 existing vulnerabilities detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 7	dependency not pinned by hash detected -- score normalized to 7
SAST	🟢 10	SAST tool is run on all commits
Branch-Protection	⚠️ -1	internal error: error during GetBranch(release-5.9): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration
Fuzzing	🟢 10	project is fuzzed
CI-Tests	🟢 10	30 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors	🟢 10	project has 38 contributing companies or organizations

Scanned Files

apps/web/package.json
package-lock.json

github-actions · 2026-07-19T05:19:37Z

Agent Completion Truth Gate: BLOCKED

Reasons: invalid_payload

Machine-readable verdict

{
  "details": {
    "invalid_fields": [
      "issue.number",
      "policy.agent_login",
      "policy.run_id"
    ]
  },
  "reasons": [
    "invalid_payload"
  ],
  "verdict": "blocked"
}

Workflow evidence

Copilot

Pull request overview

Reverts TypeScript 7 to the parser-compatible 6.0.3 release, restoring frontend lint/build functionality.

Changes:

Restores TypeScript ^6.0.3 in both manifests.
Reverts the lockfile and removes TypeScript 7 platform packages.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File	Description
`package.json`	Restores the root TypeScript version.
`apps/web/package.json`	Restores the web workspace TypeScript version.
`package-lock.json`	Locks TypeScript 6.0.3 and removes TypeScript 7 artifacts.

vercel Bot deployed to Preview July 19, 2026 05:20 View deployment

groupthinking changed the title ~~Revert typescript 6.0.3 → 7.0.2 bump (#882) to unbreak main~~ revert: bump typescript from 6.0.3 to 7.0.2 (#882) to unbreak main Jul 19, 2026

groupthinking marked this pull request as ready for review July 19, 2026 05:21

Copilot AI review requested due to automatic review settings July 19, 2026 05:21

groupthinking merged commit 447b5dc into main Jul 19, 2026
37 of 45 checks passed

groupthinking deleted the claude/determined-maxwell-ck3sdu branch July 19, 2026 05:21

Copilot started reviewing on behalf of groupthinking July 19, 2026 05:21 View session

Copilot AI reviewed Jul 19, 2026

View reviewed changes

groupthinking mentioned this pull request Jul 27, 2026

[PROGRAM][OWNER:Codex] Autonomous EventRelay delivery control plane #898

Open

Navigation Menu

revert: bump typescript from 6.0.3 to 7.0.2 (#882) to unbreak main - #890

revert: bump typescript from 6.0.3 to 7.0.2 (#882) to unbreak main#890
groupthinking merged 1 commit into
mainfrom
claude/determined-maxwell-ck3sdu

groupthinking commented Jul 19, 2026

Uh oh!

vercel Bot commented Jul 19, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 19, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Jul 19, 2026 •

edited

Loading

Review skipped

Uh oh!

github-actions Bot commented Jul 19, 2026

Uh oh!

github-actions Bot commented Jul 19, 2026 •

edited

Loading

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

groupthinking commented Jul 19, 2026

Summary

Linked issue

Verification

Agent provenance

Uh oh!

vercel Bot commented Jul 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 PR Validation

Uh oh!

coderabbitai Bot commented Jul 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

github-actions Bot commented Jul 19, 2026

Dependency Review

Snapshot Warnings

OpenSSF Scorecard

Scanned Files

Uh oh!

github-actions Bot commented Jul 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Agent Completion Truth Gate: BLOCKED

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

vercel Bot commented Jul 19, 2026 •

edited

Loading

github-actions Bot commented Jul 19, 2026 •

edited

Loading

coderabbitai Bot commented Jul 19, 2026 •

edited

Loading

github-actions Bot commented Jul 19, 2026 •

edited

Loading