chore(deps): bump tsx to 4.23.12 (#227)

* chore(deps): bump the typescript-toolchain group across 1 directory with 2 updates

Bumps the typescript-toolchain group with 2 updates in the / directory: [typescript](https://github.com/microsoft/TypeScript) and [tsx](https://github.com/privatenumber/tsx).


Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `tsx` from 4.23.5 to 4.23.12
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.5...v4.23.12)

---
updated-dependencies:
- dependency-name: tsx
  dependency-version: 4.23.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: typescript-toolchain
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: typescript-toolchain
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(deps): defer incompatible toolchain majors

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Florian <dev@fwcr.de>

Author: dependabot[bot]

.github/dependabot.yml

@@ -62,6 +62,13 @@ updates:
       # ahead of the runtime — bump it deliberately when the Node version moves.
       - dependency-name: "@types/node"
         update-types: ["version-update:semver-major"]
+      # TypeScript 7 removes compiler APIs used by the build and OpenAPI tools;
+      # move compiler majors as an explicit repository-wide migration.
+      - dependency-name: "typescript"
+        update-types: ["version-update:semver-major"]
+      # Expo owns the compatible React Native and test-preset versions. Upgrade
+      # this pair with the Expo SDK instead of accepting standalone bumps.
+      - dependency-name: "react-native"
       - dependency-name: "@react-native/jest-preset"
         # Kept aligned with react-native; Expo upgrades both as one reviewed stack.
 

apps/api/package.json

@@ -56,7 +56,7 @@
     "opening_hours": "^3.14.0",
     "pino": "^10.3.1",
     "postgres": "^3.4.9",
-    "tsx": "4.23.5",
+    "tsx": "4.23.12",
     "undici": "^8.9.0",
     "zod": "^4.4.3"
   },

apps/mobile/package.json

@@ -55,7 +55,7 @@
     "jest": "^30.4.2",
     "jest-expo": "^57.0.4",
     "test-renderer": "^1.2.0",
-    "tsx": "4.23.11",
+    "tsx": "4.23.12",
     "typescript": "^6.0.3"
   },
   "expo": {

apps/ops-agent/package.json

@@ -13,7 +13,7 @@
   "dependencies": {
     "@openmapx/core": "workspace:^",
     "fastify": "^5.12.1",
-    "tsx": "4.23.5"
+    "tsx": "4.23.12"
   },
   "devDependencies": {
     "@types/node": "^26.3.0",

apps/transitous-runner/package.json

@@ -13,7 +13,7 @@
   "dependencies": {
     "@openmapx/core": "workspace:^",
     "fastify": "^5.12.1",
-    "tsx": "4.23.5"
+    "tsx": "4.23.12"
   },
   "devDependencies": {
     "@types/node": "^26.3.0",

packages/cli/package.json

@@ -25,7 +25,7 @@
     "commander": "^15.0.0",
     "execa": "^10.0.1",
     "kleur": "^4.1.5",
-    "tsx": "4.23.5"
+    "tsx": "4.23.12"
   },
   "devDependencies": {
     "@types/node": "^26.3.0",

packages/i18n/package.json

@@ -6,7 +6,7 @@
   "main": "./index.ts",
   "types": "./index.ts",
   "devDependencies": {
-    "tsx": "4.23.5"
+    "tsx": "4.23.12"
   },
   "dependencies": {
     "intl-messageformat": "^11.2.14"

pnpm-lock.yaml

@@ -0,0 +1,20 @@
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { describe, expect, it } from "vitest";
+
+const root = resolve(import.meta.dirname, "..");
+
+describe("Dependabot compatibility boundaries", () => {
+  it("does not update TypeScript majors or React Native independently of their stacks", () => {
+    const config = readFileSync(resolve(root, ".github/dependabot.yml"), "utf8");
+    const npmRoot = config.slice(
+      config.indexOf("  - package-ecosystem: npm"),
+      config.indexOf("  # The documentation site"),
+    );
+
+    expect(npmRoot).toMatch(
+      /- dependency-name: "typescript"\n\s+update-types: \["version-update:semver-major"\]/,
+    );
+    expect(npmRoot).toMatch(/- dependency-name: "react-native"(?:\n|$)/);
+  });
+});

scripts/dependabot-policy-contract.test.ts

@@ -31,7 +31,7 @@
     "ioredis": "^6.0.0",
     "pino": "^10.3.1",
     "postgres": "^3.4.9",
-    "tsx": "4.23.5",
+    "tsx": "4.23.12",
     "undici": "^8.9.0"
   },
   "devDependencies": {