[paustint]

Dependency upgrade for the library and the docs site. No changes to the published library: no src/, cli/ or bin/ files changed, and esbuild and TypeScript stay at the same versions, so the build output is the same.

Two commits:

Commit	What
chore: upgrade dependencies	Every package npm outdated reported, plus refreshed transitive deps in both lockfiles
fix(docs): restore the docs typecheck under TypeScript 7	npm run typecheck in docs/ had been failing since the TS 7 upgrade

Upgrades

Library: vitest and @vitest/coverage-v8 4.1 → 5.0, oxfmt 0.63 → 0.70, oxlint 1.78 → 1.85, @types/node 25 → 26, plus the latest release-it, @release-it/keep-a-changelog and tsx.

Docs: React and @types/react 19.3, docusaurus-plugin-llms 0.5 → 0.6, and @jetstreamapp/soql-parser-js 8.0.0 → 8.1.0 (the lockfile was behind package.json).

Highlights

Vitest 5 needed no changes. I checked the tests against the migration guide's breaking changes (hoisted vi.mock, toThrow(''), un-awaited .resolves/.rejects, clearMocks defaulting on, benchmark API). None of them are used.

oxlint 1.85 adds import(no-named-as-default). Four test files default-imported testCases from modules that also export it by name. They now use the named import, as lexer.spec.ts and copy-test-cases-to-docs.ts already did. oxfmt 0.70 made no formatting changes.

Lockfiles moved from v2 to v3. That's why the diff shows about 16k deleted lines: v2 kept a duplicate legacy dependencies block. The docs package count actually went up slightly (1355 → 1371). npm update also brought transitive deps up to date, which takes the docs site's npm audit count from 33 to 24; the library is still at 0. The remaining 24 come from versions that Docusaurus and docusaurus-plugin-llms pin themselves, and npm's suggested fix is to downgrade to Docusaurus 3.5.2.

llms-full.txt changed shape. plugin-llms 0.6 now nests each page's headings under that page's title (e.g. ## API › ### Core › #### ParseQuery); before, they sat at the same level as the title. The CSP _headers output is unchanged.

The docs typecheck had been failing without anyone noticing. TypeScript 7 removed baseUrl, but @docusaurus/tsconfig still sets it, so tsc stopped at TS5102 before checking any source. docs/tsconfig.json now clears it and redeclares paths for @site/*. That exposed 11 errors: React 19's removal of the global JSX namespace (so components now return React.JSX.Element), and two strictness errors in the playground's ParsedOutput. CI doesn't run the docs typecheck, which is why it went unnoticed. I didn't add a CI step because ci.yml is shared verbatim with sf-formula-parser.

Worth a look

• @types/node 26 on a Node 24 CI. The types include APIs the runtime doesn't have. The same mismatch already existed with 25; pin to ^24 if you'd rather have exact types.
• Install-script warnings in docs. npm says @swc/core and core-js have install scripts not listed in allowScripts. This predates the PR (the older versions warned too), and the build works without those scripts.

Verification

• Library: format:check, lint, typecheck and build pass, all 2361 tests pass, and the CLI smoke test works.
• Docs: typecheck and build pass.
• Changelog: release:increment classifies [Unreleased] as a patch.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​types/​react@​19.2.18 ⏵ 19.3.0
	@​vitest/​coverage-v8@​4.1.10 ⏵ 5.0.2			+1	-1
	vitest@​4.1.10 ⏵ 5.0.2	+1	+2	+1	-1
	@​types/​node@​18.0.5 ⏵ 26.6.3				+1
	tsx@​4.23.12 ⏵ 4.23.15
	@​release-it/​keep-a-changelog@​8.0.0 ⏵ 8.0.1	-1		+1	+1
	react@​19.2.8 ⏵ 19.3.0	+1		+1
	oxfmt@​0.63.0 ⏵ 0.70.0	+1		+1	+1
	docusaurus-plugin-llms@​0.5.1 ⏵ 0.6.0	+12		-9
	oxlint@​1.78.0 ⏵ 1.85.0	+1		+1	+1
	react-dom@​19.2.8 ⏵ 19.3.0			+1
	release-it@​21.0.2 ⏵ 21.1.0	+1			+1

View full report

[Copilot]

Copilot review overview

🔵 Needs a closer look

Add the docs typecheck to CI so this regression is detected automatically.

Review effort: Lite
Findings: None

What changed in this PR

Updates library and docs dependencies, refreshes lockfiles, and restores docs TypeScript 7 typechecking without changing published library source.

Changes:

• Upgraded tooling, React, and docs dependencies.
• Updated test imports for oxlint compatibility.
• Fixed docs TypeScript configuration and React JSX typings.

File	Description
test/​test.spec.ts	Uses the named testCases import.
test/​test-partial-query.spec.ts	Uses the named testCases import.
test/​performance-test.spec.ts	Uses the named testCases import.
test/​format-roundtrip.spec.ts	Uses the named testCases import.
package.json	Upgrades library tooling dependencies.
docs/​tsconfig.json	Restores TypeScript 7 path resolution.
docs/​src/​pages/​index.tsx	Updates React JSX typing.
docs/​src/​components/​Tabs/​index.tsx	Updates React JSX typing.
docs/​src/​components/​SoqlList/​index.tsx	Updates React JSX typing.
docs/​src/​components/​ParseQueries/​SoqlInput/​index.tsx	Updates React JSX typing.
docs/​src/​components/​ParseQueries/​ParsedOutput/​index.tsx	Updates JSX types and error handling.
docs/​src/​components/​HomepageFeatures/​index.tsx	Updates React JSX typing.
docs/​src/​components/​ComposeQueries/​QueryInput/​index.tsx	Updates React JSX typing.
docs/​src/​components/​ComposeQueries/​ParsedOutput/​index.tsx	Updates React JSX typing.
docs/​package.json	Upgrades docs dependencies.
CHANGELOG.md	Documents dependency and typecheck changes.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.