Skip to content

Bump typescript from 6.0.3 to 7.0.2 in the dependencies group across 1 directory - #45

Closed
dependabot[bot] wants to merge 38 commits into
masterfrom
dependabot/npm_and_yarn/dependencies-b7ceb5d816
Closed

Bump typescript from 6.0.3 to 7.0.2 in the dependencies group across 1 directory#45
dependabot[bot] wants to merge 38 commits into
masterfrom
dependabot/npm_and_yarn/dependencies-b7ceb5d816

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown

Bumps the dependencies group with 1 update in the / directory: typescript.

Updates typescript from 6.0.3 to 7.0.2

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Nathan Ostgard and others added 30 commits December 11, 2013 07:59
This puts the hit point for intersectSegment right on the edge,
which seems like what you'd want.
She appears to have removed the public version of this, and it's
behind a pay wall on her new site. :( Linking to the archive.org
version instead, I guess.
Although this implementation may not be popular with all
JavaScript developers, it's still reasonable close to
a normal, modern JS codebase, and it's far more helpful for
people porting this to typed languages.
marked 0.3.6 has a security vulnerability, so using this
opportunity to update other things, as well.
The references for [intersect.ts] and [examples.ts] erroneously link to .js files, which don't exist and show a 404 on https://noonat.github.io/intersect/

This patch changes those links to use the proper .ts URLs.
npm install has been failing outright, because webpack 4 hashes
with md4 and OpenSSL 3 rejects it. Upgrading to webpack 5 fixes
that, and replaces url-loader with the built-in asset modules.

Regenerating the lockfile surfaced two more breakages: docco 0.8
accepts any version of commander and breaks against commander
14, and tsc 3.6 cannot parse the modern @types packages that
jest pulls in transitively. Pin docco to 0.9, and limit the
ambient types to the two that are actually used.

The generated docs are unchanged apart from highlight.js markup.
The emitted font names change because webpack 5 hashes with
xxhash64 instead of md4.
travis-ci.org is gone, so the badge in the readme has been
broken for years and nothing has run the tests since 2019. The
workflow runs jest and tslint on Node 20, 22 and 24, and npm ci
runs the prepare script, so installing is also a build check.

Also add a dependabot config. Nothing here is inherited by
anyone using the library, so the transitive advisories that
piled up twenty pull requests are not worth one each.
noonat and others added 8 commits August 5, 2026 23:03
Fix links to source code in intersect.ts.md
A segment that doesn't move on one axis has an infinite scale for
that axis, and if it also starts exactly on one of that axis'
edges, the distance to the edge is zero. Zero multiplied by
infinity is NaN, and because every comparison against NaN is
false, it passed both of the checks meant to reject it. The
function returned a hit whose time, position and delta were all
NaN.

Which of the four times ends up NaN depends on the sign of the
zero, so looking for the NaN and replacing it only covers half
the cases. Handle a zero delta directly instead: the axis rules
nothing out from inside the slab, and rules out everything from
outside it. Running exactly along an edge counts as outside,
which is how intersectAABB already treats flush boxes.

Sweeping pads the static box by the moving box's half size, so
this happened whenever something resting on a surface moved
along it.
The compiled library shipped no typings at all, so anyone using
it from TypeScript got any. It emits declarations now, and the
package points at them.

Turn on the compiler checks this code can satisfy. Most needed
no changes. The ones that did are worth having: overrides are
marked as such, an unused parameter in the base class is named
for what it is, and indexed access is checked, which is why
sweepInto iterates the colliders directly instead of by index.

Not verbatimModuleSyntax, though, which wants the library built
as an ECMAScript module rather than CommonJS.

tslint has been deprecated since 2019, so eslint and
typescript-eslint replace it, with the formatting rules turned
off so they don't argue with prettier. That turned up a real
any in the examples, which is a constructor type now.
Bumps the dependencies group with 1 update in the / directory: [typescript](https://github.com/microsoft/TypeScript).


Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 7, 2026
@noonat
noonat force-pushed the master branch 3 times, most recently from 92ea075 to 7e705de Compare August 8, 2026 15:10
@noonat noonat closed this Aug 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 8, 2026

Copy link
Copy Markdown
Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dependencies-b7ceb5d816 branch August 8, 2026 15:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants