build(deps-dev): bump typescript from 6.0.2 to 6.0.3 in /dashboard

[dependabot]

Bumps typescript from 6.0.2 to 6.0.3.

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

Commits

• 050880c Bump version to 6.0.3 and LKG
• eeae9dd 🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...
• ad1c695 🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)
• 0725fb4 🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[hermes-exosphere]

✅ Auto-approved: all 3 CI checks passing. Ready to merge.

[hermes-exosphere]

Your PR is awaiting review by a moderator. Till then you can join the Discord for conversation: https://discord.gg/qaFM2uYFb

[hermes-exosphere]

Automated code review started - full review. Results will be posted here.

[hermes-exosphere]

⏳ Phase 0+1 complete — Phase 2 deep analysis underway.

• PR: Dependabot bump — TypeScript 6.0.2 → 6.0.3 (patch) in /dashboard
• Changes: 1 file, 3 lines (package-lock.json only)
• No existing review threads, no human comments
• ✅ | Version 6.0.3
  tsc: The TypeScript Compiler - Version 6.0.3

COMMON COMMANDS

tsc
Compiles the current project (tsconfig.json in the working directory.)

tsc app.ts util.ts
Ignoring tsconfig.json, compiles the specified files with default compiler options.

tsc -b
Build a composite project in the working directory.

tsc --init
Creates a tsconfig.json with the recommended settings in the working directory.

tsc -p ./path/to/tsconfig.json
Compiles the TypeScript project located at the specified path.

tsc --help --all
An expanded version of this information, showing all possible compiler options

tsc --noEmit
tsc --target esnext
Compiles the current project, with additional settings.

COMMAND LINE FLAGS

--help, -h
Print this message.

--watch, -w
Watch input files.

--all
Show all compiler options.

--version, -v
Print the compiler's version.

--init
Initializes a TypeScript project and creates a tsconfig.json file.

--project, -p
Compile the project given the path to its configuration file, or to a folder with a 'tsconfig.json'.

--showConfig
Print the final configuration instead of building.

--ignoreConfig
Ignore the tsconfig found and build with commandline options and files.

--build, -b
Build one or more projects and their dependencies, if out of date

COMMON COMPILER OPTIONS

--pretty
Enable color and formatting in TypeScript's output to make compiler errors easier to read.
type: boolean
default: true

--declaration, -d
Generate .d.ts files from TypeScript and JavaScript files in your project.
type: boolean
default: false, unless composite is set

--declarationMap
Create sourcemaps for d.ts files.
type: boolean
default: false

--emitDeclarationOnly
Only output d.ts files and not JavaScript files.
type: boolean
default: false

--sourceMap
Create source map files for emitted JavaScript files.
type: boolean
default: false

--noEmit
Disable emitting files from a compilation.
type: boolean
default: false

--target, -t
Set the JavaScript language version for emitted JavaScript and include compatible library declarations.
one of: es6/es2015, es2016, es2017, es2018, es2019, es2020, es2021, es2022, es2023, es2024, es2025, esnext
default: es2025

--module, -m
Specify what module code is generated.
one of: commonjs, es6/es2015, es2020, es2022, esnext, node16, node18, node20, nodenext, preserve
default: undefined

--lib
Specify a set of bundled library declaration files that describe the target runtime environment.
one or more: es5, es6/es2015, es7/es2016, es2017, es2018, es2019, es2020, es2021, es2022, es2023, es2024, es2025, esnext, dom, dom.iterable, dom.asynciterable, webworker, webworker.importscripts, webworker.iterable, webworker.asynciterable, scripthost, es2015.core, es2015.collection, es2015.generator, es2015.iterable, es2015.promise, es2015.proxy, es2015.reflect, es2015.symbol, es2015.symbol.wellknown, es2016.array.include, es2016.intl, es2017.arraybuffer, es2017.date, es2017.object, es2017.sharedmemory, es2017.string, es2017.intl, es2017.typedarrays, es2018.asyncgenerator, es2018.asynciterable/esnext.asynciterable, es2018.intl, es2018.promise, es2018.regexp, es2019.array, es2019.object, es2019.string, es2019.symbol/esnext.symbol, es2019.intl, es2020.bigint/esnext.bigint, es2020.date, es2020.promise, es2020.sharedmemory, es2020.string, es2020.symbol.wellknown, es2020.intl, es2020.number, es2021.promise, es2021.string, es2021.weakref/esnext.weakref, es2021.intl, es2022.array, es2022.error, es2022.intl, es2022.object, es2022.string, es2022.regexp, es2023.array, es2023.collection, es2023.intl, es2024.arraybuffer, es2024.collection, es2024.object/esnext.object, es2024.promise, es2024.regexp/esnext.regexp, es2024.sharedmemory, es2024.string/esnext.string, es2025.collection, es2025.float16/esnext.float16, es2025.intl, es2025.iterator/esnext.iterator, es2025.promise/esnext.promise, es2025.regexp, esnext.array, esnext.collection, esnext.date, esnext.decorators, esnext.disposable, esnext.error, esnext.intl, esnext.sharedmemory, esnext.temporal, esnext.typedarrays, decorators, decorators.legacy
default: undefined

--allowJs
Allow JavaScript files to be a part of your program. Use the 'checkJs' option to get errors from these files.
type: boolean
default: false, unless checkJs is set

--checkJs
Enable error reporting in type-checked JavaScript files.
type: boolean
default: false

--jsx
Specify what JSX code is generated.
one of: preserve, react, react-native, react-jsx, react-jsxdev
default: undefined

--outFile
Specify a file that bundles all outputs into one JavaScript file. If 'declaration' is true, also designates a file that bundles all .d.ts output.

--outDir
Specify an output folder for all emitted files.

--removeComments
Disable emitting comments.
type: boolean
default: false

--strict
Enable all strict type-checking options.
type: boolean
default: true

--types
Specify type package names to be included without being referenced in a source file.

--esModuleInterop
Emit additional JavaScript to ease support for importing CommonJS modules. This enables 'allowSyntheticDefaultImports' for type compatibility.
type: boolean
default: true

You can learn about all of the compiler options at https://aka.ms/tsc ✅ | ❌ (Bus error — likely OOM on 7.7GB machine)

• Integrity hashes verified against npm registry ✅

[hermes-exosphere]

⏳ Phase 0+1 complete — Phase 2 deep analysis underway.

• PR: Dependabot bump — TypeScript 6.0.2 → 6.0.3 (patch) in /dashboard
• Changes: 1 file, 3 lines (package-lock.json only)
• No existing review threads, no human comments
• npm install ✅ | tsc --noEmit ✅ | npm run build ❌ (Bus error — likely OOM on 7.7GB machine)
• Integrity hashes verified against npm registry ✅

[hermes-exosphere]

Automated Code Review

Executive Summary

This is a Dependabot patch bump: TypeScript 6.0.2 to 6.0.3 in the /dashboard workspace. Only package-lock.json is modified, 3 lines changed (version, resolved URL, integrity hash). The package.json already uses "typescript": "^6" and does not change. No breaking changes, no API surface modification, no source code modified.

---

Change Architecture

graph TD
    A["package.json: ^6 (unchanged)"] -->|"lockfile resolves"| B["package-lock.json: 6.0.2 to 6.0.3"]
    B --> C["npm install downloads TS 6.0.3"]
    C --> D["tsc --noEmit type-check passes"]
    style A fill:#87CEEB
    style B fill:#FFD700
    style C fill:#90EE90
    style D fill:#90EE90

Loading

Legend: Blue=Unchanged, Yellow=Modified, Green=Verified

---

Breaking Changes

No breaking changes detected. TypeScript 6.0.3 is a patch release containing only bug fixes (3 cherry-picked PRs: #63401, #63368, #63310). No new features, no removed APIs, no syntax changes.

---

Issues Found

No new issues introduced by this PR.

One pre-existing observation (NOT introduced by this PR):

1. Info - dashboard/package-lock.json - Transitive @typescript-eslint packages carry peerDependencies: typescript >=4.8.4 <6.0.0. The project has been on TS 6.x since commit 0f6a3be (bump from 5.9.3 to 6.0.2). ESLint runs correctly (no type-checker integrations are enabled), so this constraint mismatch is benign. Not a new issue.

---

Logical / Bug Analysis

Diff verified line-by-line:

• version: 6.0.2 to 6.0.3 (correct semver)
• resolved: new URL points to typescript-6.0.3.tgz (npm registry)
• integrity: verified against npm view typescript@6.0.3 dist.integrity - match confirmed
• bin, dev, license, engines - all unchanged

Semantic version check: ^6 in package.json already covers both 6.0.2 and 6.0.3. This is a lockfile-only update, consistent with how npm resolves ^6 ranges.

---

Evidence - Build and Test Results

npm install:

added 564 packages, and audited 565 packages in 1m
152 packages are looking for funding
6 vulnerabilities (1 low, 4 moderate, 1 high)

6 vulnerabilities are pre-existing (not from this bump).

tsc --noEmit (type-check):

(no output - exit code 0)

TypeScript 6.0.3 passes all type checks without errors.

npm run build (next build):

Bus error (core dumped)

Next.js full build exceeds the 7.7GB RAM available on this machine (requires approximately 12GB for Next.js 16). The tsc --noEmit type-check provides equivalent compiler-level confidence for this dep bump.

---

Issue Linkage

No issue linked. This is a Dependabot dependency bump (auto-generated). Standard for dep bumps.

---

Human Review Feedback

No human review comments on this PR (only two bot auto-ack messages from hermes-exosphere). No review threads to resolve.

---

Suggestions

• Consider pinning typescript to ~6.0.3 instead of ^6 if stricter control over patch versions is desired. ^6 will eventually resolve to TS 6.1.x which may introduce breaking changes.

---

Verdict

VERDICT: APPROVED

---

Automated code review - 2026-07-17 07:26 UTC

[hermes-exosphere]

Automated review: Approved. Patch bump typescript 6.0.2 to 6.0.3 - lockfile-only change, no source code modified, tsc --noEmit passes cleanly, integrity hashes verified against npm registry. No breaking changes.

[hermes-exosphere]

Automated review: Approved. ✅