[Snyk] Upgrade typescript from 6.0.3 to 7.0.2

[Aravind-Kumar-cstk]

Snyk has created this PR to upgrade typescript from 6.0.3 to 7.0.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.

• The recommended version was released 21 days ago.

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: typescript

• 7.0.2 - 2026-07-08
• 7.0.1-rc - 2026-06-18
• 6.0.3 - 2026-04-16
  

  For release notes, check out the release announcement blog post.

  • fixed issues query for TypeScript 6.0.0 (Beta).
  • fixed issues query for TypeScript 6.0.1 (RC).
  • fixed issues query for TypeScript 6.0.2 (Stable).
  • fixed issues query for TypeScript 6.0.3 (Stable).

  Downloads are available on:

  • npm

from typescript GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[Aravind-Kumar-cstk]

This major version upgrade introduces a complete rewrite of the TypeScript compiler from TypeScript to Go, resulting in significant performance improvements but also critical breaking changes.

Key Breaking Changes:

• No Programmatic API: TypeScript 7.0 does not ship with the programmatic API that many tools in the ecosystem rely on. Builds that use tools like ts-node, typescript-eslint, webpack loaders (e.g., ts-loader), or framework-specific tooling (Vue, Svelte, Angular) will likely fail. A new API is planned for version 7.1.
• Stricter Compiler Defaults: Several tsconfig.json options now have stricter defaults. Projects that do not explicitly set these may fail to compile where they previously passed.
  • strict is now true by default.
  • module defaults to esnext.
  • types defaults to an empty array ([]), meaning ambient type definitions (e.g., @types/node) are no longer automatically included.
• Removed Deprecations: Flags and features deprecated in TypeScript 6.x are now hard errors.

Recommendation:
This upgrade carries a high risk of breaking existing build and CI/CD pipelines. Do not merge until you have verified that your project and all its dependencies (especially linters, test runners, and bundlers) are compatible with TypeScript 7. You may need to explicitly adjust your tsconfig.json to match the previous behavior. For projects that depend on the programmatic API, it is recommended to wait for tooling to be updated or for TypeScript 7.1 to be released.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[github-actions]

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Count (with fixes)	Without fixes	Threshold	Result
🔴 Critical Severity	0	0	10	✅ Passed
🟠 High Severity	0	3	25	✅ Passed
🟡 Medium Severity	0	46	500	✅ Passed
🔵 Low Severity	0	0	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	Breaches (with fixes)	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	0	15 / 30 days	✅ Passed
🟠 High	0	0	30 / 120 days	✅ Passed
🟡 Medium	0	0	90 / 365 days	✅ Passed
🔵 Low	0	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

• Critical without fixes: 0
• High without fixes: 3
• Medium without fixes: 46
• Low without fixes: 0

✅ BUILD PASSED - All security checks passed