chore(deps): consolidated Dependabot batch 2026-08-10

.github/dependabot.yml

@@ -40,6 +40,13 @@ updates:
         update-types: ['version-update:semver-major']
       - dependency-name: 'react-dom'
         update-types: ['version-update:semver-major']
+      # typescript 7.x is the Go-native compiler rewrite (tsgo), a breaking
+      # architectural change, not a routine semver bump. This mirrors the
+      # identical ignore in the /web-ui block below — without it here the bot
+      # re-raises a TS7 bump against /middleware every Monday (PR #595, which
+      # died at `npm ci` because typescript-eslint's peer caps at <6.1.0).
+      - dependency-name: 'typescript'
+        update-types: ['version-update:semver-major']
 
   # Web-dev (Next.js admin UI)
   - package-ecosystem: 'npm'

middleware/package.json

@@ -48,7 +48,7 @@
   "dependencies": {
     "@anthropic-ai/sdk": "^0.115.0",
     "@aws-sdk/client-s3": "^3.1075.0",
-    "@azure/msal-node": "^5.3.1",
+    "@azure/msal-node": "^5.5.0",
     "@microsoft/microsoft-graph-client": "^3.0.7",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "@types/better-sqlite3": "^7.6.13",
@@ -73,9 +73,9 @@
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "sharp": "^0.35.3",
-    "typescript-eslint": "^8.60.1",
+    "typescript-eslint": "^8.66.0",
     "undici": "^8.5.0",
-    "ws": "^8.21.1",
+    "ws": "^8.21.3",
     "yaml": "^2.6.1",
     "yauzl": "^3.3.2",
     "yazl": "^3.3.1",
@@ -85,13 +85,13 @@
     "@eslint/js": "^10.0.1",
     "@types/express": "^5.0.6",
     "@types/node": "^26.1.1",
-    "@types/pg": "^8.11.10",
+    "@types/pg": "^8.21.0",
     "@types/ws": "^8.5.13",
     "@types/yazl": "^3.3.1",
     "nodemon": "^3.1.14",
     "prettier": "^3.9.5",
     "ts-node": "^10.9.2",
-    "tsx": "^4.23.1",
+    "tsx": "^4.23.12",
     "typescript": "^6.0.2"
   },
   "overrides": {

middleware/packages/canvas-core/package.json

@@ -33,10 +33,10 @@
   "devDependencies": {
     "@types/node": "^25.9.3",
     "@types/ws": "^8.18.1",
-    "tsx": "^4.23.1",
+    "tsx": "^4.23.12",
     "typescript": "^5.9.0",
     "vitest": "^4.1.10",
-    "ws": "^8.21.1",
+    "ws": "^8.21.3",
     "@omadia/plugin-api": "*"
   }
 }

middleware/packages/dev-runner-shim/package.json

@@ -22,7 +22,7 @@
   },
   "devDependencies": {
     "@types/node": "^25.9.3",
-    "tsx": "^4.23.1",
+    "tsx": "^4.23.12",
     "typescript": "^5.9.0"
   }
 }

middleware/packages/harness-orchestrator/package.json

@@ -29,7 +29,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
-    "csv-parse": "^7.0.1",
+    "csv-parse": "^7.0.2",
     "mammoth": "^1.8.0",
     "pdf-parse": "^2.4.5"
   },