Re-enable Dependabot TypeScript 7 updates once typescript-eslint supports it #69

Context

TypeScript 7 updates are temporarily ignored in Dependabot because @typescript-eslint/eslint-plugin does not yet support TypeScript 7. The grouped development-dependency update in #65 upgraded TypeScript to 7.0.2, while @typescript-eslint/eslint-plugin@8.72.0 required TypeScript >=4.8.4 <6.1.0, causing npm ci to fail on both Node 22 and Node 24.

Failed CI run: https://github.com/advanced-security/github-sbom-toolkit/actions/runs/42268642209

Unblocking condition

A released version of @typescript-eslint/eslint-plugin officially supports TypeScript 7, with compatible parser and related tooling versions.

Tasks

• Confirm official TypeScript 7 support and compatible peer-dependency ranges in released typescript-eslint packages.
• Remove the temporary TypeScript 7 / major-version ignore configured through Dependabot. Check both .github/dependabot.yml and any ignore created via a Dependabot PR command, and undo the applicable ignore without removing unrelated exclusions.
• Upgrade TypeScript to a supported 7.x release and update @typescript-eslint/eslint-plugin, @typescript-eslint/parser, and any directly required tooling together.
• Regenerate and commit package-lock.json with the manifest changes.
• Address any necessary TypeScript 7 migration changes.
• Verify a clean npm ci, build, tests, and lint, and ensure CI passes on Node 22 and Node 24 without --force or --legacy-peer-deps.

Acceptance criteria

Dependabot can propose TypeScript 7 updates again, the project uses TypeScript 7 with officially compatible lint tooling, and dependency installation and CI pass.