Upgrade dependencies (July 2026) [skip chg] by timotheeguerin · Pull Request #11265 · microsoft/typespec

timotheeguerin · 2026-07-15T15:33:57Z

Summary

Routine dependency upgrade pass for July 2026.

Bump pnpm to 11.10.0.
Update catalog dependencies: @astrojs/starlight, @babel/* (7 → 8), @expressive-code/core / astro-expressive-code, vite, @vscode/test-web, oxlint-tsgolint, vite-plugin-dts, etc.
Raise minimumReleaseAge to 7 days.

Note on astro

astro is pinned to 7.0.3 rather than bumped. Versions 7.0.4-7.0.6 contain a static-build regression (withastro/astro#17306) where dynamic file-extension endpoints (e.g. docs/[...slug].md.ts) with trailingSlash: "always" fail the build with NoMatchingStaticPathFound. The upstream fix (#17320) ships in 7.0.8, which is published but still within our 7-day new-package quarantine. The pin should be dropped once 7.0.8 clears quarantine.

Validation

website builds successfully with the pin (1128 pages, no NoMatchingStaticPathFound).

Bump pnpm to 11.10.0 and update catalog dependencies (starlight, babel, expressive-code, vite, oxlint-tsgolint, etc.). Pin astro to 7.0.3: 7.0.4-7.0.6 have a static-build regression (withastro/astro#17306) that breaks the website build; the fix (7.0.8) is still within the 7-day new-package quarantine.

- Pin typescript back to ~6.0.2 (6.0.3): TS7 native port drops the JS Compiler API that unplugin-dts/vite-plugin-dts require. - Restore sha512 integrity and drop proxy tarball URLs in pnpm-lock.yaml.

github-actions · 2026-07-15T17:33:09Z

❌ There is undocummented changes. Run chronus add to add a changeset or click here.

The following packages have changes but are not documented.

❌@typespec/asset-emitter
❌@typespec/compiler
❌@typespec/emitter-framework
❌@typespec/html-program-viewer
❌@typespec/http-canonicalization
❌@typespec/http-client-js
❌@typespec/http-client-python
❌@typespec/http-client
❌@typespec/http-server-js
❌@typespec/http
❌@typespec/openapi3
❌@typespec/playground
❌@typespec/protobuf
❌@typespec/rest
❌tmlanguage-generator
❌@typespec/tspd

Show changes

azure-sdk-automation · 2026-07-15T17:45:39Z

You can try these changes here

🛝 Playground	🌐 Website	🛝 VSCode Extension

…rade-deps/july-2026

# Conflicts: # pnpm-lock.yaml

…/typespec into upgrade-deps/july-2026

…for correct build order http-canonicalization peer-depends on @typespec/compiler and @typespec/http but did not list them in devDependencies, so turbo's ^build did not order them before its own build. On a cold cache this races ahead of @typespec/http and fails with TS2307. Matches convention of all sibling packages (graphql, emitter-framework, etc.).

…rerelease bump chronus version --prerelease rewrites package.json specifiers without updating the lockfile, so pnpm 11's verifyDepsBeforeRun check fails the subsequent pkg-pr-new step with ERR_PNPM_OUTDATED_LOCKFILE. Disable the check for the rest of the job, matching the build-packages pipeline.

pkg-pr-new · 2026-07-21T17:29:53Z

Open in StackBlitz

@typespec/compiler

npm i https://pkg.pr.new/microsoft/typespec/@typespec/compiler@11265

@typespec/emitter-framework

npm i https://pkg.pr.new/microsoft/typespec/@typespec/emitter-framework@11265

@typespec/http-canonicalization

npm i https://pkg.pr.new/microsoft/typespec/@typespec/http-canonicalization@11265

@typespec/http-client

npm i https://pkg.pr.new/microsoft/typespec/@typespec/http-client@11265

@typespec/http-client-js

npm i https://pkg.pr.new/microsoft/typespec/@typespec/http-client-js@11265

@typespec/playground

npm i https://pkg.pr.new/microsoft/typespec/@typespec/playground@11265

@typespec/tspd

npm i https://pkg.pr.new/microsoft/typespec/@typespec/tspd@11265

commit: fe7d783

# Conflicts: # pnpm-lock.yaml

…t#11351) ## Problem `turbo build` randomly fails on Windows CI, exiting with code 1 and **no task output / no "run failed" summary**: \`\`\` $ turbo --filter=!@typespec/monorepo "build" • Packages in scope: ... • Running build in 65 packages • Remote caching disabled [ELIFECYCLE] Command failed with exit code 1. \`\`\` ## Root cause The failures started when turbo was bumped \`2.9.14 → 2.10.5\` in microsoft#11265. This is [vercel/turborepo#13346](vercel/turborepo#13346): turbo **2.10.1+** ships a vendored \`libghostty-vt\` compiled with **non-baseline CPU instructions** (inherited from the release build runners). On CPUs lacking those instructions, turbo crashes with \`STATUS_ILLEGAL_INSTRUCTION (0xC000001D)\` — a hard process kill, so turbo never prints its own error summary. The crash is **deterministic per-CPU** but appears *random* because CI runner pools have **heterogeneous CPUs** — you only fail when scheduled onto an older/leaner microarchitecture. The upstream fix ([vercel/turborepo#13352](vercel/turborepo#13352)) only rebuilt \`libghostty-vt\` and was verified on a single maintainer VM; no fully-fixed stable (\`>=2.10.6\`) exists yet. ## Fix Revert the catalog pin to **\`turbo: 2.9.14\`** — the version this repo ran on Windows CI cleanly for ~7 weeks (Jun 2 → Jul 21). Added a comment pointing to the upstream issue so the next dependency bump can gate re-upgrade on a verified fixed stable. The \`pnpm-lock.yaml\` change was applied surgically (only the 7 turbo entries) to avoid the registry-proxy tarball churn that \`pnpm install --lockfile-only\` introduces; validated with \`pnpm install --frozen-lockfile\`.

microsoft-github-policy-service Bot added ide Issues for VS, VSCode, Monaco, etc. lib:http-specs For issues/prs related to the @typespec/http-specs package meta:website TypeSpec.io updates labels Jul 15, 2026

timotheeguerin added 2 commits July 15, 2026 11:56

fix

061ca29

Pin typescript to ~6.0.2 and clean lockfile integrity

0e218c3

- Pin typescript back to ~6.0.2 (6.0.3): TS7 native port drops the JS Compiler API that unplugin-dts/vite-plugin-dts require. - Restore sha512 integrity and drop proxy tarball URLs in pnpm-lock.yaml.

timotheeguerin added 2 commits July 21, 2026 08:23

Merge branch 'main' of https://github.com/Microsoft/typespec into upg…

64fbbde

…rade-deps/july-2026

format

5529b41

microsoft-github-policy-service Bot added compiler:core Issues for @typespec/compiler emitter-framework Issues for the emitter framework emitter:client:csharp Issue for the C# client emitter: @typespec/http-client-csharp eng ui:type-graph-viewer labels Jul 21, 2026

fix lint

320bd24

microsoft-github-policy-service Bot added tspd Issues for the tspd tool emitter:client:js Issue for the JS client emitter: @typespec/http-client-js ui:playground labels Jul 21, 2026

timotheeguerin added 5 commits July 21, 2026 08:37

fix

a8df8fb

fix

77aeeea

fix

3b68f9e

Merge remote-tracking branch 'upstream/main' into upgrade-deps/july-2026

a457a92

# Conflicts: # pnpm-lock.yaml

format

9aee5ce

microsoft-github-policy-service Bot added lib:http lib:rest lib:versioning emitter:protobuf The protobuf emitter emitter:openapi3 Issues for @typespec/openapi3 emitter openapi3:converter Issues for @typespec/openapi3 openapi to typespec converter labels Jul 21, 2026

timotheeguerin added 4 commits July 21, 2026 12:17

regen

aa29407

Merge branch 'upgrade-deps/july-2026' of https://github.com/Microsoft…

7bf7d23

…/typespec into upgrade-deps/july-2026

fix fmt

d3b7a93

microsoft-github-policy-service Bot added the emitter:client:python Issue for the Python client emitter: @typespec/http-client-python label Jul 21, 2026

timotheeguerin changed the title ~~Upgrade dependencies (July 2026)~~ Upgrade dependencies (July 2026) [skip chg] Jul 21, 2026

timotheeguerin added 2 commits July 21, 2026 14:04

Merge remote-tracking branch 'upstream/main' into upgrade-deps/july-2026

4482761

# Conflicts: # pnpm-lock.yaml

Regen

fe7d783

timotheeguerin marked this pull request as ready for review July 21, 2026 18:33

timotheeguerin requested review from MaryGao, RodgeFu, bterlson, catalinaperalta, iscai-msft, lirenhe, markcowl, qiaozha, witemple-msft and xirzec as code owners July 21, 2026 18:33

timotheeguerin enabled auto-merge July 21, 2026 18:47

catalinaperalta approved these changes Jul 21, 2026

View reviewed changes

xirzec approved these changes Jul 21, 2026

View reviewed changes

timotheeguerin added this pull request to the merge queue Jul 21, 2026

Merged via the queue into main with commit 424acf6 Jul 21, 2026
33 of 34 checks passed

timotheeguerin deleted the upgrade-deps/july-2026 branch July 21, 2026 19:56

timotheeguerin mentioned this pull request Jul 22, 2026

fix: pin turbo to 2.9.14 to avoid random Windows CI crashes #11351

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Upgrade dependencies (July 2026) [skip chg] - #11265

Upgrade dependencies (July 2026) [skip chg]#11265
timotheeguerin merged 18 commits into
mainfrom
upgrade-deps/july-2026

timotheeguerin commented Jul 15, 2026

Uh oh!

github-actions Bot commented Jul 15, 2026 •

edited

Loading

Uh oh!

azure-sdk-automation Bot commented Jul 15, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Jul 21, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

timotheeguerin commented Jul 15, 2026

Summary

Note on astro

Validation

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

azure-sdk-automation Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pkg-pr-new Bot commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

github-actions Bot commented Jul 15, 2026 •

edited

Loading

azure-sdk-automation Bot commented Jul 15, 2026 •

edited

Loading

pkg-pr-new Bot commented Jul 21, 2026 •

edited

Loading