[vvillait88]

Summary

Maintenance sweep: typescript-eslint 8.72.0 to 8.72.1 (dev only). Everything else in this repo is current: @types/node is held by the release-age soak, and typescript 7 is held org-wide because typescript-eslint and tsup do not support its API yet. No overrides or patches to re-test. OSV over bun.lock is clean, and Dependabot's last runs succeeded.

Worked with: Varun.

No release: typescript-eslint is a linter the build never runs, so the published dist cannot change.

Type of change

• Bug fix (no breaking change)
• New feature (no breaking change)
• Breaking change (existing callers must update)
• Docs, tests, or internal maintenance only

Public API

None.

Test plan

bun run lint, typecheck, knip, test and build all exit 0. bun install --frozen-lockfile is a no-op (216 installs across 385 packages). osv-scanner scan --lockfile bun.lock reports no issues.

Checklist

• Tests cover the new behavior, and the suite passes locally (no behavior change; suite passes)
• Lint, format, and type checks pass
• Docs and README examples updated if the public surface changed (no public surface change)
• No secrets, credentials, or personal data in the diff or the tests

[vvillait88]

Review (fresh context, read-only)

Verdict: approve, no findings.

• Diff is package.json (typescript-eslint ^8.72.0 to ^8.72.1, devDependencies) plus its bun.lock closure; every changed lock line belongs to the typescript-eslint packages, nothing else resolved differently.
• "No release" holds by effect: typescript-eslint is a lint-time tool, not an import of anything under src/, so the published dist cannot change.
• I did not re-run the gates here; CI is the gate for that.