[dependabot]

Bumps @types/node from 25.6.0 to 26.4.1.

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
symphony-state	Ready	Preview	Sep 6, 2026 9:33pm UTC

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​types/​node@​26.4.1

View full report

[cursor]

@dependabot rebase

[cursor]

Geprüft von Gardener 1 – lokal grün, CI wartet auf Runner

Local run on Node v22.23.4 and npm 10.9.9. Head 976b1b7 (@types/node 25.6.0 → 26.4.1 in package.json and the lockfile; transitive undici-types 7.19.2 → 8.3.0). A second, transitive @types/[email protected] is unchanged.

• npm ci — passed
• npm run lint — passed (eslint . --ext .ts,.tsx --max-warnings=0)
• npm run typecheck — passed (tsc -p tsconfig.json --noEmit)
• npm run test:ci — passed (3 suites, 7 tests)
• npm run build — passed (tsup)

Changelog (DefinitelyTyped node v26, DefinitelyTyped/DefinitelyTyped#75025), checked against this repo:

• Requires TypeScript 5.6+. This repo is on TypeScript 6.0.2, so that requirement is met.
• Crypto input types were tightened (BinaryLike vs narrower buffer types; CipherKey deprecated in favour of KeyLike). No node:crypto usage in typechecked sources.
• child_process exec / execFile errors now type stdout / stderr as string | Buffer. The only execFileSync call is in demo/scripts/link-lib.mjs, which is not part of tsc.
• Deprecated orphaned interfaces were removed from buffer, fs, perf_hooks, util, and worker_threads. Typechecked library code does not use those interfaces. The only Node surface in src/ and tests/ is process.env.NODE_ENV.
• undici-types 8 changes dispatcher handlers and fetch typings. This repo does not call Undici.

engines is node >= 18 and CI runs Node 20 and 22, while these types describe Node 26. That runtime/types gap already existed at @types/node 25. Nothing in the current sources failed typecheck, tests, or build. Not approved until CI is green.

GitHub CI on this head did not run the test job: it failed in about 2 seconds with "The job was not started because your account is locked due to a billing issue" (ubuntu-latest). The branch is 1 commit behind main, which only changes the workflow to the org self-hosted runner group. I commented @dependabot rebase. That runner is offline, so CI cannot go green yet. Not approved.