Fix TypeScript 6 checker config#2695
Conversation
…updates Bumps the typescript group with 4 updates in the / directory: [typedoc](https://github.com/TypeStrong/TypeDoc), [typescript](https://github.com/microsoft/TypeScript), [@types/chrome](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/chrome) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node). Updates `typedoc` from 0.28.17 to 0.28.19 - [Release notes](https://github.com/TypeStrong/TypeDoc/releases) - [Changelog](https://github.com/TypeStrong/typedoc/blob/master/CHANGELOG.md) - [Commits](TypeStrong/typedoc@v0.28.17...v0.28.19) Updates `typescript` from 5.9.3 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.3) Updates `@types/chrome` from 0.1.37 to 0.1.42 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chrome) Updates `@types/node` from 25.5.0 to 25.6.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/chrome" dependency-version: 0.1.39 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: typescript - dependency-name: "@types/node" dependency-version: 25.5.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: typescript - dependency-name: typedoc dependency-version: 0.28.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: typescript - dependency-name: typescript dependency-version: 6.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: typescript ... Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Jonathan Kingston <jonathanKingston@users.noreply.github.com>
Build Branch
Static preview entry points
QR codes (mobile preview)
Integration commandsnpm (Android / Extension): Swift Package Manager (Apple): .package(url: "https://github.com/duckduckgo/content-scope-scripts.git", branch: "pr-releases/jkt/auto/dependency-update-risk-analysis-c062")git submodule (Windows): git -C submodules/content-scope-scripts fetch origin pr-releases/jkt/auto/dependency-update-risk-analysis-c062
git -C submodules/content-scope-scripts checkout origin/pr-releases/jkt/auto/dependency-update-risk-analysis-c062Pin to exact commitnpm (Android / Extension): Swift Package Manager (Apple): .package(url: "https://github.com/duckduckgo/content-scope-scripts.git", revision: "690c74e3071fbf67fac1935e42070218576d0bfa")git submodule (Windows): git -C submodules/content-scope-scripts fetch origin pr-releases/jkt/auto/dependency-update-risk-analysis-c062
git -C submodules/content-scope-scripts checkout 690c74e3071fbf67fac1935e42070218576d0bfa |
[Beta] Generated file diffTime updated: Wed, 13 May 2026 12:54:01 GMT |
There was a problem hiding this comment.
Web Compatibility Assessment
No blocking findings.
injected/integration-test/pages.spec.jslines 80-84, severity: info. Thedelete globalThis.navigationtoReflect.deleteProperty(globalThis, 'navigation')change is confined to Playwrightpage.addInitScript()test setup for simulating missing Navigation API support. It does not ship in injected runtime code and does not alter API wrapping, descriptors,toString()masking, DOM timing, or platform bundle behavior.package.jsonlines 56-58,injected/package.jsonlines 51-53,package-lock.jsonlines 33-56 and 1598-2108, severity: info. Dependency changes are dev/checker/docs type-surface changes (typescript,typedoc,@types/*, TypeDoc transitive packages). No production dependency, injected feature, wrapper utility, platform entry point, or runtime browser API surface changed.tsconfig.jsonlines 9-13, severity: info. The TypeScript 6 checker settings arenoEmitbuild-time config only. They do not affect generated content-scope runtime behavior, remote config evaluation, or page-world API fidelity.
Security Assessment
No blocking findings.
- No changes touch
injected/src/captured-globals.js,wrapper-utils.js,DDGProxy, message bridge, messaging transports, origin checks,postMessage, iframe access, config gating, or stack-trace exemption logic. - The only new uncaptured global-looking use (
Reflect.deleteProperty) is inside test-page initialization, not hostile production page execution.
Risk Level
Low Risk: this is a devDependency/checker-config/test-only PR with no injected runtime or security-boundary changes.
Recommendations
- No code changes requested from a web compatibility or security perspective.
- Keep the remaining CI checks green before merge. I locally verified
npm ci, generated injected artifacts,npm run tsc,npm run tsc-strict-core, andnpm run docssuccessfully.
Sent by Cursor Automation: Web compat and sec
There was a problem hiding this comment.
Web Compatibility Assessment
No findings. The diff is limited to dev dependency/tooling updates, tsconfig.json, and a Playwright test-infra change in injected/integration-test/pages.spec.js; it does not touch injected runtime features, wrapper utilities, API shims, DOM manipulation, messaging, captured globals, or platform entry points.
Security Assessment
No findings. I did not see new message paths, origin handling changes, postMessage, network requests, global captures, prototype patches, or page-controlled data flows.
Risk Level
Low Risk: this is a TypeScript/tooling and test-only change with no direct injected runtime behavior change; the main risk is CI/build-tool compatibility from the TypeScript 6 upgrade.
Recommendations
No blocking recommendations. Keep the existing follow-up discussion for migrating off deprecated moduleResolution: "node" separate from this PR.
Verified locally:
npm cinpm run build --workspace=injectednpm run tscnpm run tsc-strict-corenpm run lintnpm run docs
Sent by Cursor Automation: Web compat and sec


Asana Task/Github Issue: PR #2602
Description
Restores the repository's intended TypeScript checker assumptions under TypeScript 6 by explicitly setting
strict: false, preserving pre-6.0 automatic@typesdiscovery, and suppressing themoduleResolution: nodedeprecation until the resolver can be migrated. Also updates a test setup delete to avoid the newer DOM lib's non-optionalnavigationproperty typing.Testing Steps
npm run tscnpm run tsc-strict-corenpm run docs-previewChecklist
Please tick all that apply:
Note
Medium Risk
Upgrades TypeScript/TypeDoc and adjusts
tsconfig.json, which can change type-checking behavior and surface new compile-time failures across the repo. Runtime impact is minimal, but CI/typecheck and docs generation may be affected.Overview
Restores the intended TypeScript checker behavior under TypeScript 6 by updating
tsconfig.json(explicitly settingstrict: false, suppressing TS6 deprecations viaignoreDeprecations, and re-enabling broad@typesdiscovery withtypes: ["*"]).Bumps tooling/dev dependencies (
typescript,typedoc, and various@types/*packages) and refreshespackage-lock.jsonaccordingly.Updates an integration test to delete
globalThis.navigationviaReflect.deletePropertyto satisfy newer DOM typings.Reviewed by Cursor Bugbot for commit 19e2c53. Bugbot is set up for automated code reviews on this repo. Configure here.