chore(deps): bump tsx to 4.23.12

.github/dependabot.yml

@@ -62,6 +62,13 @@ updates:
       # ahead of the runtime — bump it deliberately when the Node version moves.
       - dependency-name: "@types/node"
         update-types: ["version-update:semver-major"]
+      # TypeScript 7 removes compiler APIs used by the build and OpenAPI tools;
+      # move compiler majors as an explicit repository-wide migration.
+      - dependency-name: "typescript"
+        update-types: ["version-update:semver-major"]
+      # Expo owns the compatible React Native and test-preset versions. Upgrade
+      # this pair with the Expo SDK instead of accepting standalone bumps.
+      - dependency-name: "react-native"
       - dependency-name: "@react-native/jest-preset"
         # Kept aligned with react-native; Expo upgrades both as one reviewed stack.
 

apps/api/package.json

@@ -56,7 +56,7 @@
     "opening_hours": "^3.14.0",
     "pino": "^10.3.1",
     "postgres": "^3.4.9",
-    "tsx": "4.23.5",
+    "tsx": "4.23.12",
     "undici": "^8.9.0",
     "zod": "^4.4.3"
   },

apps/mobile/package.json

@@ -55,7 +55,7 @@
     "jest": "^30.4.2",
     "jest-expo": "^57.0.4",
     "test-renderer": "^1.2.0",
-    "tsx": "4.23.11",
+    "tsx": "4.23.12",
     "typescript": "^6.0.3"
   },
   "expo": {

apps/ops-agent/package.json

@@ -13,7 +13,7 @@
   "dependencies": {
     "@openmapx/core": "workspace:^",
     "fastify": "^5.12.1",
-    "tsx": "4.23.5"
+    "tsx": "4.23.12"
   },
   "devDependencies": {
     "@types/node": "^26.3.0",

apps/transitous-runner/package.json

@@ -13,7 +13,7 @@
   "dependencies": {
     "@openmapx/core": "workspace:^",
     "fastify": "^5.12.1",
-    "tsx": "4.23.5"
+    "tsx": "4.23.12"
   },
   "devDependencies": {
     "@types/node": "^26.3.0",

packages/cli/package.json

@@ -25,7 +25,7 @@
     "commander": "^15.0.0",
     "execa": "^10.0.1",
     "kleur": "^4.1.5",
-    "tsx": "4.23.5"
+    "tsx": "4.23.12"
   },
   "devDependencies": {
     "@types/node": "^26.3.0",

packages/i18n/package.json

@@ -6,7 +6,7 @@
   "main": "./index.ts",
   "types": "./index.ts",
   "devDependencies": {
-    "tsx": "4.23.5"
+    "tsx": "4.23.12"
   },
   "dependencies": {
     "intl-messageformat": "^11.2.14"

scripts/dependabot-policy-contract.test.ts

@@ -0,0 +1,20 @@
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { describe, expect, it } from "vitest";
+
+const root = resolve(import.meta.dirname, "..");
+
+describe("Dependabot compatibility boundaries", () => {
+  it("does not update TypeScript majors or React Native independently of their stacks", () => {
+    const config = readFileSync(resolve(root, ".github/dependabot.yml"), "utf8");
+    const npmRoot = config.slice(
+      config.indexOf("  - package-ecosystem: npm"),
+      config.indexOf("  # The documentation site"),
+    );
+
+    expect(npmRoot).toMatch(
+      /- dependency-name: "typescript"\n\s+update-types: \["version-update:semver-major"\]/,
+    );
+    expect(npmRoot).toMatch(/- dependency-name: "react-native"(?:\n|$)/);
+  });
+});

services/data-manager/package.json

@@ -31,7 +31,7 @@
     "ioredis": "^6.0.0",
     "pino": "^10.3.1",
     "postgres": "^3.4.9",
-    "tsx": "4.23.5",
+    "tsx": "4.23.12",
     "undici": "^8.9.0"
   },
   "devDependencies": {