chore(dependabot): ignore typescript majors until twoslash supports TS 7

[craigthackerx]

Follow-up to closing #33. TypeScript 7 breaks the build, so Dependabot should stop proposing it weekly.

What I tested

Installed typescript@7.0.2 locally and ran the full pipeline. Two distinct failures.

Config — fixable. tsc --noEmit fails before touching any source:

tsconfig.json(18,5): error TS5102: Option 'baseUrl' has been removed.
  Use '"paths": {"*": ["./*"]}' instead.

Dropping baseUrl and keeping paths type-checks clean under 7.0.2, and it still works under 5.8.3 — paths has resolved relative to the tsconfig without baseUrl since TS 5.0. So that edit is forward-compatible and can land whenever we actually move. I have deliberately not included it here, since it is pointless churn while TS 7 is unusable for the reason below.

Build — not fixable here. With the config fixed, next build dies in the MDX loader:

TypeError: Cannot read properties of undefined (reading 'readFile')
  at createCacheableFSBackedSystem (@shikijs/twoslash/node_modules/twoslash/dist/core.mjs:445)
  from nextra/loader.cjs

twoslash drives TypeScript's JS compiler API, which the native TS 7 port does not expose. The chain is nextra → @shikijs/twoslash@3.23.0 → twoslash@0.3.9, and 0.3.9 is the latest published version, declaring:

"peerDependencies": { "typescript": "^5.5.0 || ^6.0.0" }

TS 7 is excluded on purpose, and there is no release that supports it. Nothing to work around at our level.

What this changes

One ignore entry for typescript majors, alongside the existing eslint one, each carrying the reason and the condition for removing it.

Remove this entry once twoslash widens its peer range — and apply the baseUrl removal at the same time.

On #32

@types/node 26.1.2 was tested in the same run and is clean — tsc --noEmit, next build (42 pages, 36 indexed) and eslint (0 findings) all pass. It is deliberately not ignored, and is safe to merge.

Caveat

GitHub Actions is still in major outage, so CI has not run on this. The dependabot.yml parses and both ecosystem entries resolve correctly, verified locally.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None