chore(deps): update dependency @types/semver to v7.8.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/semver (source)	7.7.1 → 7.8.0

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • Between 09:00 AM and 06:59 PM, Monday through Friday (* 9-18 * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 0a110e2

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[pkg-pr-new]

Open in StackBlitz

@tailor-platform/create-sdk

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/create-sdk@0a110e2

@tailor-platform/eslint-plugin-sdk

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/eslint-plugin-sdk@0a110e2

@tailor-platform/sdk

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/sdk@0a110e2

@tailor-platform/sdk-plugin-seed

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/sdk-plugin-seed@0a110e2

@tailor-platform/sdk-plugin-tailordb-erd

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/sdk-plugin-tailordb-erd@0a110e2

commit: 0a110e2

[github-actions]

Code Metrics Report (packages/sdk)

	main (d14ab65)	#1983 (caa5e16)	+/-
Coverage	78.5%	78.5%	0.0%
Code to Test Ratio	1:0.4	1:0.4	0.0

Details

  |                    | main (d14ab65) | #1983 (caa5e16) | +/-  |
  |--------------------|----------------|-----------------|------|
  | Coverage           |          78.5% |           78.5% | 0.0% |
  |   Files            |            462 |             462 |    0 |
  |   Lines            |          17731 |           17731 |    0 |
  |   Covered          |          13920 |           13920 |    0 |
  | Code to Test Ratio |          1:0.4 |           1:0.4 |  0.0 |
  |   Code             |         126620 |          126620 |    0 |
  |   Test             |          61927 |           61927 |    0 |

SDK Configure Bundle Size

	main (d14ab65)	#1983 (caa5e16)	+/-
configure-index-size	39.25KB	39.25KB	0KB
dependency-chunks-size	24.96KB	24.96KB	0KB
total-bundle-size	64.22KB	64.22KB	0KB

Runtime Performance

	main (d14ab65)	#1983 (caa5e16)	+/-
Generate Median	2,338ms	2,300ms	-38ms
Generate Max	2,372ms	2,313ms	-59ms
Apply Build Median	2,380ms	2,360ms	-20ms
Apply Build Max	2,393ms	2,397ms	4ms

Type Performance (instantiations)

	main (d14ab65)	#1983 (caa5e16)	+/-
tailordb-basic	40,450	40,450	0
tailordb-optional	4,535	4,535	0
tailordb-relation	3,854	3,854	0
tailordb-validate	666	666	0
tailordb-hooks	5,499	5,499	0
tailordb-object	16,345	16,345	0
tailordb-enum	1,538	1,538	0
resolver-basic	12,120	12,120	0
resolver-nested	35,419	35,419	0
resolver-array	24,056	24,056	0
executor-schedule	4,489	4,489	0
executor-webhook	1,130	1,130	0
executor-record	4,542	4,542	0
executor-resolver	5,808	5,808	0
executor-operation-function	1,118	1,118	0
executor-operation-gql	1,126	1,126	0
executor-operation-webhook	1,137	1,137	0
executor-operation-workflow	1,931	1,931	0

---

Reported by octocov

[github-actions]

🤖 Claude Dependency Review

📦 Update Summary

• Library: @​types/semver
• Version: 7.7.1 → 7.8.0
• Change Type: Minor

📝 Release Notes

https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/semver

🔐 Security Assessment

• Risk: 🟢 Low
• Known vulnerabilities: None found
• Supply-chain notes:
  • @​types/semver is a TypeScript type definition package published by DefinitelyTyped, containing no runtime code
  • The underlying runtime semver package (currently at 7.8.5 in dependencies) had a ReDoS vulnerability (CVE-2022-25883, GHSA-c2qf-rxjj-qqgw) affecting versions before 7.5.2, but the project uses 7.8.5 which is well beyond the patched version
  • No supply-chain red flags detected for this type definition update
  • No new dependencies, lifecycle scripts, or maintainer changes

✨ Main Changes

Added Type Definitions

• truncate function: New type definition added to match the truncate function available in the runtime semver library. This function truncates a version string to a specified release type.

Enhanced Type Coverage

• Improved JSDoc: Enhanced documentation for existing functions including inc() and parse()
• Additional options: Type support for identifierBase parameter in inc() and throwErrors option for parse()
• Extended ReleaseType: The ReleaseType union type was extended to include the 'release' option

This is a type-only update that aligns the TypeScript definitions with features already present in the runtime semver library (v7.8.x).

🔍 Impact Analysis

📁 Usage Locations

semver is used in the following 4 files:

1. packages/sdk/src/cli/shared/context.ts

   import { lt as semverLt } from "semver";

   • Feature used: lt (less than comparison)
   • Impact: No impact. The type signature for lt is unchanged.

2. packages/sdk-codemod/src/registry.ts

   import { gte, lt, parse, valid } from "semver";

   • Feature used: gte, lt, parse, valid (version comparison and parsing)
   • Impact: No impact. Enhanced JSDoc and optional parameters for parse() are additive and do not affect existing usage.

3. packages/sdk-codemod/src/resolve-pending-boundaries.ts

   import { parse } from "semver";

   • Feature used: parse (version parsing)
   • Impact: No impact. The enhanced parse() signature with optional throwErrors parameter is backward compatible with existing usage.

4. packages/sdk-codemod/src/deprecation-tags.ts

   import { gte, lte, valid } from "semver";

   • Feature used: gte, lte, valid (version comparison and validation)
   • Impact: No impact. The type signatures for these functions are unchanged.

Runtime Dependency: The project's semver runtime dependency is at version 7.8.5 (in packages/sdk/package.json), which already includes all the features that this type definition update covers. This update simply improves TypeScript type coverage for features that are already available at runtime.

✅ Recommended Actions

None. This is a routine type definition update with no breaking changes. All existing usages of semver functions remain compatible, and the update simply provides better TypeScript support for the runtime library version already in use.

---