chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 in /infra

[dependabot]

Bumps typescript from 6.0.3 to 7.0.2.

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

[krishagel]

🤖 pr-fix routine: blocked, same root cause as #1216

Both failing checks here have the identical signature already diagnosed on PR #1216:

1. Validate CDK Infrastructure fails with:

   error: lockfile had changes, but lockfile is frozen
   note: try re-running without --frozen-lockfile and commit the updated lockfile
   

   Dependabot bumped infra/package.json (typescript 6.0.3 → 7.0.2) but did not regenerate infra/bun.lock, so bun install --frozen-lockfile rejects it in CI. The fix is mechanical — run bun install in infra/ and commit the updated lockfile — but this routine's execution environment has no network egress to registry.npmjs.org (re-confirmed this run: direct request returns 403 Host not in allowlist: registry.npmjs.org), so the lockfile can't be regenerated from here.

2. claude-review fails with:

   Action failed with error: Workflow initiated by non-human actor: dependabot (type: Bot).
   Add bot to allowed_bots list or use '*' to allow all bots.
   

   Fixing this requires editing the claude-review GitHub Actions workflow config under .github/workflows/**, which is a protected path this autonomous routine is not permitted to touch.

No human review comments or REQUESTED_CHANGES are present — the only PR comment is an unrelated Codex usage-limit notice.

A human will need to either:

1. Run bun install locally in infra/ on this branch and push the updated infra/bun.lock, or
2. Comment ·@·d·ependabot r·ecreate and see if a fresh PR includes the lockfile update, or
3. Add dependabot to the claude-review workflow's allowed_bots list, and/or update this routine's environment network allowlist to include registry.npmjs.org.

Note: PRs #1215, #1214, #1213, #1212, #1211, #1210 show the identical failure signature and are very likely blocked by the same root cause — worth checking in the same batch when this gets addressed.

The routine will not pick this PR up again until a human removes the pr-fix-stuck label.

---

Generated by Claude Code