RENOVATE: Update dependency typescript to v7

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
typescript (source)	^6.0.0 → ^7.0.0
typescript (source)	^6.0.3 → ^7.0.0

---

Release Notes

microsoft/TypeScript (typescript)

v7.0.2

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 227c279

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[obarcelonap]

Pushed two fixes for the CI failures caused by the TypeScript 7 bump:

1. tsdown bump (fixes the crash)

tsdown@0.22.3 pulled in rolldown-plugin-dts@0.26.0, which predates TypeScript 7 support and crashed with Cannot read properties of undefined (reading 'useCaseSensitiveFileNames') during dts emission. TypeScript 7 restructured its package exports so the default entry point no longer exposes the classic ts.sys API. Bumping tsdown to 0.22.12 (pulling in rolldown-plugin-dts@0.27.12) picks up the upstream fix (sxzz/rolldown-plugin-dts#276).

2. TS2883 "not portable" declaration errors

With the crash fixed, aio-commerce-lib-app's build surfaced new TS2883 errors from TypeScript 7's stricter dts emitter (tsgo), which flags exported functions whose inferred types reach type names that aren't importable/public:

• SampleEventHalModel, DestinationMetadata, and EventsOfInterest are now exported from aio-commerce-lib-events's io-events entrypoint (minor, additive — these were already part of the public data shape via IoEventRegistration and the metadata HAL model, just not individually nameable).
• A few test mock factories in aio-commerce-lib-app got explicit return/parameter type annotations where inference was leaking vitest-internal types or locally-scoped type aliases.

Still open: aio-commerce-lib-app's build still fails with tsgo did not generate dts file for .../packages-private/common-utils/source/actions/index.ts. This is a deeper architectural issue — common-utils is consumed as raw, unbuilt TypeScript source by 5 packages, and TypeScript 7's tsgo-based dts generation requires every file it emits a declaration for to belong to the consuming package's own tsconfig program. The upstream maintainer has confirmed they're not planning to support this cross-project case until tsgo itself ships an API for it (sxzz/rolldown-plugin-dts#189). Will follow up separately on how to handle this (likely making common-utils a properly built package with its own emitted .d.ts).