chore(deps-dev): bump tsx from 4.21.0 to 4.22.3

[dependabot]

Bumps tsx from 4.21.0 to 4.22.3.

Release notes

Sourced from tsx's releases.

v4.22.3

4.22.3 (2026-05-19)

Bug Fixes

• decode typed loader source (dce02fc)
• preserve entrypoint with TypeScript preload hooks (68f72f3)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.2

4.22.2 (2026-05-18)

Bug Fixes

• preserve CJS JSON require in ESM hooks (35b700b)
• preserve named exports from CommonJS TypeScript (11de737)
• support module.exports require(esm) interop (cf8f199)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.1

4.22.1 (2026-05-17)

Bug Fixes

• resolve tsconfig path aliases containing a colon (#780) (6979f28)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.0

4.22.0 (2026-05-14)

Features

• upgrade esbuild to 0.28 (#789) (b29f6ee)

---

This release is also available on:

• npm package (@​latest dist-tag)

... (truncated)

Commits

• dce02fc fix: decode typed loader source
• 68f72f3 fix: preserve entrypoint with TypeScript preload hooks
• 69455cf test: cover package exports for ambiguous ESM reexports
• 35b700b fix: preserve CJS JSON require in ESM hooks
• ef807db chore: update testing dependencies
• 3917090 test: document compatibility test taxonomy
• de8113f refactor: centralize Node capability facts
• c1f62db test: consolidate tsconfig path edge coverage
• 4e08174 test: consolidate loader hook coverage
• 674bb30 test: consolidate tsImport commonjs mts coverage
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tsx since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Findings

No issues found.

Questions

None.

Summary

• Review mode: initial
• This is a Dependabot devDependencies bump of tsx from 4.21.0 to 4.22.3. tsx is only used by the repo's scripts.smoke command (package.json → "smoke": "tsx scripts/smoke-models.ts"); it is not part of the shipped Electron app, installer, or runtime, so the shipped-dependency constraints (≤30 prod deps, MIT-compatible shipped deps, lazy-load, BYOK, no direct provider SDK imports) are unaffected.
• Lockfile is internally consistent with the manifest: root importer now records specifier: ^4.22.3 / version: 4.22.3 (pnpm-lock.yaml), matching package.json, and the tsx@4.22.3 snapshot replaces tsx@4.21.0. All changed peer-style strings (vite, vitest, @vitejs/plugin-react, electron-vite, vitepress, @tailwindcss/vite) are mechanical re-resolutions of the tsx peer key and are expected from a lockfile regen.
• Version claim matches the diff: the new snapshot is tsx@4.22.3 with esbuild@0.28.0. Removing get-tsconfig@4.14.0 / resolve-pkg-maps@1.0.0 is consistent with tsx 4.22 no longer depending on them.
• No changeset is required: not a user-visible change to a published package.

Residual observations (non-blocking)

• The regen pulls a new esbuild@0.28.0 into the dev tree and shifts vite@8.0.10's optional-peer resolution from esbuild@0.27.7 to esbuild@0.28.0 (pnpm-lock.yaml, vite@8.0.10(...) snapshots). This affects the website build path only (dev tooling), not the app bundle. Worth confirming CI stays green.
• tsx@4.22.3 drops the get-tsconfig dependency, so the pnpm smoke script's tsconfig path-alias resolution path changed. Confirm pnpm smoke still resolves workspace/tsconfig aliases.

Testing

• Not run (automation). Suggested checks: pnpm install --frozen-lockfile, then pnpm smoke and pnpm build to exercise the changed tsx/esbuild resolution.

Open-CoDesign Bot