Updated Express + TypeScript starter with Node 24 & TypeScript 7

What's new since the previous version

• TypeScript 7 — TypeScript 7 offers faster type-checking and build-tool performance compared to previous versions.
• Dedicated development Docker image with native hot reload.
• OpenAPI 3.2 generation using zod-openapi, generating both JSON and YAML specifications.
• CodeQL security scanning integrated into GitHub Actions.
• Renovate automation for minor and patch dependency updates.

What was already there

The starter includes sensible defaults such as:

• Express 5.2.
• Helmet, CORS, and express-rate-limit.
• Winston + Morgan logging.
• oxlint + oxfmt.
• Husky pre-commit checks for tests, staged linting/formatting, npm audit, and typechecking.
• Conventional Commits enforced with commitlint.
• Parallel CI jobs for linting, CodeQL, typechecking, and tests.

Current stack

• Node.js 24.18.
• Express 5.2.
• TypeScript 7.0.
• Zod 4.
• OpenAPI 3.2.
• Vitest 4.

The goal

The goal is to provide a production-oriented Express + TypeScript starting point with modern tooling and sensible defaults, without adding unnecessary complexity.

Repo

Repo — consider giving the repo a ⭐ on GitHub for support.