[mynameistito]

Summary

• Update non-TypeScript dependencies to their latest releases and refresh the Bun lockfile.
• Pin the newer setup-node and Changesets actions to their release SHAs; the other workflow actions were already current.
• Move the Bun version to 1.4.3 and fix the Ultracite regex warning.
• Include a patch changeset.

Checks

• bun run check
• bun run typecheck
• bun run test
• bun run build
• bun run knip
• bun outdated (no outdated dependencies)

---

Summary by cubic

Updates all non-TypeScript dependencies and GitHub Actions to their latest releases, bumps Bun to 1.4.3, and includes a patch changeset.

Implementation Notes

• Pins actions/setup-node and changesets/action to their release SHAs; other workflow actions were already current.
• Moves effect from 4.0.0-rc.117 to the stable 4.0.2.
• Replaces the regex-based trailing-slash strip in src/codex/client.ts with a loop, resolving the Ultracite regex warning.

^{Written for commit b1c20fa. Summary will update on new commits.}

[changeset-bot]

🦋 Changeset detected

Latest commit: b1c20fa

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@mynameistito/codex-usage	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 0b7efd3d-609b-4d7e-8b7e-fa86271129b4

---

📥 Commits

Reviewing files that changed from the base of the PR and between 9de4234 and b1c20fa.

---

⛔ Files ignored due to path filters (1)

• bun.lock is excluded by !**/*.lock

---

📒 Files selected for processing (7)

• .changeset/tidy-dependencies.md
• .github/workflows/ci.yml
• .github/workflows/publish-preview.yml
• .github/workflows/release.yml
• README.md
• package.json
• src/codex/client.ts

---

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

---

---

📝 Summary

Summary by CodeRabbit

• Bug Fixes

  • Improved base URL handling for ChatGPT and OpenAI endpoints by consistently removing trailing slashes while preserving the default path when none remains.

• Maintenance

  • Updated the package’s patch release metadata and refreshed build and release tooling.

Walkthrough

The pull request updates package and workflow versions, changes the README example import order, adds a patch changeset, and adjusts trailing-slash removal for ChatGPT URL paths.

Changes

Dependency and Workflow Updates

Layer / File(s)	Summary
Package versions and example package.json, README.md	The Effect and development dependency versions and Bun package manager version are updated. The README example imports Effect after the package exports.
Workflow pins and changeset .github/workflows/ci.yml, .github/workflows/publish-preview.yml, .github/workflows/release.yml, .changeset/tidy-dependencies.md	The workflows use updated Bun and GitHub Actions versions. A patch changeset records dependency and GitHub Actions updates.

ChatGPT URL Path Normalization

Layer / File(s)	Summary
Trailing-slash handling src/codex/client.ts	For ChatGPT hostnames, trailing slashes are removed from the parsed path with a loop. An empty result remains /.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

---

Merge Risk: ⚪ Minimal · up to b1c20

The reviewed changes have no established merge-blocking issue; proceed with the usual CI checks.

Pre-merge checks | 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check		The title clearly and concisely summarizes the main changes: updating GitHub Actions and dependencies.
Description check		The description directly matches the changeset. It covers dependency updates, workflow updates, the Bun version change, the regex fix, validation checks, and the patch changeset.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 1…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

---

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

---

---

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{A rabbit checks the version trail,
New Bun hops along the rail.
Slashes trim from paths with care,
Package imports settle there.
The rabbit nibbles, pleased and bright.}

_{Comment @coderabbitai help to get the list of available commands.}

[pkg-pr-new]

Open in StackBlitz

bun add https://pkg.pr.new/@mynameistito/codex-usage@b1c20fa

commit: b1c20fa

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	eslint-plugin-sonarjs@​4.2.1 ⏵ 4.2.2	+1		+1	+7
	effect@​4.0.0-rc.117 ⏵ 4.0.2	-24		+3	+1
	oxfmt@​0.68.0 ⏵ 0.72.0	+8		+1	+1
	tsdown@​0.23.0 ⏵ 0.23.1	+1		+1	+1
	oxlint@​1.83.0 ⏵ 1.87.0			+1	-1
	lefthook@​2.1.14 ⏵ 2.2.1				+2
	knip@​6.37.0 ⏵ 6.41.0			+1
	ultracite@​7.12.0 ⏵ 8.0.0			+1	+1

View full report

[mynameistito]

Note

🤖 AI agent responding on behalf of @mynameistito

I reviewed the Socket comparison report. It shows Effect 4.0.2 at supply-chain security 76 (down 24), while its vulnerability score is 100, and it lists no specific advisory or policy violation. The PR's Socket Security: Pull Request Alerts check completed successfully. The linked detailed report requires Socket sign-in, so I could not inspect its underlying score factors; based on the information available here, there is no concrete finding to change or block this PR on.

Commented on behalf of @mynameistito

[mynameistito]

Note

🤖 AI agent responding on behalf of @mynameistito

I reviewed the updated CodeRabbit report. It says the recent review generated no actionable comments, and its walkthrough matches the intended URL normalization change in src/codex/client.ts. No additional change is needed; the latest PR checks, including test, check, and typecheck, passed.

Commented on behalf of @mynameistito

[mynameistito]

Note

🤖 AI agent responding on behalf of @mynameistito

PR #70 was squash-merged as 7014279. The change updates non-TypeScript dependencies and action pins, advances Bun to 1.4.3, adds a patch changeset, and fixes the Ultracite regex warning. All 16 reported checks passed or were skipped; CI, build, tests, typecheck, CodeRabbit, and Socket's PR alert scan passed. CodeRabbit had no actionable findings. Socket reported Effect's supply-chain score decrease, but no specific advisory; its vulnerability score was 100 and its PR alert passed. The detailed Socket report requires sign-in.

Commented on behalf of @mynameistito