[dependabot]

Bumps the production-dependencies group with 1 update: effect.

Updates effect from 4.0.2 to 4.0.5

Release notes

Sourced from effect's releases.

effect@4.0.5

Patch Changes

• #9055 f665607 Thanks @​Tyagiquamar! - Pass a NonEmptyArray to the onNonEmpty callback of Array.match when the input is a mutable array.

• #9110 dbf442b Thanks @​petar-omni! - Fix AsyncResult.all failures carrying a single input's previousSuccess instead of the combined record or tuple.

• #9105 74d1930 Thanks @​tim-smart! - Fix infinite atom rebuilds caused by late reads of uninitialized dependencies.

• #9145 a03afb6 Thanks @​jayhemnani9910! - Add Flag.withOptionalValue for GNU-style flags with an optional value, like --color[=WHEN]. A bare flag uses the given value; an explicit value must be attached with =.

• #9131 f159284 Thanks @​tim-smart! - Fix lost deferred callback wakes in cluster workflows when an activity suspends while a parallel activity is still running.

• #9094 5d301cc Thanks @​okxint! - Name cluster entity RPC server spans by entity type only (e.g. WorkflowEntity.Run) so span names stay low-cardinality. The entity ID is still recorded in the entity.id span attribute.

• #9176 cd74ea2 Thanks @​effect-bot! - Recover persisted local cluster replies from storage to prevent requests hanging when replies arrive before handler registration. Retain local reply notifications as storage-reader wakeups for low-latency streaming.

  Defer terminal in-memory reply publication until the successful outer transaction completes, preserving the commit boundary for reply readers.

• #9095 925cf64 Thanks @​jayhemnani9910! - Fix ConfigProvider.fromDotEnv and fromDotEnvContents rescanning expanded values when expandVariables is enabled. Self and circular references no longer overflow the stack, escaped \$NAME stays literal, and defaults apply when a reference expands to an empty value.

• #9109 54c51d9 Thanks @​devangpratap! - Fix Duration conversions throwing for very large millisecond values, and make those durations equal to their nanosecond equivalents.

• #9161 995c104 Thanks @​devangpratap! - Fix Duration conversions losing nanosecond precision for large integer millisecond values.

• #9112 816575e Thanks @​effect-bot! - Use bigint for 64-bit FileSystem.File.Info metadata. dev is now a bigint, and ino, rdev, nlink, and blocks are Option<bigint>, so file stats no longer fail or drop values outside the safe integer range. Node and Bun read dev, ino, rdev, and nlink as unsigned 64-bit integers. Deno reports these fields as numbers, so values above Number.MAX_SAFE_INTEGER are rounded by Deno before conversion.

• #9150 0df6e06 Thanks @​tim-smart! - Support per-request URLs in GraphQLProtocol.layerHttp and makeHttp, as a function of the context and operation or as an Effect<string>. GraphQLResolver batches lookups by URL.

• #9137 52a7d3c Thanks @​tim-smart! - Add HttpClientRequest.compressBody for gzip and deflate request body compression.

• #9160 ec831c3 Thanks @​fubhy! - Accept Redacted values as URL parameters in UrlParams and HttpClientRequest.

• #9138 3abc63e Thanks @​tim-smart! - Add HttpMiddleware.decompression, which decompresses gzip and deflate request bodies, limits the decompressed size, and rejects other codings with 415.

• #9113 a841b8b Thanks @​effect-bot! - Fix interruption calling Math.random and hashing defects, which made deterministic hosts that forbid randomness loop forever or overflow the stack.

• #9098 91efea7 Thanks @​armancharan! - Narrow only the matched prefix when a Match tuple pattern is applied to an array or variadic tuple, so the remaining elements keep their original type.

• #9151 e271997 Thanks @​tim-smart! - Fix McpServer types to require schema services for resource templates and encoding services for prompt parameters with completion handlers. Missing services are now caught at compile time.

• #9117 7719bda Thanks @​jayhemnani9910! - Pad 64-bit trace ids to 128 bits in OTLP exports and traceparent headers.

• #9139 563397f Thanks @​tim-smart! - Add opt-in gzip compression to built-in OTLP JSON and protobuf exporters via the compression option or OTEL_EXPORTER_OTLP_COMPRESSION and per-signal environment variables. Compress batches once before retries using HttpClientRequest.compressBody, retaining its default 1KB threshold and uncompressed defaults.

• #9127 65b04f8 Thanks @​effect-bot! - Add Path.resolveWithin(root, input), which resolves a relative path beneath a root and returns Option.none() for traversal escapes and rooted inputs, using the platform's path rules.

• #9143 c2859bf Thanks @​danieljvdm! - Collect tool approvals once per LanguageModel request instead of twice.

• #9134 c462214 Thanks @​effect-bot! - Reduce SQLite statement overhead by borrowing the shared connection while preserving semaphore exclusion and failed-COMMIT recovery.

... (truncated)

Changelog

Sourced from effect's changelog.

4.0.5

Patch Changes

• #9055 f665607 Thanks @​Tyagiquamar! - Pass a NonEmptyArray to the onNonEmpty callback of Array.match when the input is a mutable array.

• #9110 dbf442b Thanks @​petar-omni! - Fix AsyncResult.all failures carrying a single input's previousSuccess instead of the combined record or tuple.

• #9105 74d1930 Thanks @​tim-smart! - Fix infinite atom rebuilds caused by late reads of uninitialized dependencies.

• #9145 a03afb6 Thanks @​jayhemnani9910! - Add Flag.withOptionalValue for GNU-style flags with an optional value, like --color[=WHEN]. A bare flag uses the given value; an explicit value must be attached with =.

• #9131 f159284 Thanks @​tim-smart! - Fix lost deferred callback wakes in cluster workflows when an activity suspends while a parallel activity is still running.

• #9094 5d301cc Thanks @​okxint! - Name cluster entity RPC server spans by entity type only (e.g. WorkflowEntity.Run) so span names stay low-cardinality. The entity ID is still recorded in the entity.id span attribute.

• #9176 cd74ea2 Thanks @​effect-bot! - Recover persisted local cluster replies from storage to prevent requests hanging when replies arrive before handler registration. Retain local reply notifications as storage-reader wakeups for low-latency streaming.

  Defer terminal in-memory reply publication until the successful outer transaction completes, preserving the commit boundary for reply readers.

• #9095 925cf64 Thanks @​jayhemnani9910! - Fix ConfigProvider.fromDotEnv and fromDotEnvContents rescanning expanded values when expandVariables is enabled. Self and circular references no longer overflow the stack, escaped \$NAME stays literal, and defaults apply when a reference expands to an empty value.

• #9109 54c51d9 Thanks @​devangpratap! - Fix Duration conversions throwing for very large millisecond values, and make those durations equal to their nanosecond equivalents.

• #9161 995c104 Thanks @​devangpratap! - Fix Duration conversions losing nanosecond precision for large integer millisecond values.

• #9112 816575e Thanks @​effect-bot! - Use bigint for 64-bit FileSystem.File.Info metadata. dev is now a bigint, and ino, rdev, nlink, and blocks are Option<bigint>, so file stats no longer fail or drop values outside the safe integer range. Node and Bun read dev, ino, rdev, and nlink as unsigned 64-bit integers. Deno reports these fields as numbers, so values above Number.MAX_SAFE_INTEGER are rounded by Deno before conversion.

• #9150 0df6e06 Thanks @​tim-smart! - Support per-request URLs in GraphQLProtocol.layerHttp and makeHttp, as a function of the context and operation or as an Effect<string>. GraphQLResolver batches lookups by URL.

• #9137 52a7d3c Thanks @​tim-smart! - Add HttpClientRequest.compressBody for gzip and deflate request body compression.

• #9160 ec831c3 Thanks @​fubhy! - Accept Redacted values as URL parameters in UrlParams and HttpClientRequest.

• #9138 3abc63e Thanks @​tim-smart! - Add HttpMiddleware.decompression, which decompresses gzip and deflate request bodies, limits the decompressed size, and rejects other codings with 415.

• #9113 a841b8b Thanks @​effect-bot! - Fix interruption calling Math.random and hashing defects, which made deterministic hosts that forbid randomness loop forever or overflow the stack.

• #9098 91efea7 Thanks @​armancharan! - Narrow only the matched prefix when a Match tuple pattern is applied to an array or variadic tuple, so the remaining elements keep their original type.

• #9151 e271997 Thanks @​tim-smart! - Fix McpServer types to require schema services for resource templates and encoding services for prompt parameters with completion handlers. Missing services are now caught at compile time.

• #9117 7719bda Thanks @​jayhemnani9910! - Pad 64-bit trace ids to 128 bits in OTLP exports and traceparent headers.

• #9139 563397f Thanks @​tim-smart! - Add opt-in gzip compression to built-in OTLP JSON and protobuf exporters via the compression option or OTEL_EXPORTER_OTLP_COMPRESSION and per-signal environment variables. Compress batches once before retries using HttpClientRequest.compressBody, retaining its default 1KB threshold and uncompressed defaults.

• #9127 65b04f8 Thanks @​effect-bot! - Add Path.resolveWithin(root, input), which resolves a relative path beneath a root and returns Option.none() for traversal escapes and rooted inputs, using the platform's path rules.

• #9143 c2859bf Thanks @​danieljvdm! - Collect tool approvals once per LanguageModel request instead of twice.

... (truncated)

Commits

• 7f524e2 Version Packages (#9099)
• 3ad9a0c Fix premature RPC socket ping timeouts (#9187)
• f665607 fix(Array): make Array.match expose NonEmptyArray for mutable arrays (#9055)
• 0df6e06 GraphQL: per-request url function for layerHttp with URL-aware resolver batch...
• 7422b9b test(cluster): allow residency cap checks headroom on Deno (#9185)
• bc454a3 Make String snake_case conversions total and skip empty noCase words (#9183)
• 3b87d1d Reduce clock polling in shard-release teardown test (#9184)
• ec831c3 Accept Redacted values as HTTP URL params (#9160)
• cd74ea2 Fix lost replies for persisted local cluster requests (#9176)
• 2a8ec8b perf(schema): keep successful decoding defaults resolved (#9166)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Polylane reviews this pull request when you ask:

---

Summary by cubic

Bumps effect from 4.0.2 to 4.0.5, a patch release that fixes bugs and adds new APIs.

• FileSystem.File.Info now uses bigint for 64-bit metadata fields like dev, ino, and nlink.
• Adds HTTP request compression, OTLP gzip export, Path.resolveWithin, and Flag.withOptionalValue.

^{Written for commit b0f3139. Summary will update on new commits.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: b0f3139

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: bbda91e2-4660-4e0b-97e4-eb0ce8bcf055

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[pkg-pr-new]

Open in StackBlitz

bun add https://pkg.pr.new/@mynameistito/codex-usage@b0f3139

commit: b0f3139

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	effect@​4.0.2 ⏵ 4.0.5	+24		+1	+1

View full report

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml