Skip to content

chore(deps): bump the npm-dependencies group with 8 updates - #937

Merged
kid7st merged 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-4487cb34b3
Nov 8, 2026
Merged

chore(deps): bump the npm-dependencies group with 8 updates#937
kid7st merged 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-4487cb34b3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 8 updates:

Package From To
@effect/platform-bun 4.0.7 4.1.2
@effect/platform-node 4.0.7 4.1.2
@smithy/signature-v4 5.7.4 5.7.5
effect 4.0.7 4.1.2
@hono/node-server 2.1.5 2.1.6
fastify 5.12.7 5.12.8
knip 6.44.0 6.44.1
vitest 5.0.5 5.1.0

Updates @effect/platform-bun from 4.0.7 to 4.1.2

Release notes

Sourced from @​effect/platform-bun's releases.

@​effect/platform-bun@​4.1.2

Patch Changes

@​effect/platform-bun@​4.1.1

Patch Changes

@​effect/platform-bun@​4.1.0

Minor Changes

  • #8829 892fb79 Thanks @​effect-bot! - BunHttpServer now disables Bun's 10 second idleTimeout unless you set one, so quiet response streams and slow uploads are no longer cut. Directly exposed servers should set idleTimeout to keep idle connections closed.

  • #8829 8f23668 Thanks @​fubhy! - Replace effect/Crypto with family-specific effect/crypto/* services, opaque keys, CryptoError, a configurable WebCrypto reference and key schemas in effect/Schema. Encoding secret or private keys through byte/format schemas requires { allowEncode: true }.

    Breaking changes

    • Use SecureRandom for randomness and UUIDs, and Digest with algorithm values such as Digest.sha256 for hashing. Replace effect/testing/TestCrypto with Layer.mock for the required services.
    • Provide crypto explicitly; it is no longer included in the runtime *Services bundles. NodeCrypto, BunCrypto, DenoCrypto and BrowserCrypto offer individual family layers and a combined layer, supplying SecureRandom where needed. Core modules offer layerWebCrypto.
    • Provide Digest.Digest instead of Crypto.Crypto to SqlMessageStorage and SingleRunner, and instead of EventLogEncryption to SqlEventLogServerEncrypted.makeStorage and layerStorage. Replace EventLogEncryption.sha256String with digest.digestHex(Digest.sha256, bytes).

    Existing workflow ID, activity idempotency key and event log table-name encodings are unchanged.

    Event log encryption, identity key derivation and session authentication now run on Aead, Digest, Signature and SecureRandom. EventLogEncryption.make and EventLogEncryption.layer take those services from context, so Node apps can use the NodeCrypto layers. EventLogEncryption.layerSubtle and the session auth functions use the Web Crypto layers on the WebCrypto reference instead of globalThis.crypto. Existing identities, derived signing keys and encrypted batches are unchanged.

    UUIDv7 and ULID generation is now monotonic below the maximum 48-bit timestamp, including within a millisecond and across clock rollback. Ordering is per SecureRandom instance; the unsafe helpers and model UUIDv7 defaults share per-realm ordering.

  • #10087 472c469 Thanks @​effect-bot! - Node.js 22.19.0 (required by undici 8) is now the minimum for @effect/platform-node, @effect/platform-node-shared, @effect/opentelemetry and @effect/docgen, up from 18.

    NodeSocket WebSocket clients now use Node's global WebSocket instead of ws, so client-only usage no longer bundles ws.

    Breaking: ws moved to a new NodeWS module.

    • NodeSocket.NodeWS and BunSocket.NodeWS are removed. Import NodeWS from @effect/platform-node or @effect/platform-node-shared (on Bun, import ws directly). Use NodeWS.WebSocket in place of NodeSocket.NodeWS.default.
    • NodeSocket.layerWebSocketConstructorWS is removed. Use NodeWS.layerWebSocketConstructor.

    Behaviour changes for clients that pass handshake headers, which previously used ws. Use NodeWS.layerWebSocketConstructor to keep the old behaviour:

    • Reads cannot be paused. Incoming frames are buffered without limit, and a configured highWaterMark fails the socket with a SocketReadError.
    • Connection errors are a generic ErrorEvent, so SocketOpenError causes lack the underlying error code.
    • The Socket.WebSocket service is a global WebSocket, so ws instanceof checks and ws-only methods such as terminate() and ping() no longer apply.
    • A custom Host header is ignored.

... (truncated)

Changelog

Sourced from @​effect/platform-bun's changelog.

4.1.2

Patch Changes

4.1.1

Patch Changes

4.1.0

Minor Changes

  • #8829 892fb79 Thanks @​effect-bot! - BunHttpServer now disables Bun's 10 second idleTimeout unless you set one, so quiet response streams and slow uploads are no longer cut. Directly exposed servers should set idleTimeout to keep idle connections closed.

  • #8829 8f23668 Thanks @​fubhy! - Replace effect/Crypto with family-specific effect/crypto/* services, opaque keys, CryptoError, a configurable WebCrypto reference and key schemas in effect/Schema. Encoding secret or private keys through byte/format schemas requires { allowEncode: true }.

    Breaking changes

    • Use SecureRandom for randomness and UUIDs, and Digest with algorithm values such as Digest.sha256 for hashing. Replace effect/testing/TestCrypto with Layer.mock for the required services.
    • Provide crypto explicitly; it is no longer included in the runtime *Services bundles. NodeCrypto, BunCrypto, DenoCrypto and BrowserCrypto offer individual family layers and a combined layer, supplying SecureRandom where needed. Core modules offer layerWebCrypto.
    • Provide Digest.Digest instead of Crypto.Crypto to SqlMessageStorage and SingleRunner, and instead of EventLogEncryption to SqlEventLogServerEncrypted.makeStorage and layerStorage. Replace EventLogEncryption.sha256String with digest.digestHex(Digest.sha256, bytes).

    Existing workflow ID, activity idempotency key and event log table-name encodings are unchanged.

    Event log encryption, identity key derivation and session authentication now run on Aead, Digest, Signature and SecureRandom. EventLogEncryption.make and EventLogEncryption.layer take those services from context, so Node apps can use the NodeCrypto layers. EventLogEncryption.layerSubtle and the session auth functions use the Web Crypto layers on the WebCrypto reference instead of globalThis.crypto. Existing identities, derived signing keys and encrypted batches are unchanged.

    UUIDv7 and ULID generation is now monotonic below the maximum 48-bit timestamp, including within a millisecond and across clock rollback. Ordering is per SecureRandom instance; the unsafe helpers and model UUIDv7 defaults share per-realm ordering.

  • #10087 472c469 Thanks @​effect-bot! - Node.js 22.19.0 (required by undici 8) is now the minimum for @effect/platform-node, @effect/platform-node-shared, @effect/opentelemetry and @effect/docgen, up from 18.

    NodeSocket WebSocket clients now use Node's global WebSocket instead of ws, so client-only usage no longer bundles ws.

    Breaking: ws moved to a new NodeWS module.

    • NodeSocket.NodeWS and BunSocket.NodeWS are removed. Import NodeWS from @effect/platform-node or @effect/platform-node-shared (on Bun, import ws directly). Use NodeWS.WebSocket in place of NodeSocket.NodeWS.default.
    • NodeSocket.layerWebSocketConstructorWS is removed. Use NodeWS.layerWebSocketConstructor.

    Behaviour changes for clients that pass handshake headers, which previously used ws. Use NodeWS.layerWebSocketConstructor to keep the old behaviour:

    • Reads cannot be paused. Incoming frames are buffered without limit, and a configured highWaterMark fails the socket with a SocketReadError.

... (truncated)

Commits

Updates @effect/platform-node from 4.0.7 to 4.1.2

Release notes

Sourced from @​effect/platform-node's releases.

@​effect/platform-node@​4.1.2

Patch Changes

@​effect/platform-node-shared@​4.1.2

Patch Changes

@​effect/platform-node@​4.1.1

Patch Changes

@​effect/platform-node-shared@​4.1.1

Patch Changes

@​effect/platform-node@​4.1.0

Minor Changes

  • #8829 8f23668 Thanks @​fubhy! - Replace effect/Crypto with family-specific effect/crypto/* services, opaque keys, CryptoError, a configurable WebCrypto reference and key schemas in effect/Schema. Encoding secret or private keys through byte/format schemas requires { allowEncode: true }.

    Breaking changes

    • Use SecureRandom for randomness and UUIDs, and Digest with algorithm values such as Digest.sha256 for hashing. Replace effect/testing/TestCrypto with Layer.mock for the required services.
    • Provide crypto explicitly; it is no longer included in the runtime *Services bundles. NodeCrypto, BunCrypto, DenoCrypto and BrowserCrypto offer individual family layers and a combined layer, supplying SecureRandom where needed. Core modules offer layerWebCrypto.
    • Provide Digest.Digest instead of Crypto.Crypto to SqlMessageStorage and SingleRunner, and instead of EventLogEncryption to SqlEventLogServerEncrypted.makeStorage and layerStorage. Replace EventLogEncryption.sha256String with digest.digestHex(Digest.sha256, bytes).

    Existing workflow ID, activity idempotency key and event log table-name encodings are unchanged.

    Event log encryption, identity key derivation and session authentication now run on Aead, Digest, Signature and SecureRandom. EventLogEncryption.make and EventLogEncryption.layer take those services from context, so Node apps can use the NodeCrypto layers. EventLogEncryption.layerSubtle and the session auth functions use the Web Crypto layers on the WebCrypto reference instead of globalThis.crypto. Existing identities, derived signing keys and encrypted batches are unchanged.

... (truncated)

Changelog

Sourced from @​effect/platform-node's changelog.

4.1.2

Patch Changes

@dependabot
chore(deps): bump the npm-dependencies group with 8 updates
631c987 
Bumps the npm-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@effect/platform-bun](https://github.com/Effect-TS/effect/tree/HEAD/packages/platform/bun) | `4.0.7` | `4.1.2` |
| [@effect/platform-node](https://github.com/Effect-TS/effect/tree/HEAD/packages/platform/node) | `4.0.7` | `4.1.2` |
| [@smithy/signature-v4](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/signature-v4) | `5.7.4` | `5.7.5` |
| [effect](https://github.com/Effect-TS/effect/tree/HEAD/packages/effect) | `4.0.7` | `4.1.2` |
| [@hono/node-server](https://github.com/honojs/node-server) | `2.1.5` | `2.1.6` |
| [fastify](https://github.com/fastify/fastify) | `5.12.7` | `5.12.8` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.44.0` | `6.44.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.5` | `5.1.0` |


Updates `@effect/platform-bun` from 4.0.7 to 4.1.2
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/platform/bun/CHANGELOG.md)
- [Commits](https://github.com/Effect-TS/effect/commits/@effect/platform-bun@4.1.2/packages/platform/bun)

Updates `@effect/platform-node` from 4.0.7 to 4.1.2
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/platform/node/CHANGELOG.md)
- [Commits](https://github.com/Effect-TS/effect/commits/@effect/platform-node@4.1.2/packages/platform/node)

Updates `@smithy/signature-v4` from 5.7.4 to 5.7.5
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases)
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/signature-v4/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/signature-v4@5.7.5/packages/signature-v4)

Updates `effect` from 4.0.7 to 4.1.2
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/effect/CHANGELOG.md)
- [Commits](https://github.com/Effect-TS/effect/commits/effect@4.1.2/packages/effect)

Updates `@hono/node-server` from 2.1.5 to 2.1.6
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.1.5...v2.1.6)

Updates `fastify` from 5.12.7 to 5.12.8
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.12.7...v5.12.8)

Updates `knip` from 6.44.0 to 6.44.1
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.44.1/packages/knip)

Updates `vitest` from 5.0.5 to 5.1.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/vitest)

---
updated-dependencies:
- dependency-name: "@effect/platform-bun"
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@effect/platform-node"
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@smithy/signature-v4"
  dependency-version: 5.7.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: effect
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@hono/node-server"
  dependency-version: 2.1.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: fastify
  dependency-version: 5.12.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: knip
  dependency-version: 6.44.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: vitest
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested review from Sukitly and kid7st as code owners November 5, 2026 18:06
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 5, 2026
@kid7st

kid7st commented Nov 8, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@kid7st
kid7st enabled auto-merge (squash) November 8, 2026 19:39
@kid7st
kid7st merged commit 6fbe4dd into main Nov 8, 2026
11 checks passed
@kid7st
kid7st deleted the dependabot/npm_and_yarn/npm-dependencies-4487cb34b3 branch November 8, 2026 19:40
@kid7st kid7st mentioned this pull request Nov 9, 2026
Merged
kid7st added a commit that referenced this pull request Nov 9, 2026
@kid7st
chore: release 0.30.2 (#985)
02dbe9f 
## Release v0.30.2

Bump `@fastagent-sh/fastagent` from 0.30.1 to 0.30.2.

## Fixed

- **A ticket's step that had exited could be taken for running** (#983).
Whether a step (`login`, `channels setup`, `deploy`'s sign-in) still ran
was asked with signal 0, which a zombie answers too: in a container
whose PID 1 does not reap orphans, a step that had exited stayed a
zombie, so `--check` never saw it gone and a stop waited its full 5 s.
Where `/proc` belongs to the process's own PID namespace (Linux), a
process that has exited is now taken for stopped; where it does not (a
sandbox that leaves a process the host's `/proc`), signal 0 alone
decides, as before.

## Dependencies

- `effect`, `@effect/platform-node` and `@effect/platform-bun` 4.0.7 →
4.1.2 (#937). The breaking changes of Effect 4.1 (`effect/Crypto`, Bun's
default idle timeout, `MaxBodySize` on buffered body reads) do not touch
the APIs FastAgent uses, as it sets the Bun idle timeout and the Agent
API's body limit itself. `effect` was already `^4.0.7`, so an install of
0.30.1 already resolved 4.1.x; this release is built and tested with it.
- Patch releases of `@smithy/signature-v4`, `@hono/node-server`,
`fastify`, `knip`, and `vitest` 5.1.0.

## Verification

- `npm run lint`, `npm run typecheck`, `npm test` (195 files, 2383
passed, 3 skipped), `npm pack --dry-run --json`.
- With the new dependencies: the build, the public imports and the CLI,
and every Bun check (`test/bun/*.ts`) on Bun 1.4.0 and 1.4.4.

## After merge

Create and publish the GitHub Release `v0.30.2` from the merged commit,
with the sections above as its notes. The protected publish workflow
verifies and publishes the package to npm via Trusted Publishing. This
PR itself does not tag or publish.
@kid7st kid7st mentioned this pull request Nov 9, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@kid7st kid7st Awaiting requested review from kid7st kid7st is a code owner
@Sukitly Sukitly Awaiting requested review from Sukitly Sukitly is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@kid7st