[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@effect/platform-node (source)	4.0.0 → 4.0.3
@types/node (source)	26.6.3 → 26.6.5
@uinaf/skillcheck	1.5.1 → 1.7.7
@vitest/coverage-v8 (source)	5.0.1 → 5.0.3
effect (source)	4.0.0 → 4.0.3
pnpm (source)	12.4.2 → 12.11.2
vite (source)	1.0.0 → 1.1.0
vite-plus (source)	1.0.0 → 1.1.0
vitest (source)	5.0.1 → 5.0.3

---

Release Notes

Effect-TS/effect (@​effect/platform-node)

v4.0.3

Compare Source

Patch Changes

• #​8973 9dbd07e Thanks @​fubhy! - Accept address inputs in Dns.reverse and name server inputs in the platform Dns services, and add Dns.nameServerFromInput.

• #​8880 a9b5148 Thanks @​fubhy! - Add experimental Host, Dns, and AddressResolver modules to effect/net for host parsing, DNS queries, and endpoint resolution, with Node, Bun, and Deno services. DNS operations accept and normalize domain-name strings; endpoint resolution also accepts host:port strings. Add scoped IPv6 literals and host and DNS record schemas, including JSON codecs for records.

  Provide the services explicitly; they are not included in the platform *Services layers. Use NodeAddressResolver.layer.pipe(Layer.provideMerge(NodeDns.layer)) to provide both Node services.

• #​8409 b9e7821 Thanks @​tim-smart! - Add DatagramSocket for UDP on Node, Bun, and Deno, and NetAddress.inetAddressFromNativeUnsafe for runtime-reported addresses.

• #​8934 8e5ab22 Thanks @​tim-smart! - Esc now ends terminal key input by default, cancelling CLI prompts with Terminal.QuitError. To keep Esc non-cancelling, pass a shouldQuit predicate to make, such as (input) => input.key.ctrl && (input.key.name === "c" || input.key.name === "d") to quit only on Ctrl+C or Ctrl+D.

• #​8978 0b17b9e Thanks @​tim-smart! - Allow WebSocket clients on Node and Bun to send handshake headers alongside subprotocols through socket constructors, channels, and layers. Preserve browser-compatible constructor calls when headers are not supplied.

• Updated dependencies [b4e5af8, b8d6e7a, 89d5c88, 66257d2, cd2ab19, ca068ce, f686000, e052f1b, c755b69, ebe487f, 63bfad8, 8598157, 76a03f7, 182e26d, a46592a, 1d3419e, e00eaae, 133ceb2, a494a64, d6082a2, ee3a350, 7ba976c, 9dbd07e, d4f7dc3, a9b5148, e7d84e4, 0e2b988, 84f48df, 48ed32f, 59e58a6, b9e7821, aa811e4, bfc5742, f9f7a5a, 73fa287, 7ff5048, 7803e51, 93410da, 8e5ab22, aef1d1f, d6d515b, ea52c24, 7e44402, 0b17b9e, 9753be9, 977096b, cf58cb0]:

  • effect@​4.0.3
  • @​effect/platform-node-shared@4.0.3

v4.0.2

Compare Source

Patch Changes

• #​8770 540ecd1 Thanks @​fubhy! - Tag every module and directly importable export with an explicit @stability. @stability stable follows strict semver, and @stability unstable may receive breaking changes in minor releases.

• #​8852 7d8d497 Thanks @​effect-bot! - Report the 101 status of a successful WebSocket upgrade to server middleware such as HttpMiddleware.logger and HttpMiddleware.tracer, instead of the handler's discarded response status.

• #​8846 48a373b Thanks @​tim-smart! - Fix keep-alive requests hanging during graceful HTTP server shutdown.

• Updated dependencies [26c1089, 6c59de7, 467d3ac, 375c1b0, 45a70ce, fb757e3, 716e358, af114e6, d0b3862, 7064da9, eee0eeb, b9d6581, 7a721ce, a0cb4c2, 3cb395e, 540ecd1, aefe05a, c381fbc, c6f2179, 0aeb7fd, 2fbecc8, 7095539, 46b75b1, 99b6b45, e4cb9f1, 2e03688, b817ebe, 4153144, 2b3c63c, bd00773, 146e86a, 44defad, 22d6f4d, 7d8d497, 98a5ed7, d350f8e, bd96be0, f6af4b6, 7234786, 1f74b62, 42763ce, 5630677, a0e1b87, f5716ad, 26931d0, 972c80f, efebfa9, a3b4cf3, 3ed997b, 7b396bd, c07c144, 8903b68, a84aa4e, 88917eb, 50a5686, c419a0e, d85a309, 7e7ede6, 1803500, 495740d, 985860d, e36abbb, c6086ee, 0ac6ac8, 90a1bae, b1d200c, 1ba8521, 1b35732, 763b445, 00f1cc7, d4f4bc8, f11526a, 8781388, 5326527, 8409eb4, c5cf8ce, 684ccdc, 33303ea, b79fcb8, 888a189, 9b8200d, 82303c1, 76fcd89, f31e6b7, 332d363, a6c7dcb, ec54070]:

  • effect@​4.0.2
  • @​effect/platform-node-shared@4.0.2

v4.0.1

Compare Source

Patch Changes

• #​8678 f79b231 Thanks @​tim-smart! - Fix duplex socket readers throwing when a pull is interrupted or its scope closes during a read. Preserve consumed bytes in order across pull interruption and normal EOF, while discarding them when the reader scope closes.

• #​8705 43416c4 Thanks @​tim-smart! - Create Node HTTP file response streams lazily and destroy them when body consumption ends, avoiding unused open streams when conditional or range handling discards a response.

• #​8738 0f64715 Thanks @​tim-smart! - Fail refused WebSocket upgrades with SocketError instead of hanging the request fiber, and skip HTTP response writes on destroyed sockets.

• Updated dependencies [ed2cc2f, 58a2ee8, bc44526, 073bb47, 2ec021e, cad1118, 1672d9c, a81e4e6, f5c2a91, f79b231, 498e72b, cabf123, a5b1d4e, 878cb33, 5e6f756, 18dfb98, 04706ef, f157482, f1aedb0, b5a2d4c, 1c18c68, 43416c4, d6ac8f9, 1d9fb8c, 20dcd50, 42e5750, 888e326, 0b52bb4, e823e69, 962647b, 43fdcdc, 1f89b8e, e1a521a]:

  • effect@​4.0.1
  • @​effect/platform-node-shared@4.0.1

uinaf/skillcheck (@​uinaf/skillcheck)

v1.7.7

Compare Source

Bug Fixes

• deps: omit unused local inference dependencies (#​83) (8aa3737)

v1.7.6

Compare Source

Bug Fixes

• reject malformed Grok streaming events (#​82) (d932a37)

v1.7.5

Compare Source

Bug Fixes

• reject symlinks inside installed eval skills (#​81) (59257cb)

v1.7.4

Compare Source

Bug Fixes

• lint: reject criteria files that run would refuse (05be6bd)

v1.7.3

Compare Source

Bug Fixes

• keep the SDK judge's system prompt identical across calls and skip session naming (#​71) (236a2ce)

v1.7.2

Compare Source

Bug Fixes

• container: fail the build when an SDK's platform binary is missing (#​66) (cc9a15f)
• error a trial whose judge call failed instead of scoring it 0 (#​67) (f50f96f)

v1.7.1

Compare Source

Bug Fixes

• count a Codex command that printed the installed SKILL.md even when it exits nonzero (#​64) (0e50d3f)
• deps: override basic-ftp to 6.2.1 for GHSA-c475-qrg2-pj4r (#​65) (a2e3e2a)

v1.7.0

Compare Source

Features

• trigger scenarios with installed alternatives and forbidden skill use (#​63) (b7c07da)

v1.6.2

Compare Source

Bug Fixes

• match shell skill reads by the installed SKILL.md content (#​61) (e34995c)

v1.6.1

Compare Source

Bug Fixes

• count a shell print of the installed SKILL.md as skill use (#​60) (c681003)

v1.6.0

Compare Source

Features

• run evals in an isolated container with an unprivileged agent user (#​58) (e62261f)

v1.5.3

Compare Source

Bug Fixes

• turn Codex plugins off in eval runs (#​57) (c428d17)

v1.5.2

Compare Source

Bug Fixes

• isolate Codex HOME, install linked sibling skills, skip tool caches (#​54) (4649ad7), closes hi#severity

vitest-dev/vitest (@​vitest/coverage-v8)

v5.0.3

Compare Source

   🐞 Bug Fixes

• Isolate result.status between repeats runs  -  by @​hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in #​11218 (5dbeb)
• Don't print an interceptor warning in browser mode  -  by @​sheremet-va in #​11377 (15cc0)
• Don't retry when test.fails expectedly failed  -  by @​hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in #​11219 (b2458)
• Scope cache key generators to projects  -  by @​ecoyoung in #​11281 and #​11301 (92ba7)
• browser:
  • Delay server listen until tests start running  -  by @​sheremet-va in #​11366 (7d8ed)
  • Check mock path boundaries  -  by @​saryn17, Ryosei Sato and @​sheremet-va in #​11361 and #​11362 (1c388)
  • Keep config of browser-consumed environments  -  by @​kasperpeulen and Claude in #​11378 (aafc0)
  • Ignore page crash while cancelling  -  by @​sheremet-va in #​11386 (7c367)
  • toMatchScreenshot uses wrong reference on retried tests  -  by @​macarie in #​11393 (c22ab)
• cache:
  • Revalidate imports of cached modules  -  by @​sheremet-va in #​11381 (38f98)
• deps:
  • Pin why-is-node-running to 3.2.1 to avoid users running into ERR_PNPM_TRUST_DOWNGRADE  -  by @​AriPerkkio in #​11403 (f6c9a)
• expect:
  • Pass current equality testers to expect.extend asymmetric matchers  -  by @​hi-ogawa, Hiroshi Ogawa and Claude in #​11401 (3e794)
• jsdom:
  • Support Blob on jsdom 30.1  -  by @​sheremet-va in #​11379 (6c49b)
• pool:
  • Preserve unique pool ids when groupOrder is set  -  by @​mtorp in #​11392 (50312)
• ui:
  • Split-pane handle overlapping iframe  -  by @​macarie in #​11221 (f91db)
• vitest:
  • Remove root temp dir on close  -  by @​abhinav-phi in #​11248 (7c711)
• vm:
  • Do not optimize deps from index.html  -  by @​ezefernandezyf, Hiroshi Ogawa and Codex (GPT-6) in #​11329 and #​11360 (caf28)
  • Don't reuse scripts across vite environments  -  by @​MO2k4, Martin Oehlert and Claude in #​11395 (346d3)

    View changes on GitHub

v5.0.2

Compare Source

   🐞 Bug Fixes

• Bind process in case global is overwritten  -  by @​AriPerkkio in #​11343 (0b792)
• detect-async-leaks:
  • Ignore process.stdio handles  -  by @​AriPerkkio in #​11333 (0fd6b)
• expect:
  • Fix toMatchObject with asymmetric matchers  -  by @​ShreeBohara, Claude Opus 5, @​hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in #​11100 (42523)
• jsdom:
  • Fix Request with Blob body on jsdom 28+  -  by @​harshit-d3v in #​11295 (d1c3e)
• reporter:
  • agent to respect --silent  -  by @​Raj4478 and @​AriPerkkio in #​11271 (5b95e)
• reporters:
  • Handle concurrent createReport calls  -  by @​7rulnik in #​11278 (e8e55)
  • hanging-process to use ESM entrypoint  -  by @​AriPerkkio in #​11316 (4e91e)
• spy:
  • Fix stack overflow when spying Set.prototype.add  -  by @​fengmk2 in #​11299 (a0a93)
• ui:
  • Persist authentication cookie beyond current browser session  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​11066 (f8819)

    View changes on GitHub

Effect-TS/effect (effect)

v4.0.3

Compare Source

Patch Changes

• #​8977 b4e5af8 Thanks @​kitlangton! - Prevent crashes and premature interruption when Effect.cached, Effect.cachedWithTTL, and Effect.cachedInvalidateWithTTL are synchronously re-entered.

• #​8982 b8d6e7a Thanks @​Yi-111-a! - Export CliOutput.displayWidth to measure terminal-cell widths using the same logic as built-in CLI help and tables.

• #​8933 89d5c88 Thanks @​tim-smart! - Respect NO_COLOR in CLI prompts and the command wizard, suppressing color and style escapes while preserving cursor and redraw controls.

• #​8941 66257d2 Thanks @​Tanner-Scadden! - Hand cluster shards off one at a time when Sharding shuts down, after their entities and singletons have stopped, so live runners can take them over sooner. The handoff is best effort: its wait is bounded, and if it times out, releaseAll attempts to release the remaining locks. A runner that is shutting down no longer acquires new shards, and releasing a shard no longer waits forever on an entity whose id is also active on another shard.

• #​8940 cd2ab19 Thanks @​Tanner-Scadden! - Fix cluster shard handoffs. Interrupts and stream acknowledgements now reach requests still draining on the previous owner, and RpcServer accepts acknowledgements for active streams after a client's EOF. Volatile requests sent during a handoff wait, for at most shardLockExpiration, until the shard can be served instead of repeatedly failing with EntityNotAssignedToRunner.

• #​8897 ca068ce Thanks @​effect-bot! - Add separate migration and storage layers to cluster SQL storage so applications can use tables migrated by an owner connection.

• #​8895 f686000 Thanks @​tim-smart! - Serialize SchemaError as a compact object containing its tag and formatted message in JSON logs and Node inspection, without dumping schema AST nodes.

• #​8968 e052f1b Thanks @​sledorze! - Avoid a redundant map copy when Context.add rebases an overlay chain.

• #​8487 c755b69 Thanks @​fubhy! - Add TestCrypto.layer, which provides deterministic random operations derived from a seed while preserving a platform crypto service's digest implementation.

• #​8935 ebe487f Thanks @​tim-smart! - Turn Crypto.randomUUIDv4 and Crypto.randomUUIDv7 into functions accepting an optional { format: "hex" | "bytes" } option. Call them with () for the default lowercase, hyphenated UUID string, or with { format: "bytes" } for a 16-byte Uint8Array.

• #​8926 63bfad8 Thanks @​effect-bot! - Fix DurableDeferred.raceAll and DurableDeferred.into so a workflow branch continues after its result is recorded instead of stalling until a concurrently parked sibling is woken. The effect passed to DurableDeferred.into now counts as in-flight work, so a parked sibling no longer suspends the run while it runs.

• #​8921 8598157 Thanks @​devangpratap! - Fix Duration.fromInputUnsafe throwing on infinite nanosecond totals. It now returns an infinite duration, and Duration.fromInput returns Some instead of None.

• #​8972 76a03f7 Thanks @​devangpratap! - Fix Duration.times throwing when a nanosecond-backed duration is multiplied by a fractional or non-finite number. Fractional results round to the nearest nanosecond.

• #​8900 182e26d Thanks @​effect-bot! - Add a noFollow option to FileSystem.open to reject symlinks at the final path component. Supported on Node and Bun on POSIX; Windows and Deno return BadArgument. Add { position } to File.read and File.readAlloc for concurrent reads that leave the cursor unchanged.

• #​8885 a46592a Thanks @​effect-bot! - Preserve duplicate slashes in query values when FindMyWay normalizes request paths.

• #​8986 1d3419e Thanks @​jayhemnani9910! - Fix histogram exporters to retain all finite boundaries and overflow observations in OTLP, and emit a single +Inf bucket in Prometheus.

• #​8932 e00eaae Thanks @​tim-smart! - Defer terminal input acquisition until a prompt needs user input, so constant fallback prompts leave piped stdin untouched.

• #​8888 133ceb2 Thanks @​RhysSullivan! - Return empty 200 text/event-stream responses for MCP HTTP request POSTs when cancellation withholds every reply. Return 500 for other request POSTs that end without a response.

• #​8924 a494a64 Thanks @​effect-bot! - Add McpServer.layerHttp({ allowSubscriptions: false }) to disable v2026_07_28 subscriptions while keeping request-scoped progress and log notifications.

• #​8890 d6082a2 Thanks @​tim-smart! - Send MCP cancellation notifications for interrupted server-to-client requests instead of internal RPC control messages.

• #​8925 ee3a350 Thanks @​effect-bot! - Prevent MCP subscriptions from receiving deferred list-change notifications emitted before they subscribed, while preserving coalesced runtime changes.

• #​8955 7ba976c Thanks @​effect-bot! - Allow interrupted activities to run again when the in-memory workflow engine replays a preempted execution.

• #​8973 9dbd07e Thanks @​fubhy! - Accept address inputs in Dns.reverse and name server inputs in the platform Dns services, and add Dns.nameServerFromInput.

• #​8953 d4f7dc3 Thanks @​fubhy! - Add TLSA records to effect/net/Dns, with a Schema.DnsTlsaRecord schema whose JSON codec encodes the certificate association data as hex. The Node.js Dns service queries them with resolveTlsa (Node.js 22.15 or 23.9 and later); Bun, Deno, and older Node.js versions fail TLSA queries with Unsupported.

• #​8880 a9b5148 Thanks @​fubhy! - Add experimental Host, Dns, and AddressResolver modules to effect/net for host parsing, DNS queries, and endpoint resolution, with Node, Bun, and Deno services. DNS operations accept and normalize domain-name strings; endpoint resolution also accepts host:port strings. Add scoped IPv6 literals and host and DNS record schemas, including JSON codecs for records.

  Provide the services explicitly; they are not included in the platform *Services layers. Use NodeAddressResolver.layer.pipe(Layer.provideMerge(NodeDns.layer)) to provide both Node services.

• #​8970 e7d84e4 Thanks @​fubhy! - Add fromInput constructors to the effect/net data types.

• #​8899 0e2b988 Thanks @​tim-smart! - Answer orphaned cluster workflow activity requests with Suspended instead of waiting indefinitely for replay registration.

• #​8987 84f48df Thanks @​jayhemnani9910! - Omit min and max from subsequent delta histogram exports in OtlpMetrics: cumulative extrema do not describe the reported interval.

• #​8907 48ed32f Thanks @​tim-smart! - Add a delay option to PersistedQueue.offer that postpones an element's first delivery in the memory, Redis and SQL stores.

• #​8904 59e58a6 Thanks @​effect-bot! - Add PowerShell CLI completions with --completions powershell (alias pwsh).

• #​8409 [b9e7821](https://redirect

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Europe/Istanbul)

• Branch creation
  • Between 12:00 AM and 05:59 AM (* 0-5 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.