chore(deps): bump the all-dependencies group with 231 updates

[dependabot]

Bumps the all-dependencies group with 231 updates:

Package	From	To
@modelcontextprotocol/sdk	1.27.1	1.29.0
@toon-format/toon	2.1.0	2.3.0
@valibot/to-json-schema	1.6.0	1.7.1
commander	14.0.3	15.0.0
effect	3.20.0	3.21.3
es-toolkit	1.45.1	1.47.0
fastmcp	3.34.0	4.1.0
globby	16.1.1	16.2.0
js-yaml	4.1.1	4.2.0
zod	4.3.6	4.4.3
@anthropic-ai/claude-agent-sdk	0.2.79	0.3.173
@openrouter/sdk	0.9.11	0.12.79
@secretlint/secretlint-rule-preset-recommend	11.3.1	13.0.2
@types/node	25.5.0	25.9.3
@typescript/native-preview	7.0.0-dev.20260318.1	7.0.0-dev.20260610.1
@vitest/coverage-v8	4.1.0	4.1.8
cspell	9.7.0	10.0.1
knip	5.88.0	6.16.1
lint-staged	16.4.0	17.0.7
oxfmt	0.41.0	0.54.0
oxlint	1.56.0	1.69.0
repomix	1.12.0	1.14.1
resend	6.9.4	6.12.4
secretlint	11.3.1	13.0.2
sort-package-json	3.6.1	4.0.0
tsx	4.21.0	4.22.4
typescript	5.9.3	6.0.3
vite	7.3.1	8.0.16
vitest	4.1.0	4.1.8
@babel/code-frame	7.29.0	7.29.7
@babel/helper-string-parser	7.27.1	7.29.7
@babel/helper-validator-identifier	7.28.5	7.29.7
@babel/parser	7.29.2	7.29.7
@babel/types	7.29.0	7.29.7
@cspell/cspell-bundled-dicts	9.7.0	10.0.1
@cspell/cspell-json-reporter	9.7.0	10.0.1
@cspell/cspell-performance-monitor	9.7.0	10.0.1
@cspell/cspell-pipe	9.7.0	10.0.1
@cspell/cspell-resolver	9.7.0	10.0.1
@cspell/cspell-service-bus	9.7.0	10.0.1
@cspell/cspell-types	9.7.0	10.0.1
@cspell/cspell-worker	9.7.0	10.0.1
@cspell/dict-bash	4.2.2	4.2.3
@cspell/dict-css	4.1.1	4.1.2
@cspell/dict-data-science	2.0.13	2.0.14
@cspell/dict-dotnet	5.0.12	5.0.13
@cspell/dict-en-gb-mit	3.1.20	3.1.24
@cspell/dict-en_us	4.4.31	4.4.35
@cspell/dict-filetypes	3.0.17	3.0.18
@cspell/dict-fullstack	3.2.8	3.2.9
@cspell/dict-markdown	2.0.16	2.0.17
@cspell/dict-npm	5.2.37	5.2.41
@cspell/dict-python	4.2.25	4.2.27
@cspell/dict-shell	1.1.2	1.2.0
@cspell/dict-software-terms	5.2.0	5.2.2
@cspell/dynamic-import	9.7.0	10.0.1
@cspell/filetypes	9.7.0	10.0.1
@cspell/rpc	9.7.0	10.0.1
@cspell/strong-weak-map	9.7.0	10.0.1
@cspell/url	9.7.0	10.0.1
@emnapi/core	1.9.1	1.10.0
@emnapi/runtime	1.9.1	1.10.0
@emnapi/wasi-threads	1.2.0	1.2.1
@hono/node-server	1.19.11	1.19.14
@napi-rs/wasm-runtime	1.1.1	1.1.5
@oxc-resolver/binding-android-arm-eabi	11.19.1	11.20.0
@oxc-resolver/binding-android-arm64	11.19.1	11.20.0
@oxc-resolver/binding-darwin-arm64	11.19.1	11.20.0
@oxc-resolver/binding-darwin-x64	11.19.1	11.20.0
@oxc-resolver/binding-freebsd-x64	11.19.1	11.20.0
@oxc-resolver/binding-linux-arm-gnueabihf	11.19.1	11.20.0
@oxc-resolver/binding-linux-arm-musleabihf	11.19.1	11.20.0
@oxc-resolver/binding-linux-arm64-gnu	11.19.1	11.20.0
@oxc-resolver/binding-linux-arm64-musl	11.19.1	11.20.0
@oxc-resolver/binding-linux-ppc64-gnu	11.19.1	11.20.0
@oxc-resolver/binding-linux-riscv64-gnu	11.19.1	11.20.0
@oxc-resolver/binding-linux-riscv64-musl	11.19.1	11.20.0
@oxc-resolver/binding-linux-s390x-gnu	11.19.1	11.20.0
@oxc-resolver/binding-linux-x64-gnu	11.19.1	11.20.0
@oxc-resolver/binding-linux-x64-musl	11.19.1	11.20.0
@oxc-resolver/binding-openharmony-arm64	11.19.1	11.20.0
@oxc-resolver/binding-wasm32-wasi	11.19.1	11.20.0
@oxc-resolver/binding-win32-arm64-msvc	11.19.1	11.20.0
@oxc-resolver/binding-win32-x64-msvc	11.19.1	11.20.0
@oxfmt/binding-android-arm-eabi	0.41.0	0.54.0
@oxfmt/binding-android-arm64	0.41.0	0.54.0
@oxfmt/binding-darwin-arm64	0.41.0	0.54.0
@oxfmt/binding-darwin-x64	0.41.0	0.54.0
@oxfmt/binding-freebsd-x64	0.41.0	0.54.0
@oxfmt/binding-linux-arm-gnueabihf	0.41.0	0.54.0
@oxfmt/binding-linux-arm-musleabihf	0.41.0	0.54.0
@oxfmt/binding-linux-arm64-gnu	0.41.0	0.54.0
@oxfmt/binding-linux-arm64-musl	0.41.0	0.54.0
@oxfmt/binding-linux-ppc64-gnu	0.41.0	0.54.0
@oxfmt/binding-linux-riscv64-gnu	0.41.0	0.54.0
@oxfmt/binding-linux-riscv64-musl	0.41.0	0.54.0
@oxfmt/binding-linux-s390x-gnu	0.41.0	0.54.0
@oxfmt/binding-linux-x64-gnu	0.41.0	0.54.0
@oxfmt/binding-linux-x64-musl	0.41.0	0.54.0
@oxfmt/binding-openharmony-arm64	0.41.0	0.54.0
@oxfmt/binding-win32-arm64-msvc	0.41.0	0.54.0
@oxfmt/binding-win32-ia32-msvc	0.41.0	0.54.0
@oxfmt/binding-win32-x64-msvc	0.41.0	0.54.0
@oxlint/binding-android-arm-eabi	1.56.0	1.69.0
@oxlint/binding-android-arm64	1.56.0	1.69.0
@oxlint/binding-darwin-arm64	1.56.0	1.69.0
@oxlint/binding-darwin-x64	1.56.0	1.69.0
@oxlint/binding-freebsd-x64	1.56.0	1.69.0
@oxlint/binding-linux-arm-gnueabihf	1.56.0	1.69.0
@oxlint/binding-linux-arm-musleabihf	1.56.0	1.69.0
@oxlint/binding-linux-arm64-gnu	1.56.0	1.69.0
@oxlint/binding-linux-arm64-musl	1.56.0	1.69.0
@oxlint/binding-linux-ppc64-gnu	1.56.0	1.69.0
@oxlint/binding-linux-riscv64-gnu	1.56.0	1.69.0
@oxlint/binding-linux-riscv64-musl	1.56.0	1.69.0
@oxlint/binding-linux-s390x-gnu	1.56.0	1.69.0
@oxlint/binding-linux-x64-gnu	1.56.0	1.69.0
@oxlint/binding-linux-x64-musl	1.56.0	1.69.0
@oxlint/binding-openharmony-arm64	1.56.0	1.69.0
@oxlint/binding-win32-arm64-msvc	1.56.0	1.69.0
@oxlint/binding-win32-ia32-msvc	1.56.0	1.69.0
@oxlint/binding-win32-x64-msvc	1.56.0	1.69.0
@repomix/tree-sitter-wasms	0.1.16	0.1.17
@secretlint/config-creator	11.3.1	13.0.2
@secretlint/config-loader	11.3.1	13.0.2
@secretlint/core	11.3.1	11.7.1
@secretlint/formatter	11.3.1	13.0.2
@secretlint/node	11.3.1	13.0.2
@secretlint/profiler	11.3.1	11.7.1
@secretlint/resolver	11.3.1	13.0.2
@secretlint/source-creator	11.3.1	13.0.2
@secretlint/types	11.3.1	11.7.1
@sindresorhus/merge-streams	2.3.0	4.0.0
@textlint/ast-node-types	15.5.2	15.7.1
@textlint/linter-formatter	15.5.2	15.7.1
@textlint/module-interop	15.5.2	15.7.1
@textlint/resolver	15.5.2	15.7.1
@textlint/types	15.5.2	15.7.1
@tybys/wasm-util	0.10.1	0.10.2
@typescript/native-preview-darwin-arm64	7.0.0-dev.20260318.1	7.0.0-dev.20260610.1
@typescript/native-preview-darwin-x64	7.0.0-dev.20260318.1	7.0.0-dev.20260610.1
@typescript/native-preview-linux-arm64	7.0.0-dev.20260318.1	7.0.0-dev.20260610.1
@typescript/native-preview-linux-arm	7.0.0-dev.20260318.1	7.0.0-dev.20260610.1
@typescript/native-preview-linux-x64	7.0.0-dev.20260318.1	7.0.0-dev.20260610.1
@typescript/native-preview-win32-arm64	7.0.0-dev.20260318.1	7.0.0-dev.20260610.1
@typescript/native-preview-win32-x64	7.0.0-dev.20260318.1	7.0.0-dev.20260610.1
@vitest/expect	4.1.0	4.1.8
@vitest/mocker	4.1.0	4.1.8
@vitest/pretty-format	4.1.0	4.1.8
@vitest/runner	4.1.0	4.1.8
@vitest/snapshot	4.1.0	4.1.8
@vitest/spy	4.1.0	4.1.8
@vitest/utils	4.1.0	4.1.8
ajv	8.18.0	8.20.0
ast-v8-to-istanbul	1.0.0	1.0.4
axios	1.13.6	1.17.0
brace-expansion	5.0.4	5.0.6
comment-json	4.6.2	5.0.0
cspell-config-lib	9.7.0	10.0.1
cspell-dictionary	9.7.0	10.0.1
cspell-gitignore	9.7.0	10.0.1
cspell-glob	9.7.0	10.0.1
cspell-grammar	9.7.0	10.0.1
cspell-io	9.7.0	10.0.1
cspell-lib	9.7.0	10.0.1
cspell-trie-lib	9.7.0	10.0.1
es-module-lexer	2.0.0	2.1.0
es-object-atoms	1.1.1	1.1.2
eventsource-parser	3.0.6	3.1.0
execa	5.1.1	9.6.1
express-rate-limit	8.3.1	8.5.2
fast-uri	3.1.0	3.1.2
fast-xml-builder	1.1.4	1.2.0
file-type	21.3.3	21.3.4
follow-redirects	1.15.11	1.16.0
fuse.js	7.1.0	7.4.2
get-east-asian-width	1.5.0	1.6.0
get-stream	6.0.1	9.0.1
get-tsconfig	4.13.6	4.14.0
handlebars	4.7.8	4.7.9
hasown	2.0.2	2.0.4
hono	4.12.8	4.12.25
hosted-git-info	7.0.2	9.0.3
human-signals	2.1.0	8.0.1
import-fresh	3.3.1	4.0.0
ip-address	10.1.0	10.2.0
is-stream	2.0.1	4.0.1
jiti	2.6.1	2.7.0
jose	6.2.2	6.2.3
koa	3.1.2	3.2.1
listr2	9.0.5	10.2.1
lodash	4.17.23	4.18.1
lru-cache	10.4.3	11.5.1
magicast	0.5.2	0.5.3
mcp-proxy	6.4.4	6.5.1
minimatch	10.2.4	10.2.5
nanoid	3.3.11	3.3.12
normalize-package-data	6.0.2	8.0.0
npm-run-path	4.0.1	6.0.0
obug	2.1.1	2.1.2
onetime	5.1.2	7.0.0
oxc-resolver	11.19.1	11.20.0
path-expression-matcher	1.1.3	1.5.0
path-to-regexp	8.3.0	8.4.2
picomatch	2.3.1	2.3.2
pipenet	1.4.0	1.4.2
postal-mime	2.7.3	2.7.4
postcss	8.5.8	8.5.15
proxy-from-env	1.1.0	2.1.0
qs	6.15.0	6.15.2
read-pkg	9.0.1	10.1.0
resolve-from	4.0.0	5.0.0
semver	7.7.3	7.8.4
side-channel-list	1.0.0	1.0.1
side-channel	1.1.0	1.1.1
signal-exit	3.0.7	4.1.0
std-env	4.0.0	4.1.0
strip-final-newline	2.0.0	4.0.0
strtok3	10.3.4	10.3.5
supports-hyperlinks	3.2.0	4.4.0
tar	7.5.11	7.5.16
terminal-link	4.0.0	5.0.0
type-fest	1.4.0	4.41.0
type-is	2.0.1	2.1.0
unbash	2.2.0	3.0.0
undici-types	7.18.2	7.24.6
undici	7.24.5	7.27.2
unicorn-magic	0.1.0	0.3.0
web-tree-sitter	0.26.7	0.26.9
yaml	2.8.2	2.9.0
zod-to-json-schema	3.25.1	3.25.2

Updates @modelcontextprotocol/sdk from 1.27.1 to 1.29.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

v1.29.0

What's Changed

• fix: treat v1.x as primary branch for npm latest tag (backport #1577) by @​felixweinberger in modelcontextprotocol/typescript-sdk#1749
• [v1.x] fix: disallow null (infinite) requested TTL by @​LucaButBoring in modelcontextprotocol/typescript-sdk#1339
• [v1.x] fix: add missing size field to ResourceSchema by @​olaservo in modelcontextprotocol/typescript-sdk#1575
• Add typings exports by @​tdraier in modelcontextprotocol/typescript-sdk#1623
• v1.x npm audit fix by @​KKonstantinov in modelcontextprotocol/typescript-sdk#1780
• v1.x #1623 follow up -add missing types to package.json by @​KKonstantinov in modelcontextprotocol/typescript-sdk#1773
• [v1.x backport] Allow servers / clients to advertise extensions in the capability object by @​localden in modelcontextprotocol/typescript-sdk#1811
• fix(stdio): always set windowsHide on Windows, not just in Electron by @​jnMetaCode in modelcontextprotocol/typescript-sdk#1640
• chore: bump version to 1.29.0 by @​felixweinberger in modelcontextprotocol/typescript-sdk#1820

New Contributors

• @​tdraier made their first contribution in modelcontextprotocol/typescript-sdk#1623
• @​jnMetaCode made their first contribution in modelcontextprotocol/typescript-sdk#1640

Full Changelog: modelcontextprotocol/typescript-sdk@v1.28.0...v1.29.0

v1.28.0

What's Changed

• feat: use scopes_supported from resource metadata by default (fixes #580) by @​antogyn in modelcontextprotocol/typescript-sdk#757
• [v1.x backport] Default to client_secret_basic when server omits token_endpoint_auth_methods_supported by @​pcarleton in modelcontextprotocol/typescript-sdk#1611
• fix: reject plain JSON Schema objects passed as inputSchema by @​tiluckdave in modelcontextprotocol/typescript-sdk#1596
• fix: clear _timeoutInfo in _onclose() and scope .finally() abort controller cleanup by @​pcarleton in modelcontextprotocol/typescript-sdk#1462
• fix(server/auth): RFC 8252 loopback port relaxation by @​poteat in modelcontextprotocol/typescript-sdk#1738
• chore: bump version to 1.28.0 by @​felixweinberger in modelcontextprotocol/typescript-sdk#1746

New Contributors

• @​antogyn made their first contribution in modelcontextprotocol/typescript-sdk#757
• @​tiluckdave made their first contribution in modelcontextprotocol/typescript-sdk#1596
• @​poteat made their first contribution in modelcontextprotocol/typescript-sdk#1738

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.1...v1.28.0

Commits

• e12cbd7 chore: bump version to 1.29.0 (#1820)
• 3913fd4 fix(stdio): always set windowsHide on Windows, not just in Electron (#1640)
• 5608e78 [v1.x backport] Allow servers / clients to advertise extensions in the capabi...
• 7213816 v1.x #1623 follow up -add missing types to package.json (#1773)
• 364f38c v1.x npm audit fix (#1780)
• c95cc09 Add typings exports (#1623)
• ddadaa6 [v1.x] fix: add missing size field to ResourceSchema (#1575)
• 2a15851 [v1.x] fix: disallow null (infinite) requested TTL (#1339)
• 13e30f1 fix: treat v1.x as primary branch for npm latest tag (backport #1577) (#1749)
• a056569 chore: bump version to 1.28.0 (#1746)
• Additional commits viewable in compare view

Updates @toon-format/toon from 2.1.0 to 2.3.0

Release notes

Sourced from @​toon-format/toon's releases.

v2.3.0

   🚀 Features

• decode: Strict-mode error coverage for §6/§9.1/§14  -  by @​johannschopplich (a13dc)
• docs: Add YAML input to Playground with tests  -  by @​swetasanghi2004-prog in toon-format/toon#303 (90a04)
• encode: Emit canonical empty-array form key: []  -  by @​johannschopplich (e6d97)

   🐞 Bug Fixes

• decode:
  • Support \uXXXX escape per §7.1  -  by @​johannschopplich (17820)
  • Reject whitespace gap in array header per §6  -  by @​johannschopplich (d5149)

    View changes on GitHub

v2.2.0

   🚀 Features

• Throw ToonDecodeError on error  -  by @​johannschopplich (1181b)
• cli: Render decode error with line context, source, and caret  -  by @​johannschopplich (3d99b)

   🐞 Bug Fixes

• Remove deprecated bare list item decoder logic  -  by @​johannschopplich (4852a)
• Reject negative numbers with leading zeros  -  by @​johannschopplich (19719)
• Preserve empty-string keys in array headers across encode/decode  -  by @​johannschopplich in toon-format/toon#281 (c6ab0)
• decode: Reject array headers with trailing content between bracket and colon  -  by @​johannschopplich (6f699)

   🏎 Performance

• Remove tsx usage  -  by @​johannschopplich (9bb97)

    View changes on GitHub

Commits

• 3c66a1b chore: release v2.3.0
• 4b8aa99 chore(toon): bump @​toon-format/spec to ^3.2.0
• 1d23fa3 chore: fix linting issues
• d6c64d2 chore: upgrade dependencies
• dd856fe docs: align prose with v3.2 spec wording
• d514942 fix(decode): reject whitespace gap in array header per §6
• 9791525 docs(toon): bump SPEC badge to v3.2, add What's new section, fix §17 anchor
• 1446cae docs(cli): widen --no-strict description for v3.2 semantics
• 13110eb docs: align guides and API reference with v3.2 spec changes
• 1f53af3 docs(spec): refresh §17-19 layout, Appendix F, and §14 subsection references
• Additional commits viewable in compare view

Updates @valibot/to-json-schema from 1.6.0 to 1.7.1

Release notes

Sourced from @​valibot/to-json-schema's releases.

v1.7.1 (to-json-schema)

Many thanks to @​dinwwwh and @​chatman-media for contributing to this release.

• Fix $ref generation to encode definition keys containing / or ~ as JSON Pointer tokens (pull request #1482)

v1.7.0 (to-json-schema)

• Change build target to ES2020 so distributed output stays compatible with environments that lack support for newer syntax (pull request #1455)
• Change Valibot peer dependency to v1.4.0

Commits

• See full diff in compare view

Updates commander from 14.0.3 to 15.0.0

Release notes

Sourced from commander's releases.

v15.0.0

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

• show excess command-arguments in error message (#2384)

Fixed

• Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
• update example to use compatible character for MINGW64 (#2475)

Changed

• Breaking: migrated Commander implementation from CommonJS to ESM (#2464)
• Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).
• dev: switch tests from Jest to node:test test runner (#2463)

Deleted

• Breaking: removed deprecated export of commander/esm.mjs (#2464)

Migration Tips

Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

v15.0.0-0

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

• show excess command-arguments in error message (#2384)

Fixed

• Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
• update example to use compatible character for MINGW64 (#2475)

... (truncated)

Changelog

Sourced from commander's changelog.

[15.0.0] (2026-05-29)

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

• show excess command-arguments in error message (#2384)

Fixed

• Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
• update example to use compatible character for MINGW64 (#2475)

Changed

• Breaking: migrated Commander implementation from CommonJS to ESM (#2464)
• Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).
• dev: switch tests from Jest to node:test test runner (#2463)

Deleted

• Breaking: removed deprecated export of commander/esm.mjs (#2464)

Migration Tips

Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

[15.0.0-0] (2026-02-22)

(Released as 15.0.0)

Commits

• ba6d13d Fix release dates in changelog (#2523)
• a752ed9 Pin GitHub actions with hash (#2521)
• 74d5dfe Drop EOL node 20 from test matrix, and add node 26 (#2520)
• 6df9b68 Update details for 15.0.0 release (#2519)
• 01ce5d0 Remove jest esm examples (#2517)
• d785d8b Update dependencies (#2518)
• 9098b48 Update dependencies (#2506)
• 373f660 Use node:util stripVTControlCharacters instead of own code (#2486)
• 987f289 Use simple match in test (to avoid warning about expensive regex) (#2485)
• 0ea3bb3 Update dependecies and lint (#2489)
• Additional commits viewable in compare view

Updates effect from 3.20.0 to 3.21.3

Release notes

Sourced from effect's releases.

effect@3.21.3

Patch Changes

• #6250 e2126bc Thanks @​milkyskies! - Fix $match generic type parameter inference inside arms (#6249)

• #6257 f7e836e Thanks @​gcanti! - Emit additionalProperties: false for records with string keys and Schema.Never values.

effect@3.21.2

Patch Changes

• #6194 74f3267 Thanks @​mikearnaldi! - Fix TestClock.unsafeCurrentTimeNanos() to floor fractional millisecond instants before converting them to BigInt.

effect@3.21.1

Patch Changes

• #6139 f99048e Thanks @​marbemac! - Fix batched request resolver defects causing consumer fibers to hang forever.

  When a RequestResolver.makeBatched resolver died with a defect, the request Deferreds were never completed because the cleanup logic in invokeWithInterrupt used flatMap (which only runs on success). Changed to ensuring so uncompleted request entries are always resolved regardless of exit type.

effect@3.21.0

Minor Changes

• #5780 f7bb09b Thanks @​kitlangton! - Add Cron.prev and reverse iteration support, aligning next/prev lookup tables, fixing DST handling symmetry, and expanding cron backward/forward test coverage.

• #5780 bd7552a Thanks @​mattiamanzati! - Add type-level utils to asserting layer types

• #5780 ad1a7eb Thanks @​schickling! - RcMap: support dynamic idleTimeToLive values per key

  The idleTimeToLive option can now be a function that receives the key and returns a duration, allowing different TTL values for different resources.

  const map =
    yield *
    RcMap.make({
      lookup: (key: string) => acquireResource(key),
      idleTimeToLive: (key: string) => {
        if (key.startsWith("premium:")) return Duration.minutes(10)
        return Duration.minutes(1)
      }
    })

• #5780 0d32048 Thanks @​mikearnaldi! - Fix annotateCurrentSpan, add Effect.currentPropagatedSpan

Patch Changes

• #5780 0d32048 Thanks @​mikearnaldi! - Add logs to first propagated span, in the following case before this fix the log would not be added to the p span because Effect.fn adds a fake span for the purpose of adding a stack frame.

  import { Effect } from "effect"

... (truncated)

Changelog

Sourced from effect's changelog.

3.21.3

Patch Changes

• #6250 e2126bc Thanks @​milkyskies! - Fix $match generic type parameter inference inside arms (#6249)

• #6257 f7e836e Thanks @​gcanti! - Emit additionalProperties: false for records with string keys and Schema.Never values.

3.21.2

Patch Changes

• #6194 74f3267 Thanks @​mikearnaldi! - Fix TestClock.unsafeCurrentTimeNanos() to floor fractional millisecond instants before converting them to BigInt.

3.21.1

Patch Changes

• #6139 f99048e Thanks @​marbemac! - Fix batched request resolver defects causing consumer fibers to hang forever.

  When a RequestResolver.makeBatched resolver died with a defect, the request Deferreds were never completed because the cleanup logic in invokeWithInterrupt used flatMap (which only runs on success). Changed to ensuring so uncompleted request entries are always resolved regardless of exit type.

3.21.0

Minor Changes

• #5780 f7bb09b Thanks @​kitlangton! - Add Cron.prev and reverse iteration support, aligning next/prev lookup tables, fixing DST handling symmetry, and expanding cron backward/forward test coverage.

• #5780 bd7552a Thanks @​mattiamanzati! - Add type-level utils to asserting layer types

• #5780 ad1a7eb Thanks @​schickling! - RcMap: support dynamic idleTimeToLive values per key

  The idleTimeToLive option can now be a function that receives the key and returns a duration, allowing different TTL values for different resources.

  const map =
    yield *
    RcMap.make({
      lookup: (key: string) => acquireResource(key),
      idleTimeToLive: (key: string) => {
        if (key.startsWith("premium:")) return Duration.minutes(10)
        return Duration.minutes(1)
      }
    })

• #5780 0d32048 Thanks @​mikearnaldi! - Fix annotateCurrentSpan, add Effect.currentPropagatedSpan

Patch Changes

... (truncated)

Commits

• 05d72ea Version Packages (#6259)
• e2126bc fix(Data): preserve generic A in TaggedEnum $match arms (#6250)
• f7e836e Emit additionalProperties: false for records with string keys and `Schema.N...
• 39c934c Version Packages (#6195)
• 74f3267 fix: floor TestClock nanoseconds before BigInt conversion (#6194)
• cc0c40a Version Packages (#6142)
• f99048e fix: resolve batched request resolver defects hanging consumer fibers (#6139)
• 6e3782a Version Packages (#6135)
• f7bb09b Add Cron.prev reverse iteration support (#5786)
• bd7552a Add type-level utils to asserting layer types (#5920)
• Additional commits viewable in compare view

Updates es-toolkit from 1.45.1 to 1.47.0

Release notes

Sourced from es-toolkit's releases.

v1.47.0

Released on May 25th, 2026.

• Added es-toolkit/server entrypoint with colors namespace for ANSI terminal color utilities. ([chore(claude): enable 1M context disable and raise autocompact threshold #1683])
• Added exec function. ([Follow up DeepAgents upstream updates: dcode subagent layout and input.required hook #1689])
• Added sortKeys to the object entrypoint. ([feat: add Kiro hooks support #1674])
• Added cartesianProduct and combinations to the array entrypoint. ([Release v8.22.0 #1713])
• Added allKeyed to the promise entrypoint. ([fix(codexcli-mcp): remove dead logger parameter in convertToCodexFormat #1672])
• Added percentile to the math entrypoint. ([docs(readme): restructure the support matrix into a presence overview #1710])
• Added an interactive playground page to docs. ([feat(zed): skills, rules, mcp + git-transport root-path follow-ups #1720])
• Reorganized docs to introduce a flavor switcher and co-locate compat under /compat/. ([Follow up Junie upstream updates: .junie/AGENTS.md and global agents/skills #1699])
• Fixed uniqWith in compat to match lodash's comparator argument order. ([Release v8.24.0 #1729])
• Fixed compat/omitBy to not treat plain objects with numeric length as array-like. ([Codex MCP approvals #1709])

We sincerely thank @​Antoliny0919, @​ATOM00blue, @​dayongkr, @​guesung, @​myeong-jae-hwi, @​raon0211, @​seungrodotlee, and @​Xiaohang0316 for their contributions. We appreciate your great efforts!

v1.46.1

Released on April 29th, 2026.

• Fixed AbortError and TimeoutError to fall back to Error when DOMException is undefined. ([Follow up Kilo upstream updates: ignore filename should be .kilocodeignore #1694])
• Fixed missing forEach and countBy exports for map and set. ([Follow up Roo Code upstream updates: native custom modes and global rules/commands #1695])

We sincerely thank @​SrAnthony and @​umsungjun for their contributions. We appreciate your great efforts!

v1.46.0

Released on April 22th, 2026.

• Changed AbortError and TimeoutError to extend DOMException. ([Follow-ups from PR #1655 review (Kilo subagent frontmatter) #1660])
• Added keyBy to the map entrypoint exports. ([test(claudecode-skill): cover paths in fromDir and empty-value round-trips #1650])
• Added Claude Code plugin marketplace and es-toolkit usage skills. ([refactor(copilot-rule): reuse toPosixPath and switch sameRelativePath to object params #1644])
• Fixed isBuffer to add a browser export condition to avoid a 44KB Buffer polyfill. ([PR #1667 review findings: env var format translation for MCP config #1671])
• Fixed toCamelCaseKeys and toSnakeCaseKeys to be exported from compat for the browser bundle. ([Follow up Codex CLI upstream updates: new hook events and .agents/skills location #1685])
• Fixed partial by adding missing full-application overloads for 2/3/4 arguments. ([Follow up Agent Skills upstream updates: global ~/.agents/skills/ scope and optional SKILL.md frontmatter #1684])
• Added Agent Skills and Claude Code Plugin guide to the AI Integration page. ([ci(deps): bump anomalyco/opencode from 1.14.30 to 1.15.7 in the all-actions group #1664])

We sincerely thank @​rao...

Description has been truncated

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Thank you for your contribution! Unfortunately, this PR has 2128 added lines, which exceeds the limit of 1000 lines for external contributors.

Please split your changes into smaller PRs. See CONTRIBUTING.md for details.

[dyoshikawa]

Merged after fixing CI failures caused by oxlint 1.69.0 rule reclassification and the TypeScript 6.0 baseUrl deprecation. Thanks!