fix(deps): update all dependencies by renovate[bot] · Pull Request #20 · ProverCoderAI/openapi-effect

renovate · 2026-02-21T13:44:04Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@biomejs/biome (source)	`^2.4.4` → `^2.6.2`	devDependencies	minor
@changesets/changelog-github (source)	`^0.5.2` → `^1.0.1`	devDependencies	major
@changesets/cli (source)	`^2.29.8` → `^3.0.3`	devDependencies	major
@eslint-community/eslint-plugin-eslint-comments	`^4.6.0` → `^4.8.1`	devDependencies	minor
@eslint/compat (source)	`2.0.2` → `2.1.1`	devDependencies	minor
@eslint/eslintrc	`3.3.3` → `3.3.7`	devDependencies	patch
@types/node (source)	`^24.10.13` → `^24.19.2`	devDependencies	minor
@typescript-eslint/eslint-plugin (source)	`^8.56.0` → `^8.72.0`	devDependencies	minor
@typescript-eslint/parser (source)	`^8.56.0` → `^8.72.0`	devDependencies	minor
@vitest/coverage-v8 (source)	`^4.0.18` → `^5.0.5`	devDependencies	major
@vitest/eslint-plugin	`^1.6.9` → `^1.6.27`	devDependencies	patch
actions/checkout	`v6` → `v7`	action	major
actions/setup-node	`v6` → `v7`	action	major
actions/upload-artifact	`v6` → `v7`	action	major
effect (source)	`^3.19.18` → `^4.0.5`	dependencies	major
eslint (source)	`^10.0.1` → `^10.13.0`	devDependencies	minor
eslint-import-resolver-typescript	`^4.4.4` → `^4.4.5`	devDependencies	patch
eslint-plugin-simple-import-sort	`^12.1.1` → `^14.0.0`	devDependencies	major
eslint-plugin-sonarjs (source)	`^4.0.0` → `^4.2.2`	devDependencies	minor
eslint-plugin-unicorn	`^63.0.0` → `^78.0.0`	devDependencies	major
globals	`^17.3.0` → `^17.13.0`	devDependencies	minor
jscpd (source)	`^4.0.8` → `^5.4.2`	devDependencies	major
node	`24.13.1` → `24.22.1`	uses-with	minor
pnpm (source)	`10.30.1` → `12.14.0`	packageManager	major
pnpm/action-setup	`v4` → `v6`	action	major
pnpm/action-setup	`v3` → `v6`	action	major
typescript (source)	`^5.9.3` → `^7.0.2`	devDependencies	major
typescript-eslint (source)	`^8.56.0` → `^8.72.0`	devDependencies	minor
vite (source)	`^7.3.1` → `^8.3.5`	devDependencies	major
vitest (source)	`^4.0.18` → `^5.0.5`	devDependencies	major

cc @skulidropek

Release Notes

biomejs/biome (@biomejs/biome)

`v2.6.2`

Compare Source

Minor Changes

#11479 5c60ba8 Thanks @nhedger! - Added a --git flag to biome init. The flag enables Git VCS integration and sets vcs.useIgnoreFile to true in the generated configuration, even when the command runs outside a Git repository.
#11742 3a1356d Thanks @Netail! - Added the biome migrate stylelint command. It imports a Stylelint configuration and its ignore settings into your Biome configuration, mapping Stylelint rules to their Biome equivalents. Pass --write to apply the changes, and --include-inspired or --include-nursery to migrate additional rules.
#12318 774b5b5 Thanks @Netail! - Added the new assist action useGraphqlSortedDefinitions, which sorts the named definitions of a GraphQL document, such as types, type extensions, directives, fragments, and operations.

Invalid:
```
type User {
  id: ID!
}

enum Role {
  ADMIN
  USER
}

directive @auth on FIELD_DEFINITION
```
#6886 3479d15 Thanks @christymcgrory! - biome rage now shows the resolved files.includes and files.ignoreUnknown configuration.
#11102 0874b7f Thanks @gameroman! - Added support for useTailwindSortedClasses rule in HTML-ish files.
#10711 40de5a0 Thanks @soconnor-seeq! - Adds a new resolutionKind option for object-syntax plugin entries.

This allows shared Biome configs in monorepos to load local Grit plugins from the package that declares them instead of resolving plugin paths from the consuming project.
```
{
  "plugins": [
    { "path": "./grit/no-debugger.grit", "resolutionKind": "config" },
    { "path": "local-plugin.grit", "resolutionKind": "project" },
    { "path": "local-plugin.grit" }
  ]
}
```
Use resolutionKind: "config" to resolve the plugin from the configuration file that declares it. Use resolutionKind: "project" to resolve the plugin from the consuming project. When omitted, resolutionKind defaults to project. This only affects plugin resolution; includes still apply to end-user project files as usual.
#11432 4befd08 Thanks @ematipico! - Added biome inspect config to show resolved configuration values and their origins as human-readable diagnostics, including matching overrides.

Configuration files can also extend other configurations up to ten levels deep. Repeated references to the same resolved file are ignored with an information diagnostic, while resolving multiple versions of one extended package produces an error.
#11477 ab05554 Thanks @nhedger! - Added automatic Git VCS integration when running biome init inside a Git repository, including from nested directories and Git worktrees. The generated configuration sets vcs.enabled and vcs.useIgnoreFile to true, with vcs.clientKind set to "git".
#11451 1ac4b09 Thanks @ematipico! - #### YAML is now supported

Added support for formatting YAML files, both .yaml and .yml extensions
#11432 4befd08 Thanks @ematipico! - Configuration files can now recursively extend local files and npm package configurations up to ten levels. Every repeated reference participates in the merge, while resolving multiple versions of one extended package produces an error.
#11713 ac6a640 Thanks @dyc3! - Added support for Grit range() patterns, addressing #8454. Plugins can filter syntax nodes by optional start_line, start_column, end_line, and end_column bounds.

For example, this pattern matches function calls contained entirely on line 2.
```
range(start_line=2, end_line=2) as $call where {
    $call <: call_expression()
}
```

#11244 0628b53 Thanks @ematipico! - Added the new CLI option --profile-type-inference to the commands lint and check.

The profiler is designed to track the execution time of internal queries and operations, group them by file, and sort them from the most expensive to the least expensive.

biome lint --profile-type-inference

profiler ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  i Type inference profile (Biome <version>)

  src/index.ts

    Requests (top 5 of 12 groups; 28 source records; 46 executions)
      1. Promise classification <- nursery/noFloatingPromises
      ...

    Queries (top 8 of 25 groups; 61 source records; 94 executions)
      1. Promises / infer_expression_is_promise
      ...

    Whole-module inference (top 1 of 1 group; 1 source record; 1 execution)
      1. Import depth limit
      ...

  68 files omitted.

  ℹ To show all the information, use the --verbose option. The output might be very verbose, so it's advised to analyze a single file.

  $ biome lint --profile-type-inference --verbose ./path/to/file.ts

Use --verbose to include detailed timings, attribution, breadth, and implementation references for the top source records in each file.

#12108 4fcb880 Thanks @ematipico! - Promoted 59 nursery rules to stable groups.

Correctness

Promoted the following rules to the correctness group with error severity. All of them are recommended:

Suspicious

Promoted the following rules to the suspicious group:

noLoopFunc
noJsxLeakedDollar
noReactStringRefs (recommended)
useScopedStyles (recommended)
noReactNativeDeepImports (recommended, error severity)
noDrizzleDeleteWithoutWhere (recommended, error severity)
noDrizzleUpdateWithoutWhere (recommended, error severity)
noConditionalExpect
useExpect
noIdenticalTestTitle (recommended)
noPlaywrightForceOption
noPlaywrightNetworkidle
noPlaywrightPagePause
noPlaywrightWaitForNavigation
noPlaywrightWaitForTimeout
noDuplicateSelectors
noEmptyObjectKeys
useBaseline
noUntrustedLicenses

Security

Promoted useIframeSandbox to the security group with error severity.

Performance

Promoted the recommended rule useDomNodeTextContent to the performance group with warning severity.

Complexity

Promoted the following rules to the complexity group:

useArraySome
useRegexpTest
noUnnecessaryTemplateExpression
noPlaywrightUselessAwait
noExcessiveSelectorClasses
useMathMinMax (recommended, warning severity)
noExcessiveNestedCallbacks

Style

Promoted the following rules to the style group with information severity:

useVueConsistentDefinePropsDeclaration
useVueNextTickPromise (recommended)
noReactNativeLiteralColors
useConsistentTestIt
useTestHooksInOrder
useTestHooksOnTop
noPlaywrightEval
noPlaywrightElementHandle
noPlaywrightWaitForSelector
useReduceTypeParameter
useNamedCaptureGroup
useUnicodeRegex
useImportsFirst
useVarsOnTop
useThisInClassMethods
noInlineStyles
useDomQuerySelector
noTopLevelLiterals
#12206 0f984fb Thanks @dyc3! - Added the ignoreUsingDeclarations option to noUnusedVariables. When enabled, the rule no longer reports unused variables declared with using or await using, because these declarations clean up their value automatically even when the code never reads it.
```
{
  "linter": {
    "rules": {
      "correctness": {
        "noUnusedVariables": {
          "options": { "ignoreUsingDeclarations": true }
        }
      }
    }
  }
}
```
#12424 6a41490 Thanks @siketyan! - Removed the javascript.parser.gritMetavariables option. It was intended for internal use only and had no effect on how Biome parses JavaScript and TypeScript files. Biome now reports it as an unknown key and exits with a configuration error, so remove it from your configuration file.
#12055 54870c0 Thanks @ff1451! - Added the new assist action useGraphqlSortedVariables, which sorts the variable definitions of GraphQL operations.

Invalid:
```
query GetUser($userId: ID!, $includePosts: Boolean = false, $after: String) {
  user(id: $userId) {
    name
  }
}
```
#12149 83df808 Thanks @dyc3! - Added the tailwind.stylesheet option, which points Biome at the CSS file that holds your Tailwind CSS configuration. useTailwindSortedClasses reads the @theme, @utility, and @custom-variant rules in that file and in the local files it imports, so your own theme values, utilities, and variants sort correctly.
```
// biome.json
{
  "tailwind": { "stylesheet": "./src/app.css" }
}
```
```
/* src/app.css */
@import "tailwindcss";

@theme {
  --color-brand: #&#8203;3b82f6;
}

@utility content-auto {
  content-visibility: auto;
}

@custom-variant theme-midnight (&:where([data-theme="midnight"] *));
```
#12206 0f984fb Thanks @dyc3! - Added migration of the ignoreRestSiblings and ignoreUsingDeclarations options of no-unused-vars, @typescript-eslint/no-unused-vars, and unused-imports/no-unused-vars to noUnusedVariables in biome migrate eslint. Options that the ESLint configuration omits are set to ESLint's defaults, so the migrated rule reports the same variables. For example, "no-unused-vars": "error" now migrates ignoreRestSiblings as false.
#11709 32d12cb Thanks @ematipico! - Added the new command biome inspect file, which returns developer information for the given file.
```
biome inspect file path/to/file.ts
```
By default, the command returns the CST of the file. The command accepts the following arguments:
- --ast, which returns the AST of a file.
- --ir, which returns the formatting IR of a file.
- --semantic, which returns the semantic model information of a file, if available.
#12221 cb571af Thanks @dyc3! - The rule noEmptySource now supports Markdown files. It reports files that contain only blank lines and HTML comments. For example, the following file is now reported:
```

```
#12214 8955b56 Thanks @dyc3! - The rule noEmptySource now supports YAML files. It reports files with no documents and each document that has no content. For example, the second document in the following code is now reported:
```
name: foo
---
```

#12033 8669e53 Thanks @dyc3! - Added the ignoreElements option to noRedundantRoles. Elements listed in this option are not checked by the rule.

{
  "linter": {
    "rules": {
      "a11y": {
        "noRedundantRoles": {
          "options": {
            "ignoreElements": ["button"]
          }
        }
      }
    }
  }
}

#12084 04e3750 Thanks @dyc3! - The rule noRestrictedElements now supports HTML, Vue, Svelte, and Astro files. For example, with { "elements": { "marquee": "Use CSS animations instead." } }, the following code is now reported:
```
<marquee>Breaking news</marquee>
```
#11408 5a870f2 Thanks @ematipico! - Added support for distributing named Grit rules, rule presets, and configurations through packages that have a manifest file.

The field plugins is used to export named Grit plugins, and configs is used to export named configurations.
Package entries must select a named export: package/rule, package/presets/preset, or package/configs/config. Bare package entries aren't supported.
Rules consumed from another package are exposed under the consuming package's name, while package authors continue to reference them by their source package inside the manifest.
Configurations consumed from another package are also exposed under the consuming package's name.
```
// biome-manifest.json
{
  "$schema": "./node_modules/@biomejs/biome/manifest_schema.json",
  "version": 1,
  "plugins": {
    "rules": [
      "@org/shared-rules/noDeprecatedApi",
      "@org/strict-rules/presets/recommended",
      { "useCompanyLogger": "./rules/useCompanyLogger.grit" }
    ],
    "presets": {
      "recommended": [
        "useCompanyLogger",
        "@org/shared-rules/noDeprecatedApi"
      ]
    }
  },
  "configs": [
    "@org/shared-configs/configs/recommended",
    { "base": "./configs/base.json" }
  ]
}
```
The package must publish the manifest and every referenced file, for example, through the files field in package.json.
Plugin authors can expose their manifest through the biome condition with ./biome-manifest.json as its value.
```
// package.json
{
  "name": "@org/biome-plugin",
  "exports": {
    "biome": "./biome-manifest.json",
    "default": "./index.js"
  },
  "files": ["biome-manifest.json", "rules", "configs"]
}
```
And then, you can load the rules in your biome.json:
```
// biome.json
{
  "plugins": [
    "@org/biome-plugin/useCompanyLogger",
    "@org/biome-plugin/presets/recommended"
  ]
}
```
For more information on how to create a plugin to distribute via npm, check the relative guide.
#12264 90f2eaf Thanks @dyc3! - Fixed #11082: glob patterns in the includes option of a plugin are now matched against file paths relative to the directory of the configuration file, the same as files.includes and overrides[].includes.

Previously, the patterns were matched against the absolute file path, so a pattern such as packages/**/src/** matched no files and the plugin never ran.
```
{
  "plugins": [
    { "path": "./my-plugin.grit", "includes": ["packages/**/src/**"] }
  ]
}
```
Patterns that start with **/ keep working. Patterns that contain the absolute path of the project no longer match, and must be rewritten as relative patterns.
#11133 1df00de Thanks @dlecan! - Added Android (Termux) support to the npm distribution (#1340). npm install @biomejs/biome now works on Termux through the new @biomejs/cli-android-arm64 and @biomejs/cli-android-x64 packages, which reuse the static musl binaries.
#12132 c5fadc4 Thanks @ematipico! - Added SCSS support throughout the toolchain. Biome can now format and lint .scss files, and recognizes .module.scss files as CSS Modules.
#10837 754432c Thanks @JamBalaya56562! - Added support for Google Apps Script (.gs) files.

They are parsed as JavaScript scripts, so ES module import/export statements are reported as errors (Apps Script has no module system). Common Apps Script service globals (e.g. SpreadsheetApp, DriveApp, Logger) are recognized by noUndeclaredVariables and noGlobalAssign, and the list can be extended through the javascript.globals option.
#11126 fa63050 Thanks @Punisheroot! - Biome now recognizes files with the .htm extension as HTML.
#12291 6c6619e Thanks @dyc3! - Changed the dependency that enables the tailwind domain automatically. The domain is now enabled when package.json declares tailwindcss v4 or later, instead of v3 or later, because we are currently targeting Tailwind v4 support. The domain can always be enabled manually.
#11394 de1ad4c Thanks @ematipico! - #### Markdown is now supported

Added support for linting and formatting Markdown files. The first version of Biome Markdown parser has 100% compatibility
against CommonMark.

Other variants of Markdown, such as GitHub Flavored Markdown (GFM) aren't currently supported; however, we plan to support them soon.

Formatter and Linter are automatically enabled by default.

Markdown parser

The parser comes with an opt-in option to enable frontmatter parsing. When enabled, the first thematic break --- is considered the opening fence of the frontmatter:
```
// biome.json
{
  "markdown": {
    "parser": {
      "frontmatter": true
    }
  }
}
```
```
---
title: Lorem ipsum
---
```
The parser also comes with an opt-in option called cjkFriendlyEmphasis. When enabled, the parser follows the CommonMark CJK-friendly amendments and recognizes emphasis markers, such as **, placed directly next to Chinese, Japanese, or Korean text. Enable it only when the tool that renders your Markdown supports the same amendments, because the option changes which text Biome formats and lints as emphasis:
```
// biome.json
{
  "markdown": {
    "parser": {
      "cjkFriendlyEmphasis": true
    }
  }
}
```
With the option enabled, the following text is parsed as bold, instead of as literal **:
```
**このアスタリスクは強調記号として認識されず、そのまま表示されます。**この文のせいで。
```
Markdown formatter

The formatter has great compatibility with Prettier formatting, more than 90% detected by our infrastructure. The formatter ships with
a new option called proseWrap, that allows controlling how the Biome formatter should wrap paragraphs.

For example, when proseWrap is set to always, the formatter will wrap the paragraph to match the configured lineWidth:
```
// biome.json
{
  "markdown": {
    "formatter": {
      "lineWidth": 20,
      "proseWrap": "always"
    }
  }
}
```
```
Very tiny line width, so
the paragraph is more
compact.
```
Markdown linter

The linter ships with a few rules inspired by markdownlint. We plan to ship more rules in the upcoming releases.

Some rules you can start using already:
- useTopLevelHeading
- useConsistentHeadingLevel
Markdown snippets

Biome recognizes the code inside fenced code blocks, frontmatter, and HTML blocks as embedded languages, and formats it with
the formatter of its language and your configuration:
```
 ```js
-const   value   =   {a:1,b:2}
+const value = { a: 1, b: 2 };
 ```
```
HTML blocks are formatted only when the HTML formatter is enabled. A block with a syntax error stays as written, and Biome
still formats the rest of the file.

The option markdown.formatter.formatEmbeds controls this behavior, and it's enabled by default. Set it to false to keep
the code of these blocks as written:
```
// biome.json
{
  "markdown": {
    "formatter": {
      "formatEmbeds": false
    }
  }
}
```
The command biome migrate prettier migrates the Prettier option embeddedLanguageFormatting
to markdown.formatter.formatEmbeds.

The option markdown.analyzeEmbeds runs the linter and assist actions on the same blocks, with the rules and actions of
their language, and reports their syntax errors. It's disabled by default, because fenced code blocks usually contain
examples or partial code:
```
// biome.json
{
  "markdown": {
    "analyzeEmbeds": true
  }
}
```
#11634 04c3f5d Thanks @ematipico! - Added biome inspect plugins to list resolved rules by plugin and importing preset without loading or executing plugin code. Include globs show which files each import targets, and --path selects a target file. Fixed Markdown linter overrides and their configuration inspection.
#12282 a3fa0d6 Thanks @ff1451! - Added the new assist action useGraphqlSortedArguments, which sorts the arguments of GraphQL fields and directives, and the arguments declared by field and directive definitions.

Invalid:
```
query {
  users(orderBy: NAME, first: 10, after: "cursor") {
    name
  }
}
```
#10631 1077238 Thanks @thibaut-pro! - Added the sortFirst option to the useSortedAttributes action (JSX and HTML). It takes a list of attribute names that are sorted before all other attributes, in the order given, while the remaining attributes keep their usual sort. This is useful to keep attributes such as key first.

With the following configuration:
```
{
  "assist": {
    "actions": {
      "source": {
        "useSortedAttributes": {
          "level": "on",
          "options": { "sortFirst": ["key"] }
        }
      }
    }
  }
}
```
The attributes are reordered so that key comes first:
```
// Before
<div className={styles.investment} key={investment.id} />;

// After
<div key={investment.id} className={styles.investment} />;
```
#10424 189b7ba Thanks @LinusU! - Added the partitionByNewLine option to the useSortedInterfaceMembers assist. When enabled, members separated by a blank line are kept in their own section and sorted only within that section, preserving the logical groupings the author intentionally introduced with empty lines.

Patch Changes

#11953 354f74c Thanks @Th3S4mur41! - Enhanced the nursery rule useLogicalProperties to check physical CSS values in addition to physical property names.

The rule recognizes physical values in frame-sizing, anchor-size(), and anchor(), with direction-aware replacements controlled by the existing direction option.

For justify-content: left and justify-content: right, the rule reports a diagnostic without an automatic replacement because the correct logical alignment depends on the layout axis.

This is a second part of the rule covering parts of #9034
#12175 3730b32 Thanks @dyc3! - Added the nursery rule noDoubleComparison, which reports two comparisons of the same values that can be combined into one. For example, x === y || x < y can be written as x <= y.
#12166 25eb10c Thanks @dyc3! - Added the new nursery rule noNestedSwitch, which disallows switch statements inside other switch statements.
```
switch (n) {
  case 0:
    switch (m) {} // reported
}
```
#12170 872ac9f Thanks @dyc3! - Added the new nursery rule noNestedTemplateLiterals, which disallows template literals written inside other template literals.
```
const message = `I have ${color ? `${count} ${color}` : count} apples`;
```
#12111 f72375f Thanks @dyc3! - Added the nursery rule noObjectConstructor, which disallows calling the Object constructor without arguments, such as new Object() or Object(). Biome can replace these calls with the object literal {}.
#12254 cb88f07 Thanks @dyc3! - Added the nursery rule noSvelteClassDirective, which reports Svelte's class: directive. Since Svelte 5.16, the class attribute accepts objects and arrays, and Svelte recommends them over the directive.
```
<div class:active={isActive}></div>
```
#12186 30aa7d2 Thanks @dyc3! - Added the new nursery rule noUselessDateGetTime, which reports dates converted with .getTime() before being passed to the Date constructor. Passing the date directly, as in new Date(date), already creates a copy.
```
const copy = new Date(date.getTime());
```
#12229 5f8ea6c Thanks @dyc3! - Added the nursery rule noVueLifecycleAfterAwait, which reports Vue lifecycle hooks, such as onMounted(), that are registered after an await in a component's setup() function. Vue doesn't run these hooks.
```
<script>
import { onMounted } from "vue";

export default {
  async setup() {
    await fetchUser();
    onMounted(() => {});
  },
};
</script>
```
#12077 3dd096f Thanks @dyc3! - Added the nursery rule noVueRootVIf, which disallows v-if on the only root element of a Vue component template.
```
<template>
  <div v-if="visible">Content</div>
</template>
```
#12136 b92638b Thanks @dyc3! - Added the nursery rule noVueShadowNativeEvents, which reports Vue component events named after built-in browser events, such as click or keydown.
```
<script setup>
// Invalid
const emit = defineEmits(["click"]);
emit("click");
</script>
```
#12135 31a29b6 Thanks @dyc3! - Added the nursery rule noVueVHtml, which disallows Vue's v-html directive. v-html inserts its value into the page as HTML, so text from users can run code on your page (cross-site scripting, or XSS).
```
<template>
  <div v-html="content"></div>
</template>
```
#12134 60329af Thanks @dyc3! - Added the new nursery rule noVueVText, which disallows Vue's v-text directive in favor of text interpolation.

For example, the following snippet triggers the rule:
```
<div v-text="message"></div>
```
#9817 241b861 Thanks @dyc3! - Added the new nursery rule noZeroFractions, which disallows numeric literals with redundant zero fractions or dangling dots such as 1.0 and 1.. Biome can now simplify these literals to shorter equivalents.
#12109 b45d426 Thanks @dyc3! - Added the nursery rule useConsistentJsonFileRead, which enforces a consistent way of reading JSON files before passing them to JSON.parse(). By default, it reports files read as a Buffer; set readAs to "buffer" to report files read as a UTF-8 string instead.
```
const packageJson = JSON.parse(await fs.readFile("./package.json"));
```
#12129 b57f874 Thanks @dyc3! - Added the new nursery rule useMatchingFunctionName, which requires a named function expression to have the same name as the variable or property it's assigned to.
```
// The function name `bar` doesn't match the variable name `foo`.
const foo = function bar() {};
```
#12169 0f1ae53 Thanks @dyc3! - Added the new nursery rule useSimplifiedBooleanReturn, which reports if statements that only return true or false and can be replaced by returning the condition directly.
```
function isPositive(value) {
  if (value > 0) {
    return true;
  }
  return false;
}
```
#11957 b2db9f2 Thanks @dyc3! - Added the nursery rule useSvelteKitResolve, which requires internal links and calls to goto(), pushState(), and replaceState() to use paths built with SvelteKit's resolve().
```
<a href="/about">About</a>
```
#12235 b7c1870 Thanks @dyc3! - Added the nursery rule useSvelteReactiveClasses, which reports Date, Map, Set, URL, and URLSearchParams objects that are modified in Svelte files or exported from Svelte modules. Svelte doesn't detect changes made inside these built-in objects, so the rule suggests the matching classes from svelte/reactivity.
```
<script>
  const tags = new Set();
  function addTag(tag) {
    tags.add(tag);
  }
</script>
```
[#

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

coderabbitai · 2026-05-14T12:31:27Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: acca82e8-29ac-4f02-9ed7-99be0997df3b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Last reviewed commit: 6898c52
Latest commit, not reviewed: 25eae87

Use the following commands to manage reviews:

@coderabbitai resume to resume automatic reviews.
@coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

▶️ Resume reviews
🔍 Trigger review

📝 Walkthrough

Bump CI action versions, pin pnpm to 11.1.2 in root and app, and update Changesets plus many app dependencies/devDependencies (Effect stack, TypeScript tooling, linting, testing, and build tools).

Changes

Toolchain and dependency upgrades

Layer / File(s)	Summary
GitHub Actions versions `.github/actions/setup/action.yml`, `.github/workflows/checking-dependencies.yml`, `.github/workflows/snapshot.yml`	pnpm action bumped to `@v6` in composite and workflow; `actions/setup-node` Node input updated to `24.15.0`; artifact upload action bumped to `actions/upload-artifact@v7`.
pnpm version pins `package.json`, `packages/app/package.json`	Workspace and app `packageManager` updated from `pnpm@10.30.1` to `pnpm@11.1.2`.
Dependency and toolchain upgrades `package.json`, `packages/app/package.json`	Root Changesets packages (`@changesets/changelog-github`, `@changesets/cli`) bumped; app package `dependencies` and `devDependencies` refreshed (Effect packages, ts-morph, Biome/ESLint, TypeScript tooling, Vitest/Vite, etc.).

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Possibly related issues

Dependency Dashboard effect-template#10: Overlaps pnpm/action-setup, pnpm pinning, and tooling/version updates.
Dependency Dashboard eslint-plugin-suggest-members#2: Matches workflow and pnpm/tooling bumps in CI and manifests.
Dependency Dashboard #1: Mirrors the same workflow and package.json version updates.
Dependency Dashboard dist-deps-prune#2: Contains similar dependency/version bump changes (pnpm, actions, packages).
Dependency Dashboard context-doc#5: Renovate-style workflow and package pin bumps align with that issue.
Dependency Dashboard effect-eslint-template#6: Shares pnpm and ESLint/Biome/tooling dependency updates.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description check	✅ Passed	The description clearly documents the Renovate dependency, package manager, and GitHub Actions updates in the changeset.
Title check	✅ Passed	The title accurately identifies the pull request as a broad dependency update, including packages, tooling, and GitHub Actions.

✨ Finishing Touches

📝 Generate docstrings

Create stacked PR
Commit on current branch

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch renovate/all

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{🐇 I nudged a YAML line, made pnpm climb to eleven,
Actions hum a newer tune, workflows light as heaven.
Packages refreshed, linters wake and play,
Tests tiptoe cleaner paths, building through the day.
✨}

_{Comment @coderabbitai help to get the list of available commands.}

coderabbitai

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.github/actions/setup/action.yml:
- Line 13: The workflow currently uses a mutable tag "pnpm/action-setup@v6";
replace that with an immutable full commit SHA (40-hex) for pnpm/action-setup to
pin the action (e.g., "pnpm/action-setup@<full-commit-sha>"). Locate the "uses:
pnpm/action-setup@v6" entry in the action.yml and update it to the exact commit
SHA from the pnpm/action-setup repository, verify the SHA is full-length (40
characters) and that the workflow still runs correctly after the change.

In @.github/workflows/checking-dependencies.yml:
- Line 15: Replace the mutable tag reference "uses: pnpm/action-setup@v6" with
an immutable pin to the full commit SHA for the pnpm/action-setup action (e.g.,
"uses: pnpm/action-setup@<full-commit-sha>"); locate the occurrences of
"pnpm/action-setup@v6" in the workflow and update them to the corresponding
release commit SHA from the action's repository, then verify the workflow runs
successfully.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

Push a commit to this branch (recommended)
Create a new PR with the fixes

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 4cd2e52a-a23f-4849-8bc7-20b25e799703

📥 Commits

Reviewing files that changed from the base of the PR and between 6b3e168 and 373422e.

⛔ Files ignored due to path filters (1)

pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (5)

.github/actions/setup/action.yml
.github/workflows/checking-dependencies.yml
.github/workflows/snapshot.yml
package.json
packages/app/package.json

coderabbitai · 2026-05-14T12:34:25Z

  steps:
    - name: Install pnpm
-      uses: pnpm/action-setup@v3
+      uses: pnpm/action-setup@v6


⚠️ Potential issue | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash # Verify mutable action refs under .github (tag-based refs like `@v1/`@v6). # Expected: no matches after SHA pinning. rg -n --iglob '*.yml' --iglob '*.yaml' 'uses:\s*[^@[:space:]]+@v[0-9]+(\.[0-9]+){0,2}\b' .github

Repository: ProverCoderAI/openapi-effect

Length of output: 1009

Pin pnpm/action-setup to an immutable commit SHA.

Line 13 uses a mutable tag (@v6). Please pin to a full-length commit SHA to reduce supply-chain risk and avoid policy breaks in hardened org settings.

🔒 Suggested change

- uses: pnpm/action-setup@v6 + uses: pnpm/action-setup@<full-length-commit-sha> # v6.x

Reference: https://docs.github.com/actions/security-guides/security-hardening-for-github-actions

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In @.github/actions/setup/action.yml at line 13, The workflow currently uses a mutable tag "pnpm/action-setup@v6"; replace that with an immutable full commit SHA (40-hex) for pnpm/action-setup to pin the action (e.g., "pnpm/action-setup@<full-commit-sha>"). Locate the "uses: pnpm/action-setup@v6" entry in the action.yml and update it to the exact commit SHA from the pnpm/action-setup repository, verify the SHA is full-length (40 characters) and that the workflow still runs correctly after the change.

coderabbitai · 2026-05-14T12:34:25Z

    steps:
      - uses: actions/checkout@v6
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@v6


⚠️ Potential issue | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash # Verify mutable action refs under .github (tag-based refs like `@v1/`@v6). # Expected: no matches after SHA pinning. rg -n --iglob '*.yml' --iglob '*.yaml' 'uses:\s*[^@[:space:]]+@v[0-9]+(\.[0-9]+){0,2}\b' .github

Repository: ProverCoderAI/openapi-effect

Length of output: 1009

Pin pnpm/action-setup to a commit SHA instead of a mutable tag.

Line 15 uses @v6, which is a mutable tag reference. Per GitHub's security hardening guidelines, action references should be pinned to full commit SHAs to ensure immutability and prevent unintended updates from tag rewrites.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In @.github/workflows/checking-dependencies.yml at line 15, Replace the mutable tag reference "uses: pnpm/action-setup@v6" with an immutable pin to the full commit SHA for the pnpm/action-setup action (e.g., "uses: pnpm/action-setup@<full-commit-sha>"); locate the occurrences of "pnpm/action-setup@v6" in the workflow and update them to the corresponding release commit SHA from the action's repository, then verify the workflow runs successfully.

coderabbitai

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@package.json`:
- Line 6: The package.json currently sets "packageManager": "pnpm@11.1.2" but
pnpm v11 requires config and environment changes; run the recommended codemod
(pnpx codemod run pnpm-v10-to-v11) and then: move any settings under the
package.json "pnpm" field into pnpm-workspace.yaml, strip .npmrc to only
auth/registry entries, update .nvmrc and CI to Node.js 22+ to match pnpm v11,
rename any environment variables from npm_config_* to pnpm_config_ and manually
review remaining envs, and rename or invoke scripts named
clean/setup/deploy/rebuild using pnpm pm to avoid shadowing built-ins.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

Push a commit to this branch (recommended)
Create a new PR with the fixes

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 78ded05a-1811-4eac-8349-84f29cb8618e

📥 Commits

Reviewing files that changed from the base of the PR and between 6898c52 and 57c74f4.

⛔ Files ignored due to path filters (1)

pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (5)

.github/actions/setup/action.yml
.github/workflows/checking-dependencies.yml
.github/workflows/snapshot.yml
package.json
packages/app/package.json

🚧 Files skipped from review as they are similar to previous changes (4)

.github/actions/setup/action.yml
.github/workflows/checking-dependencies.yml
.github/workflows/snapshot.yml
packages/app/package.json

coderabbitai · 2026-05-17T12:25:00Z

  "private": true,
  "description": "Monorepo workspace for effect-template",
-  "packageManager": "pnpm@10.30.1",
+  "packageManager": "pnpm@11.1.2",


⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🌐 Web query:

pnpm 11 breaking changes and migration guide

💡 Result:

pnpm 11 is a major release that introduces significant breaking changes, security-first defaults, and architectural improvements [1]. The official migration guide is available at https://pnpm.io/11.x/migration [2]. Key Breaking Changes and Migration Steps Configuration Changes pnpm 11 significantly changes how configuration is handled [3][1]: - Configuration is no longer read from the pnpm field in package.json; move these settings to pnpm-workspace.yaml [3][2]. -.npmrc files are now restricted to auth and registry settings only [3][1]. All other settings (e.g., hoist-pattern, node-linker) must be moved to pnpm-workspace.yaml using camelCase keys [3][2]. - npm_config_* environment variables are no longer supported; rename them to pnpm_config_* [3][1]. - pnpm no longer reads npm's global config at $PREFIX/etc/npmrc [1]. Dependency and Script Management - Build-dependency settings (onlyBuiltDependencies, neverBuiltDependencies, etc.) are consolidated into a single allowBuilds map in pnpm-workspace.yaml [3][1]. - Package manager strictness settings are collapsed into a single pmOnFail setting [3][2]. - Script names now shadow built-in commands [3]. If you have scripts named clean, setup, deploy, or rebuild, pnpm will execute your script instead of the built-in command; use pnpm pm to access the built-in version [3]. - pnpm install -g (with no arguments) is no longer supported; use pnpm add -g instead [3][1]. Environment and Infrastructure - Node.js 18, 19, 20, and 21 are no longer supported; Node.js 22+ is required [1]. - pnpm is now distributed as pure ESM [1]. - Global installs are now isolated using a global-virtual-store, preventing interference between global packages [1]. Security and New Features - Minimum Release Age: By default, pnpm 11 blocks the installation of package versions published within the last 24 hours to mitigate supply chain attacks [4][5][6]. - Exotic Subdependencies: pnpm 11 blocks dependencies resolved from non-standard sources (e.g., Git repositories or direct tarball URLs) by default [4][6]. - Native Publish: The npm CLI fallback for publishing has been removed in favor of a native implementation [1]. - Store Index: The store index has been migrated from a JSON-per-package format to a single SQLite database for improved performance [1][5]. Migration Tooling The pnpm team provides a codemod to automate many of these changes [2]. You can run it in your project directory: pnpx codemod run pnpm-v10-to-v11 [2] For changes that cannot be automated, such as environment variable updates, manual review is required [3][2].

Citations:

1: https://pnpm.io/blog/releases/11.0

2: https://pnpm.io/11.x/migration

3: https://pnpm.io/migration

4: https://gbhackers.com/pnpm-11-enables-default-release-age-guard/

5: https://cyberpress.org/pnpm-blocks-supply-attacks/

6: https://undercodenews.com/pnpm-11-reinvents-javascript-security-a-new-era-for-dependency-protection/

🌐 Web query:

pnpm 11.1.2 release notes and security advisories

💡 Result:

As of May 17, 2026, pnpm version 11.1.2 is the latest release [1]. Release Notes for pnpm 11.1.2 Specific release notes for version 11.1.2 were not explicitly detailed in the provided search results, as it is a very recent patch release [1]. However, it follows the major 11.1.0 and 11.1.1 releases, which introduced several significant features and fixes [2][3][4]: - New Commands: Added pnpm audit signatures (to verify ECDSA registry signatures), pnpm bugs (to open package bug trackers), and pnpm owner (to manage package owners) [3][4]. - Named Registries: Added support for installing packages from arbitrary named registries, including a built-in gh: prefix for the GitHub Packages npm registry [3][4]. - CI Improvements: Introduced the --no-runtime flag (config: runtime=false) to skip installing runtime entries (e.g., Node.js) in CI environments [3][4]. - Fixes: Version 11.1.1 included fixes for installability validation in workspace projects, resolved issues with pnpm add for named registries, and updated @zkochan/cmd-shim to improve compatibility with Git Bash on Windows [2]. Security Advisories There are no specific security advisories listed for version 11.1.2. Users should monitor the official pnpm GitHub Security Advisories page for any future disclosures [5]. Recent security-related updates in the pnpm 11 series include: - Minimum Release Age: pnpm 11 introduced a default Minimum Release Age of 24 hours (1440 minutes), which prevents the installation of newly published package versions to mitigate supply chain attacks [6][7][8]. - Enhanced Auditing: pnpm audit now queries the registry's bulk security advisories endpoint and filters by GitHub Advisory ID (GHSA) rather than CVE identifiers [9]. - Security Hardening: pnpm 11 requires Node.js 22+ and is distributed as pure ESM [10][11]. It also includes improved control over lifecycle scripts via the allowBuilds model [7][8]. For the most up-to-date information, always check the official pnpm releases page on GitHub and the security advisories section [12][5].

Citations:

1: https://www.npmjs.com/package/pnpm?activeTab=versions

2: https://github.com/pnpm/pnpm/releases/tag/v11.1.1

3: https://pnpm.io/blog/releases/11.1

4: https://newreleases.io/project/npm/pnpm/release/11.1.0

5: https://github.com/pnpm/pnpm/security/advisories

6: https://gbhackers.com/pnpm-11-enables-default-release-age-guard/

7: https://undercodenews.com/pnpm-11-reinvents-javascript-security-a-new-era-for-dependency-protection/

8: https://pnpm.io/supply-chain-security

9: https://pnpm.io/cli/audit

10: https://github.com/pnpm/pnpm/releases/tag/v11.0.0

11: https://pnpm.io/blog/releases/11.0

12: https://github.com/pnpm/pnpm/releases

Review pnpm 11 migration requirements before merging.

This major version upgrade introduces breaking changes that require configuration updates and environment adjustments:

Configuration files: Settings in package.json's pnpm field must move to pnpm-workspace.yaml. Update .npmrc to contain only auth and registry settings.

Node.js requirement: pnpm 11 requires Node.js 22+. Verify your project's .nvmrc and CI configuration specify a compatible version.

Environment variables: Any npm_config_* variables must be renamed to pnpm_config_*.

Script behavior: Scripts named clean, setup, deploy, or rebuild now shadow built-in commands; use pnpm pm to access built-in versions.

Run the migration codemod to automate configuration changes:

pnpx codemod run pnpm-v10-to-v11

Refer to https://pnpm.io/11.x/migration for the complete migration guide. Manual review is needed for environment variable updates that the codemod cannot automate.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@package.json` at line 6, The package.json currently sets "packageManager": "pnpm@11.1.2" but pnpm v11 requires config and environment changes; run the recommended codemod (pnpx codemod run pnpm-v10-to-v11) and then: move any settings under the package.json "pnpm" field into pnpm-workspace.yaml, strip .npmrc to only auth/registry entries, update .nvmrc and CI to Node.js 22+ to match pnpm v11, rename any environment variables from npm_config_* to pnpm_config_ and manually review remaining envs, and rename or invoke scripts named clean/setup/deploy/rebuild using pnpm pm to avoid shadowing built-ins.

skulidropek · 2026-06-19T19:15:56Z

Надо смержить сюда main ветку и исправить все ошибки в CI/CD что бы код был с актуальными библиотеками

konard · 2026-06-19T19:17:53Z

🤖 AI Work Session Started

Starting automated work session at 2026-06-19T19:17:51.406Z

The PR has been converted to draft mode while work is in progress.

This comment marks the beginning of an AI work session. Please wait for the session to finish, and provide your feedback.

konard · 2026-06-19T19:58:09Z

Update: the CI/CD fix is implemented and verified, but I cannot push it directly to this PR head branch.

Blocker:

PR fix(deps): update all dependencies #20 head is ProverCoderAI/openapi-effect:renovate/all.
Current GitHub credentials are konard and git push upstream renovate/all fails with 403 Permission to ProverCoderAI/openapi-effect.git denied to konard.

Prepared fix:

Commit: b16eac4b7948745fcd49d07e270b92f77b0ccb7d (fix(ci): adapt renovate update to pnpm 11)
Branch with the commit: konard/ProverCoderAI-openapi-effect:renovate/all

What the fix covers:

merged main into renovate/all locally;
moved pnpm 11 config from package.json#pnpm into pnpm-workspace.yaml and kept release-age policy with exact excludes;
pinned pnpm/action-setup to full SHA 0ebf47130e4866e96fce0953f49152a61190b271 (v6.0.9);
updated CI Node runtime to 24.17.0 so pnpm 11 can load node:sqlite;
fixed TypeScript 6/lint fallout while preserving legacy public aliases;
added consumer compile proof for the legacy serializer aliases.

Verification:

Local: pnpm install --frozen-lockfile && pnpm check && pnpm build && pnpm lint:effect && pnpm test && pnpm --filter @prover-coder-ai/openapi-effect test:consumer && pnpm dlx @prover-coder-ai/dist-deps-prune scan --package ./packages/app/package.json --prune-dev true --silent passed with Node 24.17.0 / pnpm 11.8.0.
Fork CI Check passed: https://github.com/konard/ProverCoderAI-openapi-effect/actions/runs/27845776274
Fork CI Checking Dependencies passed: https://github.com/konard/ProverCoderAI-openapi-effect/actions/runs/27845776279

Needed human action: either grant/push access to ProverCoderAI/openapi-effect:renovate/all, or cherry-pick b16eac4b7948745fcd49d07e270b92f77b0ccb7d from the fork branch into the PR head branch.

konard · 2026-06-19T19:59:20Z

🤖 Solution Draft Log

This log file contains the complete execution trace of the AI solution draft process.

💰 Cost estimation:

Model: GPT-5.5
Provider: OpenAI
Public pricing estimate: $21.304392

📊 Context and tokens usage:

508.9K / 200K (254%) input tokens, 68.4K / 128K (53%) output tokens

Total: (508.9K + 13.1M cached) input tokens, 68.4K output tokens, $21.304392 cost

🤖 Models used:

Tool: OpenAI Codex
Requested: gpt-5.5
Thinking level: max (~31999 tokens)
Model: GPT-5.5 (gpt-5.5)

📎 Log file uploaded as Repository (75696KB)

View complete solution draft log

Now working session is ended, feel free to review and add any feedback on the solution draft.

konard · 2026-06-19T20:01:31Z

🔄 Auto-restart triggered (iteration 1)

Reason: CI failures detected

Starting new session to address the issues.

Auto-restart-until-mergeable mode is active. This run will stop after 5 restart iterations.

konard · 2026-06-19T20:09:42Z

Rechecked the failing CI/CD status in this restart session.

Findings:

Latest upstream PR runs are still for old SHA 48c4a8472fb0d70d3d48c14f5963a2d421a90ec7 from 2026-06-19T13:11:52Z.
Logs saved locally during investigation show the failures are from pnpm 11 running on Node 20.16.0 / 22.12.0 and from pnpm 11 ignoring package.json#pnpm, causing minimumReleaseAge violations.
The prepared fix commit is still b16eac4b7948745fcd49d07e270b92f77b0ccb7d on konard/ProverCoderAI-openapi-effect:renovate/all.

Verification repeated locally with Node 24.17.0 and pnpm 11.8.0:

pnpm install --frozen-lockfile
pnpm check
pnpm build
pnpm lint:effect
pnpm lint
pnpm test
pnpm --filter @prover-coder-ai/openapi-effect test:consumer
pnpm dlx @prover-coder-ai/dist-deps-prune scan --package ./packages/app/package.json --prune-dev true --silent
snapshot fallback artifact check via npm pack

Fork CI also has successful runs for b16eac4: Check 27845776274, Checking Dependencies 27845776279.

Remaining blocker is repository permissions, not code: git push upstream renovate/all still fails with 403 Permission to ProverCoderAI/openapi-effect.git denied to konard. Please either grant push access to ProverCoderAI/openapi-effect:renovate/all or cherry-pick/push b16eac4b7948745fcd49d07e270b92f77b0ccb7d from the fork branch into the upstream PR head branch.

konard · 2026-06-19T20:11:08Z

🔄 Auto-restart-until-mergeable Log (iteration 1)

This log file contains the complete execution trace of the AI solution draft process.

💰 Cost estimation:

Model: GPT-5.5
Provider: OpenAI
Public pricing estimate: $4.197492
Token usage: 93,621 input, 17,194 output, 5,819 reasoning, 2,487,552 cache read

🤖 Models used:

Tool: OpenAI Codex
Requested: gpt-5.5
Model: GPT-5.5 (gpt-5.5)

📎 Log file uploaded as Repository (96784KB)

View complete solution draft log

Now working session is ended, feel free to review and add any feedback on the solution draft.

konard · 2026-06-19T20:13:21Z

🔄 Auto-restart triggered (iteration 2)

Reason: CI failures detected

Starting new session to address the issues.

Auto-restart-until-mergeable mode is active. This run will stop after 5 restart iterations.

konard · 2026-06-19T20:22:22Z

Rechecked and updated the prepared fix in this restart session.

Current prepared commit:

b52bed11666e71930f1d563062826936f36fd5f3 on konard/ProverCoderAI-openapi-effect:renovate/all
This includes the earlier CI/pnpm 11 fix plus a small follow-up commit fix(app): satisfy strict type lint example so lint:types also passes.

Root causes confirmed from upstream CI logs for old SHA 48c4a8472fb0d70d3d48c14f5963a2d421a90ec7:

Check/Snapshot: pnpm 11 ran under an old Node runtime and failed on node:sqlite / Node >= 22.13 requirement.
dist-deps-prune: pnpm 11 minimum release age policy rejected fresh lockfile entries.

Verification on current SHA b52bed1:

Local with Node 24.17.0 and pnpm 11.8.0: pnpm install --frozen-lockfile, pnpm check, pnpm build, pnpm lint, pnpm lint:effect, pnpm test, pnpm lint:tests, pnpm --filter @prover-coder-ai/openapi-effect lint:types, pnpm --filter @prover-coder-ai/openapi-effect test:consumer, pnpm dlx @prover-coder-ai/dist-deps-prune scan --package ./packages/app/package.json --prune-dev true --silent, and package pack check all passed.
Fork CI Check passed: https://github.com/konard/ProverCoderAI-openapi-effect/actions/runs/27846721442
Fork CI Checking Dependencies passed: https://github.com/konard/ProverCoderAI-openapi-effect/actions/runs/27846721454
Fork Snapshot is skipped by the workflow owner guard (github.repository_owner == 'ProverCoderAI'); the equivalent local pnpm build plus fallback npm pack artifact path passed.

Remaining blocker is repository permission, not code. git push upstream renovate/all still fails with:

remote: Permission to ProverCoderAI/openapi-effect.git denied to konard.
fatal: unable to access 'https://github.com/ProverCoderAI/openapi-effect.git/': The requested URL returned error: 403

Needed maintainer action: push/cherry-pick b52bed11666e71930f1d563062826936f36fd5f3 from the fork branch into ProverCoderAI/openapi-effect:renovate/all. Until that happens, PR #20 remains on the old upstream head SHA 48c4a8472fb0d70d3d48c14f5963a2d421a90ec7 and will keep showing stale failing checks.

konard · 2026-06-19T20:24:34Z

🔄 Auto-restart-until-mergeable Log (iteration 2)

This log file contains the complete execution trace of the AI solution draft process.

💰 Cost estimation:

Model: GPT-5.5
Provider: OpenAI
Public pricing estimate: $4.788024
Token usage: 95,677 input, 18,030 output, 5,431 reasoning, 3,019,904 cache read

🤖 Models used:

Tool: OpenAI Codex
Requested: gpt-5.5
Model: GPT-5.5 (gpt-5.5)

📎 Log file uploaded as Repository (2 chunks) (116514KB)

View complete solution draft log

Now working session is ended, feel free to review and add any feedback on the solution draft.

konard · 2026-06-19T20:26:47Z

🔄 Auto-restart triggered (iteration 3)

Reason: CI failures detected

Starting new session to address the issues.

Auto-restart-until-mergeable mode is active. This run will stop after 5 restart iterations.

konard · 2026-06-19T20:33:49Z

Restart iteration 3 rechecked the prepared CI fix.

Current verified head:

b52bed11666e71930f1d563062826936f36fd5f3 on konard/ProverCoderAI-openapi-effect:renovate/all
Local branch includes upstream/main via merge commit f43684a.
PR fix(deps): update all dependencies #20 still points to ProverCoderAI/openapi-effect:renovate/all@48c4a8472fb0d70d3d48c14f5963a2d421a90ec7, so its failing checks are stale for the old head.

Fresh upstream CI logs downloaded in this session confirm old-head root causes:

Check: pnpm 11 under Node 20.16.0 fails on node:sqlite / Node >= 22.13 requirement.
Snapshot: pnpm 11 under Node 22.12.0 fails the Node >= 22.13 requirement.
Checking Dependencies: pnpm 11 ignores package.json#pnpm and then fails minimumReleaseAge for the refreshed lockfile entries.

Verification repeated on b52bed1 with Node 24.17.0 and pnpm 11.8.0:

pnpm install --frozen-lockfile
pnpm check
pnpm build
pnpm lint
pnpm lint:effect
pnpm test
pnpm lint:tests
pnpm --filter @prover-coder-ai/openapi-effect lint:types
pnpm --filter @prover-coder-ai/openapi-effect test:consumer
pnpm dlx @prover-coder-ai/dist-deps-prune scan --package ./packages/app/package.json --prune-dev true --silent
snapshot fallback npm pack artifact path

Push blocker remains external:
git push upstream HEAD:renovate/all fails with 403 Permission to ProverCoderAI/openapi-effect.git denied to konard.

Needed maintainer action: push or cherry-pick b52bed11666e71930f1d563062826936f36fd5f3 from the fork branch into ProverCoderAI/openapi-effect:renovate/all.

konard · 2026-06-19T20:35:31Z

🔄 Auto-restart-until-mergeable Log (iteration 3)

This log file contains the complete execution trace of the AI solution draft process.

💰 Cost estimation:

Model: GPT-5.5
Provider: OpenAI
Public pricing estimate: $4.433867
Token usage: 92,361 input, 16,725 output, 5,362 reasoning, 2,757,632 cache read

🤖 Models used:

Tool: OpenAI Codex
Requested: gpt-5.5
Model: GPT-5.5 (gpt-5.5)

📎 Log file uploaded as Repository (2 chunks) (139990KB)

View complete solution draft log

Now working session is ended, feel free to review and add any feedback on the solution draft.

konard · 2026-06-19T20:37:44Z

🔄 Auto-restart triggered (iteration 4)

Reason: CI failures detected

Starting new session to address the issues.

Auto-restart-until-mergeable mode is active. This run will stop after 5 restart iterations.

konard · 2026-06-19T20:44:12Z

Restart iteration 4 rechecked the CI/CD fix.

Current verified head:

b52bed11666e71930f1d563062826936f36fd5f3 on konard/ProverCoderAI-openapi-effect:renovate/all
upstream/main is merged into this branch.
PR fix(deps): update all dependencies #20 upstream head is still ProverCoderAI/openapi-effect:renovate/all@48c4a8472fb0d70d3d48c14f5963a2d421a90ec7, so the visible failing checks are still for the old head.

Fresh upstream logs downloaded in this session confirm the old-head failures:

Check: pnpm 11 runs under Node 20.16.0 and fails on node:sqlite / Node >= 22.13.
Snapshot: pnpm 11 runs under Node 22.12.0 and fails the Node >= 22.13 requirement.
Checking Dependencies: pnpm 11 rejects fresh lockfile entries through minimumReleaseAge.

Verification repeated locally on b52bed1 with Node 24.17.0 and pnpm 11.8.0:

pnpm install --frozen-lockfile
pnpm check
pnpm build
pnpm lint
pnpm lint:effect
pnpm test
pnpm lint:tests
pnpm --filter @prover-coder-ai/openapi-effect lint:types
pnpm --filter @prover-coder-ai/openapi-effect test:consumer
pnpm dlx @prover-coder-ai/dist-deps-prune scan --package ./packages/app/package.json --prune-dev true --silent
snapshot fallback artifact check via npm pack

Push status:

git push origin HEAD:renovate/all: up to date.
git push upstream HEAD:renovate/all: blocked with 403 Permission to ProverCoderAI/openapi-effect.git denied to konard.

Needed maintainer action: push or cherry-pick b52bed11666e71930f1d563062826936f36fd5f3 from konard/ProverCoderAI-openapi-effect:renovate/all into ProverCoderAI/openapi-effect:renovate/all. Until then PR #20 cannot receive fresh CI for the verified fix.

konard · 2026-06-19T20:45:53Z

🔄 Auto-restart-until-mergeable Log (iteration 4)

This log file contains the complete execution trace of the AI solution draft process.

💰 Cost estimation:

Model: GPT-5.5
Provider: OpenAI
Public pricing estimate: $4.654120
Token usage: 127,152 input, 17,640 output, 5,582 reasoning, 2,588,800 cache read

🤖 Models used:

Tool: OpenAI Codex
Requested: gpt-5.5
Model: GPT-5.5 (gpt-5.5)

📎 Log file uploaded as Repository (2 chunks) (154923KB)

View complete solution draft log

Now working session is ended, feel free to review and add any feedback on the solution draft.

konard · 2026-06-19T20:48:07Z

🔄 Auto-restart triggered (iteration 5)

Reason: CI failures detected

Starting new session to address the issues.

Auto-restart-until-mergeable mode is active. This run will stop after 5 restart iterations.

konard · 2026-06-19T20:54:43Z

Restart iteration 5 rechecked the CI/CD failures and the prepared fix.

Current verified fix:

b52bed11666e71930f1d563062826936f36fd5f3 on konard/ProverCoderAI-openapi-effect:renovate/all
This branch includes upstream/main and has origin/renovate/all up to date.

Fresh upstream CI status:

PR fix(deps): update all dependencies #20 still points to ProverCoderAI/openapi-effect:renovate/all@48c4a8472fb0d70d3d48c14f5963a2d421a90ec7.
Latest upstream runs are still from 2026-06-19T13:11:52Z for that old SHA:
- Check 27827776411: failure
- Checking Dependencies 27827776440: failure
- Snapshot 27827776423: failure

Root causes confirmed from downloaded upstream logs:

Check jobs (Build, Types, Lint, Lint Effect-TS, Test) fail before project code because pnpm 11 runs under Node 20.16.0 and errors with No such built-in module: node:sqlite / Node >= 22.13 requirement.
Snapshot fails for the same pnpm 11 runtime requirement under Node 22.12.0.
dist-deps-prune fails with ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION for effect@3.21.4, eslint-plugin-sonarjs@4.1.0, and eslint-plugin-unicorn@68.0.0.

Verification repeated locally on b52bed1 with Node 24.17.0 and pnpm 11.8.0:

pnpm install --frozen-lockfile
pnpm check
pnpm build
pnpm lint
pnpm lint:effect
pnpm test
pnpm lint:tests
pnpm --filter @prover-coder-ai/openapi-effect lint:types
pnpm --filter @prover-coder-ai/openapi-effect test:consumer
pnpm dlx @prover-coder-ai/dist-deps-prune scan --package ./packages/app/package.json --prune-dev true --silent
snapshot fallback artifact path via npm pack

Fork CI on b52bed1:

Check passed: https://github.com/konard/ProverCoderAI-openapi-effect/actions/runs/27846721442
Checking Dependencies passed: https://github.com/konard/ProverCoderAI-openapi-effect/actions/runs/27846721454
Snapshot skipped by the workflow owner guard (github.repository_owner == 'ProverCoderAI'); the equivalent local build plus fallback pack path passed.

Push status:

git push origin HEAD:renovate/all: up to date.
git push upstream HEAD:renovate/all: blocked with 403 Permission to ProverCoderAI/openapi-effect.git denied to konard.

Needed maintainer action: push or cherry-pick b52bed11666e71930f1d563062826936f36fd5f3 from konard/ProverCoderAI-openapi-effect:renovate/all into ProverCoderAI/openapi-effect:renovate/all. Until that upstream PR head moves off 48c4a84, the visible PR checks remain stale failures for the old commit.

konard · 2026-06-19T20:56:07Z

🔄 Auto-restart-until-mergeable Log (iteration 5)

This log file contains the complete execution trace of the AI solution draft process.

💰 Cost estimation:

Model: GPT-5.5
Provider: OpenAI
Public pricing estimate: $4.888533
Token usage: 166,658 input, 16,101 output, 4,054 reasoning, 2,497,408 cache read

🤖 Models used:

Tool: OpenAI Codex
Requested: gpt-5.5
Model: GPT-5.5 (gpt-5.5)

📎 Log file uploaded as Repository (2 chunks) (177139KB)

View complete solution draft log

Now working session is ended, feel free to review and add any feedback on the solution draft.

konard · 2026-06-19T20:58:19Z

⚠️ Auto-restart limit reached

Hive Mind stopped auto-restart-until-mergeable after 5 restart iterations.

Configured limit: 5
Remaining reason: CI failures detected

No further AI sessions will be started automatically for this run. Please review the remaining blockers manually or rerun with a higher --auto-restart-max-iterations value.

Auto-restart-until-mergeable stopped by the safety limit.

konard · 2026-06-19T20:58:26Z

🤖 AI Work Session Completed

Work session ended at 2026-06-19T20:58:19.771Z

The PR will be converted back to ready for review.

This comment marks the end of an AI work session. New comments after this time will be considered as feedback.

renovate Bot assigned skulidropek Feb 21, 2026

renovate Bot requested a review from skulidropek February 21, 2026 13:44

renovate Bot force-pushed the renovate/all branch from 61f06bc to 4c58bf8 Compare February 23, 2026 22:47

renovate Bot changed the title ~~fix(deps): update dependency effect to ^3.19.19~~ fix(deps): update all dependencies Feb 23, 2026

renovate Bot force-pushed the renovate/all branch 9 times, most recently from 52aba09 to 16d549f Compare March 2, 2026 17:40

renovate Bot force-pushed the renovate/all branch 10 times, most recently from f240877 to 3c2e51f Compare March 9, 2026 23:06

renovate Bot force-pushed the renovate/all branch 7 times, most recently from 9456c54 to 0ff8d9f Compare March 17, 2026 14:38

renovate Bot force-pushed the renovate/all branch 5 times, most recently from 6ff8486 to 4c77644 Compare April 24, 2026 02:39

coderabbitai Bot requested changes May 14, 2026

View reviewed changes

coderabbitai Bot requested changes May 17, 2026

View reviewed changes

fix(deps): update all dependencies

25eae87

Conversation

renovate Bot commented Feb 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v2.6.2

Minor Changes

Correctness

Suspicious

Security

Performance

Complexity

Style

Markdown parser

Markdown formatter

Markdown linter

Markdown snippets

Patch Changes

Configuration

Uh oh!

coderabbitai Bot commented May 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Reviews paused

Changes

Estimated code review effort

Possibly related issues

Uh oh!

coderabbitai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

coderabbitai Bot May 14, 2026

Choose a reason for hiding this comment

Uh oh!

coderabbitai Bot May 14, 2026

Choose a reason for hiding this comment

Uh oh!

coderabbitai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

coderabbitai Bot May 17, 2026

Choose a reason for hiding this comment

Uh oh!

skulidropek commented Jun 19, 2026

Uh oh!

konard commented Jun 19, 2026

Uh oh!

konard commented Jun 19, 2026

Uh oh!

konard commented Jun 19, 2026

🤖 Solution Draft Log

💰 Cost estimation:

📊 Context and tokens usage:

🤖 Models used:

📎 Log file uploaded as Repository (75696KB)

Uh oh!

konard commented Jun 19, 2026

🔄 Auto-restart triggered (iteration 1)

Uh oh!

konard commented Jun 19, 2026

Uh oh!

konard commented Jun 19, 2026

🔄 Auto-restart-until-mergeable Log (iteration 1)

💰 Cost estimation:

🤖 Models used:

📎 Log file uploaded as Repository (96784KB)

Uh oh!

konard commented Jun 19, 2026

🔄 Auto-restart triggered (iteration 2)

Uh oh!

konard commented Jun 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

konard commented Jun 19, 2026

🔄 Auto-restart-until-mergeable Log (iteration 2)

💰 Cost estimation:

🤖 Models used:

📎 Log file uploaded as Repository (2 chunks) (116514KB)

Uh oh!

konard commented Jun 19, 2026

🔄 Auto-restart triggered (iteration 3)

renovate Bot commented Feb 21, 2026 •

edited

Loading

`v2.6.2`

coderabbitai Bot commented May 14, 2026 •

edited

Loading

konard commented Jun 19, 2026 •

edited

Loading

konard commented Jun 19, 2026 •

edited

Loading