chore(deps): bump effect from 3.21.4 to 3.22.0 in the production-dependencies group

[dependabot]

Bumps the production-dependencies group with 1 update: effect.

Updates effect from 3.21.4 to 3.22.0

Release notes

Sourced from effect's releases.

effect@3.22.0

Minor Changes

• #6286 fffdee0 Thanks @​effect-bot! - Add Graph.successors and Graph.predecessors, deprecate Graph.neighborsDirected, and fix graph algorithm edge cases around reversal, undirected edge queries, shortest-path weight validation, topological sort initials, and strongly connected components.

effect@3.21.5

Patch Changes

• #6302 307d54a Thanks @​fubhy! - Allow cron fields like 5/15 to expand from the starting value through the field maximum.

• #6303 d95868a Thanks @​fubhy! - Fix Schedule.cron when the test clock is adjusted to infinity.

• #6285 95c7d2e Thanks @​chatman-media! - Fix Cron.next skipping earlier matching days when the upcoming day-of-month does not exist in the current month. For an expression like 0 0 1,16,31 * *, advancing from a date past the 16th selected day 31; in a month without 31 days this overflowed into the following month and landed on a later matching day (e.g. the 16th), silently skipping the 1st. Cron.next now wraps to the first matching day of the next month in that case, matching the behaviour of Cron.prev and other cron implementations.

• #6305 d24511f Thanks @​fubhy! - Fix cron parsing and scheduling edge cases for whitespace, Sunday 7, strict numeric tokens, explicit full day ranges, and month-constrained day-of-month / weekday matching.

Changelog

Sourced from effect's changelog.

3.22.0

Minor Changes

• #6286 fffdee0 Thanks @​effect-bot! - Add Graph.successors and Graph.predecessors, deprecate Graph.neighborsDirected, and fix graph algorithm edge cases around reversal, undirected edge queries, shortest-path weight validation, topological sort initials, and strongly connected components.

3.21.5

Patch Changes

• #6302 307d54a Thanks @​fubhy! - Allow cron fields like 5/15 to expand from the starting value through the field maximum.

• #6303 d95868a Thanks @​fubhy! - Fix Schedule.cron when the test clock is adjusted to infinity.

• #6285 95c7d2e Thanks @​chatman-media! - Fix Cron.next skipping earlier matching days when the upcoming day-of-month does not exist in the current month. For an expression like 0 0 1,16,31 * *, advancing from a date past the 16th selected day 31; in a month without 31 days this overflowed into the following month and landed on a later matching day (e.g. the 16th), silently skipping the 1st. Cron.next now wraps to the first matching day of the next month in that case, matching the behaviour of Cron.prev and other cron implementations.

• #6305 d24511f Thanks @​fubhy! - Fix cron parsing and scheduling edge cases for whitespace, Sunday 7, strict numeric tokens, explicit full day ranges, and month-constrained day-of-month / weekday matching.

Commits

• e670e0f Version Packages (#6323)
• fffdee0 Release queue: minor (#6286)
• 11e0169 Version Packages (#6282)
• 3f0f9e0 upgrade tstyche to latest version (#6320)
• d24511f More closely adhere to vixie semantics for cron expressions (#6305)
• d95868a Fix Schedule.cron when the test clock is adjusted to infinity (#6303)
• 307d54a Allow cron fields like 5/15 (#6302)
• 95c7d2e fix(Cron): do not skip earlier days when the upcoming day is missing from the...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note

Bump effect dependency from 3.21.4 to 3.22.0

Updates the effect package to 3.22.0 in the lockfile (bun.lock).

^{Macroscope summarized daa54bf.}

---

Summary by cubic

Upgrade effect from 3.21.4 to 3.22.0 to pick up cron parsing/scheduling fixes and new graph APIs (Graph.successors, Graph.predecessors). Only bun.lock updated.

^{Written for commit daa54bf. Summary will update on new commits.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: daa54bf

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	effect@​3.21.4 ⏵ 3.22.0	-2		+1	+1

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm effect is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package.json → npm/effect@3.22.0 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/effect@3.22.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[pkg-pr-new]

Open in StackBlitz

bun add https://pkg.pr.new/@mynameistito/codex-usage@daa54bf

commit: daa54bf