@effected/github-actions 0.17.1 → 0.18.1

package/Action.js

@@ -6,7 +6,7 @@ import { ActionOutputs } from "./ActionOutputs.js";
 import { ActionState } from "./ActionState.js";
 import { NodeServices } from "@effect/platform-node";
 import { Cause, Effect, Exit, Layer, Option, Result } from "effect";
-import { FetchHttpClient } from "effect/unstable/http";
+import { FetchHttpClient } from "effect/http";
 
 //#region src/Action.ts
 /**

package/ActionCache.js

@@ -8,10 +8,10 @@ import { sha256Hex } from "./internal/digest.js";
 import { isWindowsRunner } from "./internal/runner.js";
 import { spawnOnce } from "./internal/spawn.js";
 import { Context, Effect, FileSystem, Layer, Option, Path, Schema } from "effect";
-import { HttpClient } from "effect/unstable/http";
+import { HttpClient } from "effect/http";
 import { BlobClient, BlockBlobClient } from "@azure/storage-blob";
 import { GlobPattern, GlobSet } from "@effected/glob";
-import { ChildProcess, ChildProcessSpawner } from "effect/unstable/process";
+import { ChildProcess, ChildProcessSpawner } from "effect/process";
 
 //#region src/ActionCache.ts
 /**

package/Artifact.js

@@ -8,9 +8,9 @@ import { isWindowsRunner } from "./internal/runner.js";
 import { spawnOnce } from "./internal/spawn.js";
 import { unzipCommand, zipCommand, zipManifest } from "./internal/archiveCommands.js";
 import { Context, Effect, FileSystem, Layer, Option, Path, Result, Schema } from "effect";
-import { HttpClient } from "effect/unstable/http";
+import { HttpClient } from "effect/http";
 import { BlobClient, BlockBlobClient } from "@azure/storage-blob";
-import { ChildProcessSpawner } from "effect/unstable/process";
+import { ChildProcessSpawner } from "effect/process";
 
 //#region src/Artifact.ts
 /**

package/BlobStore.githubCache.js

@@ -7,7 +7,7 @@ import { sha256Hex } from "./internal/digest.js";
 import { BlobEnvelope } from "./BlobEnvelope.js";
 import { BlobStore, BlobStoreError } from "./BlobStore.js";
 import { Effect, Layer, Option } from "effect";
-import { HttpClient } from "effect/unstable/http";
+import { HttpClient } from "effect/http";
 import { BlobClient, BlockBlobClient } from "@azure/storage-blob";
 
 //#region src/BlobStore.githubCache.ts

package/BlobStore.js

@@ -3,7 +3,7 @@ import { BlobEnvelope } from "./BlobEnvelope.js";
 import { sign } from "./internal/sigv4.js";
 import { Secret } from "./Secret.js";
 import { Context, Effect, Layer, Option, Schema } from "effect";
-import { HttpClient, HttpClientRequest } from "effect/unstable/http";
+import { HttpClient, HttpClientRequest } from "effect/http";
 
 //#region src/BlobStore.ts
 /**

package/CacheKey.js

@@ -53,7 +53,7 @@ const MAX_KEY_LENGTH = 512;
 * Commas and newlines are refused because the runner uses both to delimit the
 * restore-key list — a segment carrying one would silently become two keys.
 */
-const Segment = Schema.String.check(Schema.isPattern(/^[^,\n\r]+$/));
+const Segment = Schema.String.check(Schema.isPattern(/^[^,\n\r]+$/u));
 const Segments = Schema.NonEmptyArray(Segment).check(Schema.makeFilter((values) => values.join(SEPARATOR).length <= MAX_KEY_LENGTH, { title: `a cache key of at most ${MAX_KEY_LENGTH} characters` }));
 /**
 * One explicit rung: how many leading segments it keeps. The upper bound is

package/ChildEnv.js

@@ -83,7 +83,7 @@ var ChildEnv = class ChildEnv {
 	* @example
 	* ```ts
 	* import { ChildEnv } from "@effected/github-actions";
-	* import { ChildProcess } from "effect/unstable/process";
+	* import { ChildProcess } from "effect/process";
 	*
 	* const command = ChildProcess.make("pnpm", ["install"], {
 	*   ...ChildEnv.prependPath(["/opt/hostedtoolcache/pnpm/10.13.1/x64/bin"], {

package/DetachedProcess.js

@@ -1,8 +1,8 @@
 import { unstubbed } from "./internal/unstubbed.js";
 import { isErrno } from "./internal/fsProbe.js";
 import { Effect, Schedule, Schema } from "effect";
-import { HttpClient } from "effect/unstable/http";
-import { ChildProcessSpawner } from "effect/unstable/process";
+import { HttpClient } from "effect/http";
+import { ChildProcessSpawner } from "effect/process";
 import { spawn } from "node:child_process";
 import { closeSync, openSync } from "node:fs";
 

package/ManagedDocument.js

@@ -12,7 +12,7 @@ import { CommentStyle, SectionDialect, SectionDocument, SectionId } from "@effec
 * key written to the wire (`namespace.key.region`), and a dot inside a part
 * would make two different documents spell the same marker.
 */
-const NamePart = Schema.String.check(Schema.isPattern(/^[A-Za-z0-9][A-Za-z0-9_-]*$/));
+const NamePart = Schema.String.check(Schema.isPattern(/^[A-Za-z0-9][A-Za-z0-9_-]*$/u));
 /**
 * The marker vocabulary every managed document is written with: HTML comments
 * — the one comment style GitHub renders invisibly — and a phrase distinct

package/OidcTokenIssuer.js

@@ -2,8 +2,8 @@ import { ActionEnvironment } from "./ActionEnvironment.js";
 import { unstubbed } from "./internal/unstubbed.js";
 import { payloadOf, unsignedJwt } from "./internal/jwt.js";
 import { Context, Effect, Layer, Redacted, Schema } from "effect";
-import { HttpClient, HttpClientRequest } from "effect/unstable/http";
-import * as HttpClientResponse from "effect/unstable/http/HttpClientResponse";
+import { HttpClient, HttpClientRequest } from "effect/http";
+import * as HttpClientResponse from "effect/http/HttpClientResponse";
 
 //#region src/OidcTokenIssuer.ts
 /**

package/PackageManagerInstaller.js

@@ -6,7 +6,7 @@ import { typeAt } from "./internal/fsProbe.js";
 import { PNPM_EXE_PREFIX, detectMusl, isNodeScript, pnpmExeTarget, strongestSri } from "./internal/pnpmExe.js";
 import { ToolInstaller } from "./ToolInstaller.js";
 import { Context, Effect, FileSystem, Layer, Option, Path, Schema } from "effect";
-import { ChildProcess, ChildProcessSpawner } from "effect/unstable/process";
+import { ChildProcess, ChildProcessSpawner } from "effect/process";
 import { CorepackIntegrityHash, DEFAULT_REGISTRY, PackageManagerPin, PackageManagerPinName } from "@effected/npm";
 
 //#region src/PackageManagerInstaller.ts

package/ToolInstaller.js

@@ -5,8 +5,8 @@ import { spawnOnce } from "./internal/spawn.js";
 import { tarExtractCommand, unzipCommand } from "./internal/archiveCommands.js";
 import { isErrno, typeAt } from "./internal/fsProbe.js";
 import { Context, Effect, FileSystem, Layer, Option, Path, Schedule, Schema, Stream } from "effect";
-import { HttpClient } from "effect/unstable/http";
-import { ChildProcessSpawner } from "effect/unstable/process";
+import { HttpClient } from "effect/http";
+import { ChildProcessSpawner } from "effect/process";
 
 //#region src/ToolInstaller.ts
 /**

package/index.d.ts

@@ -1,7 +1,7 @@
 import { NodeServices } from "@effect/platform-node";
 import { Cause, Config, ConfigProvider, Context, Duration, Effect, FileSystem, Layer, Logger, Option, Path, Redacted, Result, Schema } from "effect";
-import { HttpClient } from "effect/unstable/http";
-import { ChildProcessSpawner } from "effect/unstable/process";
+import { HttpClient } from "effect/http";
+import { ChildProcessSpawner } from "effect/process";
 import { IdentityToken, SlsaProvenance } from "@effected/sbom";
 import { BotIdentity, GitHubApp, GitHubClient, InstallationToken, PermissionLevel, RetryPolicy } from "@effected/github";
 import { IntegrityHashBrand, PackageManagerPin } from "@effected/npm";
@@ -3205,7 +3205,7 @@ export declare class ChildEnv {
    * @example
    * ```ts
    * import { ChildEnv } from "@effected/github-actions";
-   * import { ChildProcess } from "effect/unstable/process";
+   * import { ChildProcess } from "effect/process";
    *
    * const command = ChildProcess.make("pnpm", ["install"], {
    *   ...ChildEnv.prependPath(["/opt/hostedtoolcache/pnpm/10.13.1/x64/bin"], {

package/internal/archiveCommands.js

@@ -1,4 +1,4 @@
-import { ChildProcess } from "effect/unstable/process";
+import { ChildProcess } from "effect/process";
 
 //#region src/internal/archiveCommands.ts
 /**
@@ -62,7 +62,7 @@ import { ChildProcess } from "effect/unstable/process";
 * one is doubled — the only escape a single-quoted PowerShell literal has.
 *
 * Pure: no filesystem, no environment, no spawn. `internal/spawn.ts` is the
-* execution half. Reaches `effect/unstable/process` alone, so it is safe for
+* execution half. Reaches `effect/process` alone, so it is safe for
 * any module to import (`__test__/reachability.test.ts`).
 *
 * @internal

package/internal/digest.js

@@ -1,5 +1,6 @@
-import { Effect, Encoding, Stream } from "effect";
+import { Effect, Stream } from "effect";
 import { createHash } from "node:crypto";
+import * as Hex from "effect/encoding/Hex";
 
 //#region src/internal/digest.ts
 /**
@@ -37,7 +38,7 @@ const digestFile = (fs, file, algorithm) => Effect.suspend(() => {
 	})).pipe(Effect.map(() => new Uint8Array(accumulator.digest())));
 });
 /** {@link digestFile}, as hex. @internal */
-const digestFileHex = (fs, file, algorithm) => Effect.map(digestFile(fs, file, algorithm), Encoding.encodeHex);
+const digestFileHex = (fs, file, algorithm) => Effect.map(digestFile(fs, file, algorithm), Hex.encode);
 
 //#endregion
 export { digestFile, digestFileHex, sha256, sha256Hex };

package/internal/jwt.js

@@ -1,4 +1,5 @@
-import { Encoding, Result } from "effect";
+import { Result } from "effect";
+import * as Base64Url from "effect/encoding/Base64Url";
 
 //#region src/internal/jwt.ts
 /**
@@ -12,7 +13,7 @@ import { Encoding, Result } from "effect";
 * elsewhere (`OidcTokenIssuer`); neither authorizes anything on the strength
 * of the claim alone. Do not "fix" it here.
 *
-* Core `Encoding` does the base64url work, so no `Buffer` is involved: it is
+* Core `Base64Url` does the base64url work, so no `Buffer` is involved: it is
 * strict about the alphabet where Node's decoder is forgiving, which is why
 * there is a test whose payload actually contains `-` and `_`.
 *
@@ -31,7 +32,7 @@ const payloadOf = (token) => {
 		kind: "segments",
 		detail: `expected three segments, got ${segments.length}`
 	});
-	const json = Encoding.decodeBase64UrlString(payload);
+	const json = Base64Url.decodeString(payload);
 	if (Result.isFailure(json)) return Result.fail({
 		kind: "payload",
 		detail: "the payload is not base64url JSON",
@@ -55,7 +56,7 @@ const payloadOf = (token) => {
 * @internal
 */
 const unsignedJwt = (header, payload) => {
-	const segment = (value) => Encoding.encodeBase64Url(JSON.stringify(value));
+	const segment = (value) => Base64Url.encode(JSON.stringify(value));
 	return `${segment(header)}.${segment(payload)}.unsigned`;
 };
 

package/internal/pnpmExe.js

@@ -1,4 +1,6 @@
-import { Encoding, Option, Result } from "effect";
+import { Option, Result } from "effect";
+import * as Hex from "effect/encoding/Hex";
+import * as Base64 from "effect/encoding/Base64";
 
 //#region src/internal/pnpmExe.ts
 /**
@@ -105,10 +107,10 @@ const strongestSri = (integrity) => {
 		const algorithm = entry.slice(0, dash).toLowerCase();
 		if (!SRI_ALGORITHMS.includes(algorithm)) return [];
 		const digest = entry.slice(dash + 1).split("?")[0] ?? "";
-		const decoded = Encoding.decodeBase64(digest);
+		const decoded = Base64.decode(digest);
 		return Result.isSuccess(decoded) ? [{
 			algorithm,
-			hex: Encoding.encodeHex(decoded.success)
+			hex: Hex.encode(decoded.success)
 		}] : [];
 	});
 	for (const algorithm of SRI_ALGORITHMS) {

package/internal/twirp.js

@@ -1,5 +1,5 @@
 import { Effect, Schedule } from "effect";
-import { HttpClientRequest } from "effect/unstable/http";
+import { HttpClientRequest } from "effect/http";
 
 //#region src/internal/twirp.ts
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@effected/github-actions",
-	"version": "0.17.1",
+	"version": "0.18.1",
 	"private": false,
 	"description": "The GitHub Actions runtime: env, inputs, outputs, state, logging, cache, artifacts, blob storage, OIDC and the token bridge.",
 	"keywords": [
@@ -39,18 +39,18 @@
 	},
 	"dependencies": {
 		"@azure/storage-blob": "^12.33.0",
-		"@effected/github": "^0.13.0",
-		"@effected/glob": "^0.8.0",
-		"@effected/markdown": "^0.13.0",
-		"@effected/npm": "^0.18.0",
-		"@effected/sbom": "^0.8.1",
-		"@effected/semver": "^0.9.0",
-		"@effected/templates": "^0.8.0",
-		"@effected/walker": "^0.12.0"
+		"@effected/github": "^0.14.0",
+		"@effected/glob": "^0.9.0",
+		"@effected/markdown": "^0.14.0",
+		"@effected/npm": "^0.19.0",
+		"@effected/sbom": "^0.9.1",
+		"@effected/semver": "^0.10.1",
+		"@effected/templates": "^0.9.1",
+		"@effected/walker": "^0.13.0"
 	},
 	"peerDependencies": {
-		"@effect/platform-node": "4.0.0-rc.117",
-		"effect": "4.0.0-rc.117"
+		"@effect/platform-node": "4.0.0-rc.118",
+		"effect": "4.0.0-rc.118"
 	},
 	"engines": {
 		"node": ">=24.11.0"