chore(deps): bump unthrown from 5.1.0 to 5.5.0

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps unthrown from 5.1.0 to 5.5.0.

Release notes

Sourced from unthrown's releases.

unthrown@5.5.0

No release notes provided.

unthrown@5.4.0

Minor Changes

• d892c07: Breaking, released as a minor. Remove four matcher patterns from P: P.any, P.string, P.number and P.union. Code using any of them stops compiling; the rewrites are mechanical and listed below.

  P.any was a bare alias for P._ — two names for one concept, the same duplication the unwrap* / orElse aliases were removed for in v5. The other three had no use the remaining surface does not already cover: a primitive-type wildcard is P.when with a typeof guard, and grouping patterns under one handler is what a .with(a, b, handler) arm does. None of the four appeared anywhere in the library, its satellites, or the runnable examples/ packages outside their own tests.

  P now carries _, tag, instanceOf and when.

  Migrating:

  // P.any → P._
  matcher.with(P._, handler);
  // P.string / P.number → P.when with a typeof guard
  matcher.with(
  P.when((v): v is string => typeof v === "string"),
  handler,
  );
  // P.union(a, b) → a grouped arm, which is the same thing
  matcher.with(P.tag("A"), P.tag("B"), handler);

  @unthrown/oxlint's no-catch-all-pattern still reports P.any: the rule also covers a P imported straight from ts-pattern, where the alias remains.

Patch Changes

• d892c07: Fix a fromExecutor hang: a non-Result whose then getter throws, handed to settle from asynchronous code, left the AsyncResult unsettled forever.

  settle runs in the caller's own turn, outside the try that guards the executor body, so the thenable probe on the value about to be discarded was the one unguarded isThenable call in the library. A hostile then getter — a Proxy get trap, or a throwing accessor — escaped into that turn as an unhandled error before resolve was reached, so the promise behind the AsyncResult never settled and every await on it hung.

... (truncated)

Changelog

Sourced from unthrown's changelog.

5.5.0

5.4.0

Minor Changes

• d892c07: Breaking, released as a minor. Remove four matcher patterns from P: P.any, P.string, P.number and P.union. Code using any of them stops compiling; the rewrites are mechanical and listed below.

  P.any was a bare alias for P._ — two names for one concept, the same duplication the unwrap* / orElse aliases were removed for in v5. The other three had no use the remaining surface does not already cover: a primitive-type wildcard is P.when with a typeof guard, and grouping patterns under one handler is what a .with(a, b, handler) arm does. None of the four appeared anywhere in the library, its satellites, or the runnable examples/ packages outside their own tests.

  P now carries _, tag, instanceOf and when.

  Migrating:

  // P.any → P._
  matcher.with(P._, handler);
  // P.string / P.number → P.when with a typeof guard
  matcher.with(
  P.when((v): v is string => typeof v === "string"),
  handler,
  );
  // P.union(a, b) → a grouped arm, which is the same thing
  matcher.with(P.tag("A"), P.tag("B"), handler);

  @unthrown/oxlint's no-catch-all-pattern still reports P.any: the rule also covers a P imported straight from ts-pattern, where the alias remains.

Patch Changes

• d892c07: Fix a fromExecutor hang: a non-Result whose then getter throws, handed to settle from asynchronous code, left the AsyncResult unsettled forever.

  settle runs in the caller's own turn, outside the try that guards the executor body, so the thenable probe on the value about to be discarded was the one unguarded isThenable call in the library. A hostile then getter — a Proxy get trap, or a throwing accessor — escaped into that turn as an unhandled error before resolve was reached, so the promise behind the AsyncResult never settled and every await on it hung.

... (truncated)

Commits

• cbadb6c chore: release packages (#229)
• ec5d9d4 chore: release packages (#224)
• d892c07 refactor: cut over-engineering found by a repo-wide audit (#223)
• d98dbf8 chore: release packages (#220)
• de9486c feat(core): add fromExecutor, a callback-API boundary (#222)
• 56410c2 chore: release packages (#212)
• 3eef964 feat(oxlint): add the no-get-or-throw rule (#211)
• e5d50fa chore: upgrade to TypeScript 7, and move TypeDoc into the docs workspace (#197)
• d5abbb1 docs: break collapsed chains in examples with a narrower markdown width (#181)
• See full diff in compare view

[btravers]

@copilot unthrown and @unthrown/* must be updated in a single PR, fix dependabot file and fix this MR

maybe we forget other groups, feel free to fix them too

[Copilot]

@copilot unthrown and @unthrown/* must be updated in a single PR, fix dependabot file and fix this MR

maybe we forget other groups, feel free to fix them too

Addressed in 1fc86dc: the PR now bumps the remaining @unthrown/* catalog entries to 5.5.0, refreshes the lockfile, and adds a Dependabot group so unthrown and @unthrown/* update together going forward.