chore(deps-dev): bump sury from 11.0.0-alpha.4 to 11.0.0-rc.2

[dependabot]

Bumps sury from 11.0.0-alpha.4 to 11.0.0-rc.2.

Release notes

Sourced from sury's releases.

v11.0.0-rc.2

What's Changed

Polished Custom Codecs

When no built-in conversion fits, pass your own decode and encode:

- const schema = S.string.with(
-   S.to,
-   S.number,
-   (string) => parseInt(string, 10),
-   (number) => number.toString(),
- });
+ const schema = S.string.with(S.to, S.number, {
+   decode: (string) => parseInt(string, 10),
+   encode: (number) => number.toString(),
+ });
S.parser(schema)("123"); //? 123

S.parser(schema)("abc"); //? NaN (invalid)


S.parser(schema)("abc"); //? throws: Expected number, received NaN
S.encoder(schema)(123); //? "123"

Unlike the previous versions, the result of decode is validated by the target schema, so a coder that returns the wrong thing fails right there instead of leaking a bad value.

Besides a function, each direction accepts:

// "auto": keep the built-in conversion for that direction
S.string.with(S.to, S.string, { decode: (s) => s.trim(), encode: "auto" });
// "never": this direction is impossible, fail when an operation needs it
S.string.with(S.to, S.number, { decode: (s) => s.length, encode: "never" });
// {async: fn}: run with S.asyncParser / S.asyncEncoder
const user = S.schema({ id: S.uuid, name: S.string });
S.uuid.with(S.to, user, {
decode: { async: (id) => loadUser(id) },
encode: (user) => user.id,
});

Describe what you decode into. The target is what validates the coder's result, types the output, and exports to JSON Schema:

</tr></table> 

... (truncated)

Commits

• 037d952 Bump the published packages to 11.0.0-rc.2 (#395)
• a6d7f0c Compare union codegen to a sequential reference (#393)
• db231e0 Optimize jsonString for escape-free formats (#390)
• d958db4 Describe the document a JSON string carries in its JSON Schema (#386)
• a65897c Replace S.transform with S.to custom codec API (#356)
• 9d15597 Remove vs (Zod comparison) section from specs (#388)
• f2729ac Widen fromJSONSchema coverage, and close the review findings on it (#387)
• a8135e7 Stop linking libzstd into the macOS ppx, and verify the binaries before publi...
• 5380cee Release v11.0.0-rc.1: Update benchmarks and version references (#382)
• 99c459b bench(jsonstring): put Sury in the first column (#381)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Audit Failed

error: unknown subcommand "high" for bun audit
note: did you mean 'bun audit fix'?

Please review and address HIGH/CRITICAL vulnerabilities.