fix(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@effect/cli (source)	^0.75.1 → ^0.75.2
@effect/cluster (source)	^0.58.2 → ^0.59.0
@effect/platform-node (source)	^0.106.0 → ^0.107.0
@effect/workflow (source)	^0.18.1 → ^0.18.2
@fedify/fedify (source)	^2.2.3 → ^2.2.4
@fedify/vocab (source)	^2.2.3 → ^2.2.4

cc @skulidropek

---

Release Notes

Effect-TS/effect (@​effect/cli)

v0.75.2

Compare Source

Patch Changes

• #​6213 1a63ec8 Thanks @​lihan3238! - fix(cli): replace all hyphens in shell completion command names

• #​6208 e71ba68 Thanks @​Zelys-DFKH! - Fix @effect/cli help output to use Ansi.blackBright instead of Ansi.black for Weak spans. The previous black foreground was invisible on dark terminal backgrounds.

Effect-TS/effect (@​effect/cluster)

v0.59.0

Compare Source

Minor Changes

• #​6255 26e1922 Thanks @​tim-smart! - Backport cluster shard group fixes: use available shard groups for SQL advisory lock numbering and route workflow durable clock/deferred messages through the owning workflow shard group.

Patch Changes

• Updated dependencies [e5998a4]:
  • @​effect/workflow@​0.18.2

Effect-TS/effect (@​effect/platform-node)

v0.107.0

Compare Source

Patch Changes

• Updated dependencies [26e1922]:
  • @​effect/cluster@​0.59.0
  • @​effect/platform-node-shared@​0.60.0

Effect-TS/effect (@​effect/workflow)

v0.18.2

Compare Source

Patch Changes

• #​6241 e5998a4 Thanks @​jcalem-rogo! - Forward the parent pointer when spawning a child workflow with discard: true

• Updated dependencies []:

  • @​effect/experimental@​0.60.0

fedify-dev/fedify (@​fedify/fedify)

v2.2.4

Compare Source

Released on June 4, 2026.

@​fedify/vocab-runtime

• Fixed validatePublicUrl() allowing special-use IPv4 ranges, such as
  shared address space, benchmarking, multicast, reserved, and documentation
  ranges, which could bypass private network protections in remote document
  loading. [CVE-2026-50131]

• Fixed validatePublicUrl() allowing IPv6 translation and tunneling
  prefixes, including NAT64, Teredo, and 6to4 addresses, which could bypass
  private network protections in remote document loading. [CVE-2026-50131]

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.