build(deps): bump the go group across 1 directory with 15 updates by dependabot[bot] · Pull Request #6959 · esengine/DeepSeek-Reasonix

dependabot · 2026-07-26T11:53:09Z

Bumps the go group with 11 updates in the / directory:

Package	From	To
charm.land/bubbles/v2	`2.1.0`	`2.1.1`
charm.land/bubbletea/v2	`2.0.7`	`2.0.8`
charm.land/lipgloss/v2	`2.0.4`	`2.0.5`
github.com/larksuite/oapi-sdk-go/v3	`3.9.5`	`3.9.9`
github.com/mattn/go-runewidth	`0.0.24`	`0.0.27`
github.com/pkg/sftp	`1.13.10`	`1.13.11`
github.com/spf13/pflag	`1.0.6`	`1.0.10`
github.com/yuin/goldmark	`1.8.2`	`1.8.4`
golang.org/x/image	`0.43.0`	`0.44.0`
golang.org/x/mod	`0.37.0`	`0.38.0`
golang.org/x/net	`0.56.0`	`0.57.0`

Updates charm.land/bubbles/v2 from 2.1.0 to 2.1.1

Release notes

Sourced from charm.land/bubbles/v2's releases.

v2.1.1

Lil’ Textarea Fix

This is a tiny patch to fix a bug in textarea where the prompt character could be missing styling on empty lines. That’s all for now!

Thanks for using Bubbles, Charm 🌞

Changelog

Fixed

d2b2217d6352ce04183623d66d4266115419733c: fix(textarea): apply prompt style on all lines, including fillers (@meowgorithm)

Docs

a13f110fba4f13ce5fe9bc7fd51619f5782077b9: docs: fix typo in README (#921) (@Rohan5commit)

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits

d2b2217 fix(textarea): apply prompt style on all lines, including fillers
0dafc72 chore(deps): bump actions/checkout from 6 to 7 in the all group (#1006)
492ed7d chore(deps): bump the all group with 2 updates (#1004)
40d145e chore(deps): bump the all group with 2 updates (#996)
8585ef8 chore(deps): bump github.com/sahilm/fuzzy in the all group (#969)
ef0090e chore: remove CODEOWNERS
6feda24 chore(deps): bump the all group with 3 updates (#958)
42130e8 chore(deps): bump github.com/mattn/go-runewidth in the all group (#952)
0d62ce2 chore(deps): bump dependabot/fetch-metadata from 2 to 3 in the all group (#953)
204774b chore(deps): bump github.com/mattn/go-runewidth in the all group (#945)
Additional commits viewable in compare view

Updates charm.land/bubbletea/v2 from 2.0.7 to 2.0.8

Release notes

Sourced from charm.land/bubbletea/v2's releases.

v2.0.8

Graphemes, schmraphemes

No terminal can render emojis perfectly, but we can try. This release improves some very specific edge cases around emoji rendering. Enjoy!

Changelog

db569adcb41d0eae251587e6a5f0cc3c7d77e8eb: fix(deps): bump ultraviolet for emoji-related rendering improvements

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits

fc707bb chore(examples): go mod tidy
db569ad chore(deps): bump ultraviolet for emoji-related rendering fixes
See full diff in compare view

Updates charm.land/lipgloss/v2 from 2.0.4 to 2.0.5

Release notes

Sourced from charm.land/lipgloss/v2's releases.

v2.0.5

Graphemes, Schmraphemes

If you’re using emojis in the terminal you're in for a rough ride. That said, we do what we can. This release brings some in some very specific edge case rendering improvements. Enjoy.

Enjoy!

Changelog

10f9584edb197ddbbfc789081d33b6fadaea5742: chore(deps): bump ultraviolet for emoji-related improvements

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits

5bd778d chore(deps): bump actions/checkout from 6 to 7 in the all group (#703)
f2a46ba chore(deps): bump golang.org/x/sys in the all group (#701)
See full diff in compare view

Updates github.com/larksuite/oapi-sdk-go/v3 from 3.9.5 to 3.9.9

Commits

ff207b7 Merge pull request #225 from larksuite/feature/support-preset-flag-in-registr...
7c0bc8b feat(registration): support preset flag in app addons
d4054fc Merge pull request #221 from larksuite/fix/fix-ws-client-data-race-between-pi...
578a85f fix(lint): drop json tags on unexported builder fields and remove unreachable...
70a13c4 fix(ws): synchronize Client config/conn fields to remove data race
b27f5d8 Merge pull request #219 from larksuite/codex/add-node-sdk-72280154-params
4967446 feat: support registration app addons
164712c Merge pull request #213 from larksuite/feat/content-v2-support
See full diff in compare view

Updates github.com/mattn/go-runewidth from 0.0.24 to 0.0.27

Commits

f2d8bfe Merge pull request #103 from mattn/restore-zerowidthjoiner
2cd35a6 Restore ZeroWidthJoiner as a deprecated no-op
b2badb7 Avoid ambiguous-width prefix in TruncatePrefix test
a1307e2 Add TruncatePrefix tests for multi-rune grapheme clusters
9beccfd Merge pull request #79 from umlx5h/add_truncate_prefix
0b200cc Merge pull request #97 from mattn/perf/precomputed-width-lut
fc57c61 Merge pull request #93 from apocelipes/feat-optimize-fill
2e05c0b Merge pull request #102 from mattn/fix/spacing-marks-and-cluster-width
3e28133 Fix width of spacing marks and multi-rune grapheme clusters
b571037 Merge pull request #98 from bugwhisperer418/master
Additional commits viewable in compare view

Updates github.com/pkg/sftp from 1.13.10 to 1.13.11

Release notes

Sourced from github.com/pkg/sftp's releases.

v1.13.11 - maintenance release

This release bounds an unchecked pre-allocation in the SSH_FILEXFER_ATTRS decoder, updates dependencies, and includes minor code cleanups.

Security/robustness

The attribute decoder (unmarshalFileStat) allocated the extended-attribute slice directly from the wire-supplied extended_count without bounding it against the available bytes. A peer could advertise a huge extended_count in a small packet and force a multi-gigabyte allocation up front, crashing the process with fatal error: out of memory before a single entry was parsed.

What's Changed

fix: ineffective assignments by @alrs in pkg/sftp#650

refactor: replace interface{} with any (Go 1.18+) by @MD-Mushfiqur123 in pkg/sftp#652

fix: bound extended-count pre-allocation in unmarshalFileStat by @drakkan (co-authored by @mjbommar)

New Contributors

@alrs made their first contribution in pkg/sftp#650

@MD-Mushfiqur123 made their first contribution in pkg/sftp#652

Full Changelog: pkg/sftp@v1.13.10...v1.13.11

Commits

fc82c35 CI: run tests on macOS with the latest Go version
c1bc2ff fix: bound extended-count pre-allocation in unmarshalFileStat
fe6029a CI: update Go version and GitHub Actions
208320f update deps
dda3848 Merge pull request #652 from MD-Mushfiqur123/refactor/interface-to-any
26bf701 refactor: replace interface{} with any (Go 1.18+)
ef1dc72 Merge pull request #650 from alrs/ineffective-functions
dbf7c75 fix: ineffective assignments
ab3b1a3 Merge pull request #641 from pkg/dependabot/go_modules/golang.org/x/crypto-0....
4583fed Bump golang.org/x/crypto from 0.41.0 to 0.45.0
See full diff in compare view

Updates github.com/spf13/pflag from 1.0.6 to 1.0.10

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.10

What's Changed

fix deprecation comment for (FlagSet.)ParseErrorsWhitelist by @thaJeztah in spf13/pflag#447

remove uses of errors.Is, which requires go1.13, move go1.16/go1.21 tests to separate file by @thaJeztah in spf13/pflag#448

New Contributors

@thaJeztah made their first contribution in spf13/pflag#447

Full Changelog: spf13/pflag@v1.0.9...v1.0.10

v1.0.9

What's Changed

fix: Restore ParseErrorsWhitelist name for now by @tomasaschan in spf13/pflag#446

Full Changelog: spf13/pflag@v1.0.8...v1.0.9

v1.0.8

⚠️ Breaking Change

This version, while only a patch bump, includes a (very minor) breaking change: the flag.ParseErrorsWhitelist struct and corresponding FlagSet.parseErrorsWhitelist field have been renamed to ParseErrorsAllowlist.

This should result in compilation errors in any code that uses these fields, which can be fixed by adjusting the names at call sites. There is no change in semantics or behavior of the struct or field referred to by these names. If your code compiles without errors after bumping to/past v1.0.8, you are not affected by this change.

The breaking change was reverted in v1.0.9, by means of re-introducing the old names with deprecation warnings. The plan is still to remove them in a future release, so if your code does depend on the old names, please change them to use the new names at your earliest convenience.

What's Changed

Remove Redundant "Unknown-Flag" Error by @vaguecoder in spf13/pflag#364

Switching from whitelist to Allowlist terminology by @dubrie in spf13/pflag#261

Omit zero time.Time default from usage line by @mologie in spf13/pflag#438

implement CopyToGoFlagSet by @pohly in spf13/pflag#330

flag: Emulate stdlib behavior and do not print ErrHelp by @tmc in spf13/pflag#407

Print Default Values of String-to-String in Sorted Order by @vaguecoder in spf13/pflag#365

fix: Don't print ErrHelp in ParseAll by @tomasaschan in spf13/pflag#443

Reset args on re-parse even if empty by @tomasaschan in spf13/pflag#444

New Contributors

@vaguecoder made their first contribution in spf13/pflag#364

@dubrie made their first contribution in spf13/pflag#261

@mologie made their first contribution in spf13/pflag#438

@pohly made their first contribution in spf13/pflag#330

@tmc made their first contribution in spf13/pflag#407

@tomasaschan made their first contribution in spf13/pflag#443

Full Changelog: spf13/pflag@v1.0.7...v1.0.8

v1.0.7

What's Changed

Fix defaultIsZeroValue check for generic Value types by @MidnightRocket in spf13/pflag#422

feat: Use structs for errors returned by pflag. by @eth-p in spf13/pflag#425

... (truncated)

Commits

0491e57 Merge pull request #448 from thaJeztah/fix_go_version
72abab1 Merge pull request #447 from thaJeztah/fix_deprecation_comment
7e4dfb1 Test on Go 1.12
18a9d17 move Func, BoolFunc, tests as they require go1.21
c5b9e98 remove uses of errors.Is, which requires go1.13
45a4873 fix deprecation comment for (FlagSet.)ParseErrorsWhitelist
1043857 Merge pull request #446 from spf13/fix-backwards-compat
7412009 fix: Restore ParseErrorsWhitelist name for now
b9c16fa Merge pull request #444 from spf13/reset-args-even-if-empty
40abc49 Merge pull request #443 from spf13/silence-errhelp
Additional commits viewable in compare view

Updates github.com/yuin/goldmark from 1.8.2 to 1.8.4

Release notes

Sourced from github.com/yuin/goldmark's releases.

v1.8.4

fix: disable svg in data:image urls

v1.8.3

Full Changelog: yuin/goldmark@v1.8.2...v1.8.3

fix: #556

Commits

50ba9fc fix: disable svg in data:image urls
2326684 fix: #556
See full diff in compare view

Updates golang.org/x/crypto from 0.53.0 to 0.54.0

Commits

cdce021 go.mod: update golang.org/x dependencies
d9474cc openpgp: make the deprecation message more explicit
7626c50 ssh: verify declared key type matches decoded key in authorized_keys
0471e79 ssh/agent: enforce strict limits on DSA key parameters
6435c37 ssh: sanitize client disconnect messages
7d695da ssh/agent: drain channel stderr in agent forwarders
5b7f841 acme/autocert: fix data race in Manager.createCert
0b316e7 argon2: update RFC 9106 parameter recommendations
55aec0a x509roots/fallback: update bundle
5f2de1a internal: remove wycheproof tests
See full diff in compare view

Updates golang.org/x/image from 0.43.0 to 0.44.0

Commits

891abcb go.mod: update golang.org/x dependencies
f50490d font: document (lack of) security hardening in font packages
7a0cfda webp: check for VP8L dimension mismatch before allocation
4339315 tiff: consistently skip horizontal padding in tiled images
See full diff in compare view

Updates golang.org/x/mod from 0.37.0 to 0.38.0

Commits

792ac16 go.mod: update golang.org/x dependencies
fe2ec04 all: fix some comments to improve readability
See full diff in compare view

Updates golang.org/x/net from 0.56.0 to 0.57.0

Commits

b8f09f6 go.mod: update golang.org/x dependencies
f05f21b idna: reject all-ASCII xn-- labels on all Go versions
0f748cf internal/http3: clean up stream I/O methods usages in tests
0bb961e internal/http3: add net/http.ResponseController support
0ca694d webdav: document Dir's lack of defense against filesystem modification
bd5f1dc http2: initialize Transport on NewClientConn
488ff63 bpf: add security considerations to package docs
93d1f25 xsrftoken: avoid token collisions
5a3baee internal/http3: prevent panic in QPACK decoder due to overflow
See full diff in compare view

Updates golang.org/x/sys from 0.46.0 to 0.47.0

Commits

9e7e939 cpu: handle vendor suffixes in parseRelease
f6fb8a1 unix: use epoll_pwait rather than epoll_wait
f3eeabf windows: avoid length overflow in NewNTString
3cb6647 unix: update glibc to 2.43
c507910 windows: document safe usage of TrusteeValue
See full diff in compare view

Updates golang.org/x/term from 0.44.0 to 0.45.0

Commits

9f69229 go.mod: update golang.org/x dependencies
See full diff in compare view

Updates golang.org/x/text from 0.39.0 to 0.40.0

Commits

724af9c go.mod: update golang.org/x dependencies
bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [charm.land/bubbles/v2](https://github.com/charmbracelet/bubbles) | `2.1.0` | `2.1.1` | | [charm.land/bubbletea/v2](https://github.com/charmbracelet/bubbletea) | `2.0.7` | `2.0.8` | | [charm.land/lipgloss/v2](https://github.com/charmbracelet/lipgloss) | `2.0.4` | `2.0.5` | | [github.com/larksuite/oapi-sdk-go/v3](https://github.com/larksuite/oapi-sdk-go) | `3.9.5` | `3.9.9` | | [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.24` | `0.0.27` | | [github.com/pkg/sftp](https://github.com/pkg/sftp) | `1.13.10` | `1.13.11` | | [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.6` | `1.0.10` | | [github.com/yuin/goldmark](https://github.com/yuin/goldmark) | `1.8.2` | `1.8.4` | | [golang.org/x/image](https://github.com/golang/image) | `0.43.0` | `0.44.0` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.37.0` | `0.38.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.56.0` | `0.57.0` | Updates `charm.land/bubbles/v2` from 2.1.0 to 2.1.1 - [Release notes](https://github.com/charmbracelet/bubbles/releases) - [Commits](charmbracelet/bubbles@v2.1.0...v2.1.1) Updates `charm.land/bubbletea/v2` from 2.0.7 to 2.0.8 - [Release notes](https://github.com/charmbracelet/bubbletea/releases) - [Commits](charmbracelet/bubbletea@v2.0.7...v2.0.8) Updates `charm.land/lipgloss/v2` from 2.0.4 to 2.0.5 - [Release notes](https://github.com/charmbracelet/lipgloss/releases) - [Commits](charmbracelet/lipgloss@v2.0.4...v2.0.5) Updates `github.com/larksuite/oapi-sdk-go/v3` from 3.9.5 to 3.9.9 - [Release notes](https://github.com/larksuite/oapi-sdk-go/releases) - [Changelog](https://github.com/larksuite/oapi-sdk-go/blob/v3_main/changelog.md) - [Commits](larksuite/oapi-sdk-go@v3.9.5...v3.9.9) Updates `github.com/mattn/go-runewidth` from 0.0.24 to 0.0.27 - [Commits](mattn/go-runewidth@v0.0.24...v0.0.27) Updates `github.com/pkg/sftp` from 1.13.10 to 1.13.11 - [Release notes](https://github.com/pkg/sftp/releases) - [Commits](pkg/sftp@v1.13.10...v1.13.11) Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.10 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.6...v1.0.10) Updates `github.com/yuin/goldmark` from 1.8.2 to 1.8.4 - [Release notes](https://github.com/yuin/goldmark/releases) - [Commits](yuin/goldmark@v1.8.2...v1.8.4) Updates `golang.org/x/crypto` from 0.53.0 to 0.54.0 - [Commits](golang/crypto@v0.53.0...v0.54.0) Updates `golang.org/x/image` from 0.43.0 to 0.44.0 - [Commits](golang/image@v0.43.0...v0.44.0) Updates `golang.org/x/mod` from 0.37.0 to 0.38.0 - [Commits](golang/mod@v0.37.0...v0.38.0) Updates `golang.org/x/net` from 0.56.0 to 0.57.0 - [Commits](golang/net@v0.56.0...v0.57.0) Updates `golang.org/x/sys` from 0.46.0 to 0.47.0 - [Commits](golang/sys@v0.46.0...v0.47.0) Updates `golang.org/x/term` from 0.44.0 to 0.45.0 - [Commits](golang/term@v0.44.0...v0.45.0) Updates `golang.org/x/text` from 0.39.0 to 0.40.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.39.0...v0.40.0) --- updated-dependencies: - dependency-name: charm.land/bubbles/v2 dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: charm.land/bubbletea/v2 dependency-version: 2.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: charm.land/lipgloss/v2 dependency-version: 2.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/larksuite/oapi-sdk-go/v3 dependency-version: 3.9.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/mattn/go-runewidth dependency-version: 0.0.27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/pkg/sftp dependency-version: 1.13.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/spf13/pflag dependency-version: 1.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/yuin/goldmark dependency-version: 1.8.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: golang.org/x/crypto dependency-version: 0.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/image dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/mod dependency-version: 0.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/net dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/sys dependency-version: 0.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/term dependency-version: 0.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/text dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 26, 2026

dependabot Bot requested review from SivanCola and esengine as code owners July 26, 2026 11:53

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 26, 2026

github-actions Bot added the v2 Go rewrite (1.x) — main-v2 branch, active development label Jul 26, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the go group across 1 directory with 15 updates#6959

build(deps): bump the go group across 1 directory with 15 updates#6959
dependabot[bot] wants to merge 1 commit into
main-v2from
dependabot/go_modules/go-d3de9397b1

dependabot Bot commented on behalf of github Jul 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 26, 2026

v2.1.1

Lil’ Textarea Fix

Changelog

Fixed

Docs

v2.0.8

Graphemes, schmraphemes

Changelog

v2.0.5

Graphemes, Schmraphemes

Changelog

v1.13.11 - maintenance release

Security/robustness

What's Changed

New Contributors

v1.0.10

What's Changed

New Contributors

v1.0.9

What's Changed

v1.0.8

⚠️ Breaking Change

What's Changed

New Contributors

v1.0.7

What's Changed

v1.8.4

v1.8.3

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants