Skip to content

Bump the go-dependencies group across 1 directory with 8 updates#67

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-e44fdc35b3
Open

Bump the go-dependencies group across 1 directory with 8 updates#67
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-e44fdc35b3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 4, 2026

Copy link
Copy Markdown

Bumps the go-dependencies group with 6 updates in the / directory:

Package From To
charm.land/bubbletea/v2 2.0.2 2.0.7
charm.land/lipgloss/v2 2.0.2 2.0.3
github.com/docker/go-connections 0.6.0 0.7.0
github.com/google/go-containerregistry 0.21.3 0.21.6
github.com/prometheus/common 0.67.5 0.68.0
github.com/shirou/gopsutil/v4 4.26.3 4.26.5

Updates charm.land/bubbletea/v2 from 2.0.2 to 2.0.7

Release notes

Sourced from charm.land/bubbletea/v2's releases.

v2.0.7

A few lil’ stability patches

Hi! This is a patch release with a few solid improvements around stability and correctness.

  • @​lrstanley, one of our faves, fixed a race condition around mice in the Cursed Renderer
  • @​lawrence3699 fixed a panic that could happen when input's not available
  • We fixed a correctness issue with regard to mouse releases when Kitty Keyboard was active (thanks, @​mitchellh)

Thanks for using Bubble Tea, and if you see anything awry please do let us know!

—Charm 👋

Changelog

Fixed

  • c60f0c53042238305ec13b486326588f12aea0ec: fix: prevent data race with cursedRenderer.onMouse (#1691) (@​lrstanley)
  • 074596e14e2f5ca5e3986ee72e7c08f1569c4178: fix: skip input reader restore when input is disabled (#1680) (@​lawrence3699)
  • 878d7df2f2b02f3ca8db177fa8553834bc35ea7c: fix(deps): bump ultraviolet for kitty keyboard fix (@​meowgorithm)

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

v2.0.6

This release fixes an issue with how Bubble Tea handled wide characters. Before, a wide character might be skipped or cause an infinite loop causing the CPU to spike. See charmbracelet/bubbletea@fdcd0cf and charmbracelet/ultraviolet#109 for more details.


Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

v2.0.5

A small release to remove accidental unwanted debug log file. See charmbracelet/bubbletea@1ed724a and charmbracelet/ultraviolet@b516641 for details.


Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

v2.0.4

This release includes a small fix related to width calculation in x/ansi. See charmbracelet/bubbletea@c788fe9 and charmbracelet/x@6921c75 for more details.


... (truncated)

Commits
  • a23da80 v2.0.7
  • 670963e chore(task): add release and fetch-tags tasks
  • 29c4c32 fix(examples/deps): go mod tidy
  • 878d7df chore(deps): bump ultraviolet for kitty keyboard fix
  • c60f0c5 fix: prevent data race with cursedRenderer.onMouse (#1691)
  • 640d879 docs(readme): update footer image
  • 0fbefd2 chore: remove CODEOWNERS
  • 074596e fix: skip input reader restore when input is disabled (#1680)
  • fdcd0cf chore: bump ultraviolet to 489999b90468 to fix a wide char issue
  • 1ed724a chore: bump ultraviolet to v0.0.0-20260413211237-bd52878bcec2
  • Additional commits viewable in compare view

Updates charm.land/lipgloss/v2 from 2.0.2 to 2.0.3

Release notes

Sourced from charm.land/lipgloss/v2's releases.

v2.0.3

Changelog

Fixed

  • 472d718e2314596549bee2c0c8ccf8beea5f25ae: fix: Avoid background color query hang (#636) (@​jedevc)

Docs


Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits
  • 472d718 fix: Avoid background color query hang (#636)
  • 89fafba chore: bump x/ansi to v0.11.7 to fix width calculation bug
  • d6d41e1 chore(deps): bump golang.org/x/sys in the all group (#663)
  • 23a1bb1 chore(deps): bump github.com/lucasb-eyer/go-colorful in the all group (#640)
  • cd93a9f docs: fix tree comment typo (#634)
  • 25c5fb2 chore(deps): bump github.com/charmbracelet/colorprofile in the all group (#630)
  • 9e39a0a docs: fix README typo (#629)
  • See full diff in compare view

Updates github.com/charmbracelet/x/ansi from 0.11.6 to 0.11.7

Commits
  • 6921c75 fix(ansi): width: always use grapheme finder for width calculation
  • 266cf5a chore(deps): bump the all group across 1 directory with 2 updates (#836)
  • ad0b1ae chore(scripts): update builds script to use codecov v6 and dependabot/fetch-m...
  • b18aac2 chore(deps): bump golang.org/x/image in /vttest in the all group (#840)
  • ffd2a07 chore(deps): bump golang.org/x/image in /mosaic in the all group (#839)
  • 7664402 chore(deps): bump golang.org/x/sys in /input in the all group (#833)
  • 44f725f chore(deps): bump github.com/mattn/go-runewidth (#838)
  • ac9fd4b chore(deps): bump github.com/mattn/go-runewidth (#837)
  • e969fb5 chore(deps): bump golang.org/x/sys in /termios in the all group (#828)
  • acb1aa7 chore(deps): bump golang.org/x/crypto in /sshkey in the all group (#835)
  • Additional commits viewable in compare view

Updates github.com/docker/go-connections from 0.6.0 to 0.7.0

Commits
  • 7997b0f Merge pull request #156 from thaJeztah/bump_go_winio
  • 329724a chore(deps): bump github.com/Microsoft/go-winio v0.6.2
  • 161dc9b Merge pull request #155 from thaJeztah/pin_actions
  • b115e42 Merge pull request #154 from thaJeztah/fix_non_linux_tests
  • 4c35b2a ci: pin actions to sha
  • b4454a6 tlsconfig: make root pool tests deterministic across platforms
  • 0819711 tlsconfig: certPool: pass options as argument
  • 0329635 tlsconfig: rename some vars that shadowed
  • 894d811 Merge pull request #150 from thaJeztah/deprecate_SystemCertPool
  • 0a1293a Merge pull request #153 from thaJeztah/chachacha
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.3 to 0.21.6

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.6

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.5...v0.21.6

v0.21.5

What's Changed

... (truncated)

Commits
  • 53f7e39 Update go version to 1.26.3 (#2300)
  • bf87c3b transport: allow bearer realm at same host:port as registry (#2302)
  • c55facd transport: retry HTTP 429 (Too Many Requests) (#2301)
  • 68a569e fix: preserve per-occurrence layer identity in Layers() (#2299)
  • 35b354b fix(mutate): preserve config blob and layers for non-Docker OCI artifacts (#2...
  • e5983f2 remote: block SSRF via private-IP Location headers in blob uploads (#2295)
  • 6dad820 remote: validate foreign layer URLs to prevent SSRF (fixes #2259) (#2293)
  • 78bdf1b validate: skip non-layer layers (#2298)
  • c29d91c pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract ...
  • a70d75a transport: block redirects from token server to private/link-local addresses ...
  • Additional commits viewable in compare view

Updates github.com/mattn/go-runewidth from 0.0.21 to 0.0.23

Commits
  • 17a7a03 Merge pull request #95 from mattn/optimize-runewidth-performance
  • 0a43bb8 Optimize RuneWidth and StringWidth performance
  • 41dc6c5 Merge pull request #92 from mattn/stringwidth-single-rune-fast-path
  • 254e529 optimize single-rune StringWidth
  • See full diff in compare view

Updates github.com/prometheus/common from 0.67.5 to 0.68.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.68.0

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.67.5...v0.68.0

Commits
  • 1e0ae83 config: apply DialContextFunc to OAuth2 token-fetch transport (#911)
  • b51d01b Remove CircleCI (#910)
  • 0f3c348 Merge pull request #908 from machine424/ttlsco
  • 732a9cf fix(http_config): fix client cert rotation when no CA is configured
  • ce9215c Move interface assertions to a test file (#839)
  • 1ba5ed7 build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.36.0 (#892)
  • 8f8ada6 build(deps): bump go.yaml.in/yaml/v2 from 2.4.3 to 2.4.4 (#891)
  • 5bf00a4 build(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 (#890)
  • a4fac5c config: guard against nil oauth2 credential in RoundTrip (#897)
  • 9e28363 Merge pull request #898 from alliasgher/fix/NewOAuth2RoundTripper-exported-op...
  • Additional commits viewable in compare view

Updates github.com/shirou/gopsutil/v4 from 4.26.3 to 4.26.5

Release notes

Sourced from github.com/shirou/gopsutil/v4's releases.

v4.26.5

What's Changed

disk

net

process

New Contributors

Full Changelog: shirou/gopsutil@v4.26.4...v4.26.5

v4.26.4

What's Changed

cpu

disk

host

load

mem

net

process

New Contributors

Full Changelog: shirou/gopsutil@v4.26.3...v4.26.4

Commits
  • d781152 Merge pull request #2062 from HarshalPatel1972/fix/windows-process-snap-perf
  • bf6e949 fix: address maintainer review — adjust PID 0 order, remove 0-thread guard, a...
  • 71672e2 Merge pull request #2092 from kerlenton/fix/darwin-cmdline-envp-leak
  • f806418 [process]: skip exact 4 bytes of nargs in darwin cmdlineSlice
  • e9f021e [process]: fix envp leak into Cmdline on darwin
  • 6a240d8 Merge pull request #2074 from shirou/dependabot/github_actions/actions/upload...
  • ba20283 Merge pull request #2065 from shirou/dependabot/github_actions/actions/setup-...
  • e7b2fd0 Merge pull request #2088 from shirou/dependabot/github_actions/actions/labele...
  • e26eaf3 Merge pull request #2089 from shirou/feat/add_ProtoCounters_godoc
  • 22bc830 [net]: add more information on ProtoCounters godoc
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [charm.land/bubbletea/v2](https://github.com/charmbracelet/bubbletea) | `2.0.2` | `2.0.7` |
| [charm.land/lipgloss/v2](https://github.com/charmbracelet/lipgloss) | `2.0.2` | `2.0.3` |
| [github.com/docker/go-connections](https://github.com/docker/go-connections) | `0.6.0` | `0.7.0` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.3` | `0.21.6` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.67.5` | `0.68.0` |
| [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.26.3` | `4.26.5` |



Updates `charm.land/bubbletea/v2` from 2.0.2 to 2.0.7
- [Release notes](https://github.com/charmbracelet/bubbletea/releases)
- [Commits](charmbracelet/bubbletea@v2.0.2...v2.0.7)

Updates `charm.land/lipgloss/v2` from 2.0.2 to 2.0.3
- [Release notes](https://github.com/charmbracelet/lipgloss/releases)
- [Commits](charmbracelet/lipgloss@v2.0.2...v2.0.3)

Updates `github.com/charmbracelet/x/ansi` from 0.11.6 to 0.11.7
- [Commits](charmbracelet/x@ansi/v0.11.6...ansi/v0.11.7)

Updates `github.com/docker/go-connections` from 0.6.0 to 0.7.0
- [Commits](docker/go-connections@v0.6.0...v0.7.0)

Updates `github.com/google/go-containerregistry` from 0.21.3 to 0.21.6
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.3...v0.21.6)

Updates `github.com/mattn/go-runewidth` from 0.0.21 to 0.0.23
- [Commits](mattn/go-runewidth@v0.0.21...v0.0.23)

Updates `github.com/prometheus/common` from 0.67.5 to 0.68.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.67.5...v0.68.0)

Updates `github.com/shirou/gopsutil/v4` from 4.26.3 to 4.26.5
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v4.26.3...v4.26.5)

---
updated-dependencies:
- dependency-name: charm.land/bubbletea/v2
  dependency-version: 2.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: charm.land/lipgloss/v2
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/charmbracelet/x/ansi
  dependency-version: 0.11.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/docker/go-connections
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/mattn/go-runewidth
  dependency-version: 0.0.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/prometheus/common
  dependency-version: 0.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.26.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 4, 2026
Copilot AI review requested due to automatic review settings June 4, 2026 05:33
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 4, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant