Update minor-and-patch

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/jedib0t/go-pretty/v6	v6.7.9 → v6.8.2			require	minor
github.com/tidwall/gjson	v1.18.0 → v1.19.0			require	minor
go	1.26.1 → 1.26.5			uses-with	patch
golang.org/x/sys	v0.43.0 → v0.47.0			require	minor
goreleaser/goreleaser-action	v7.0.0 → v7.2.3			action	minor

---

Release Notes

jedib0t/go-pretty (github.com/jedib0t/go-pretty/v6)

v6.8.2

Compare Source

What's Changed

• text: trim to display width so CJK content respects maxLen by @​greymoth-jp in #​410

New Contributors

• @​greymoth-jp made their first contribution in #​410

Full Changelog: jedib0t/go-pretty@v6.8.1...v6.8.2

v6.8.1

Compare Source

What's Changed

A hardening pass across the table, list, progress, and text packages,
fixing security issues, crash/race bugs, and performance problems in the
render hot paths, with benchmarks added to back the optimizations.

Security

• table/list (HTML): escape the title, caption, and CSS class names in
  RenderHTML() to prevent HTML/attribute injection.
• table (CSV): make RenderCSV() output RFC 4180 compliant, and add an
  opt-in Style().CSV.FieldProtection option that neutralizes spreadsheet
  formula-injection fields (=, +, -, @, tab, CR).
• text: sanitize hyperlink URLs and bound the escape-sequence parser
  buffer so adversarial input can't grow it without limit.

Correctness

• progress: fix a render panic on tiny tracker lengths, data races on
  tracker/indicator state, and a leaked time.Ticker in the terminal-size
  watcher.
• table: guard auto-index rendering against empty maxColumnLengths.
• text: prevent a panic in VAlign.Apply on negative maxLines.

Performance

• table: compile regex filters once per render; pre-size render builders.
• list: hoist repeated width math out of the render loops.
• text: speed up Align.Apply and StringWidthWithoutEscSequences.
• progress: build PacManChomp frames with a strings.Builder.

Tooling

• Moved root-level benchmarks into their packages and wired up make bench;
  added benchmarks for the table/text/list/progress render hot paths and tests
  covering the retained-done-tracker render paths.

Full Changelog: jedib0t/go-pretty@v6.8.0...v6.8.1

v6.8.0

Compare Source

What's Changed

• progress: fix speed decay on done trackers and log overwrite; fixes #​405 by @​jedib0t in #​406
• fix: wrap wide runes when wrapLen is odd in WrapHard by @​koriyoshi2041 in #​408

New Contributors

• @​koriyoshi2041 made their first contribution in #​408

Full Changelog: jedib0t/go-pretty@v6.7.10...v6.8.0

v6.7.10

Compare Source

What's Changed

• Fix panic on text align with unicode by @​edznux-dd in #​404

New Contributors

• @​edznux-dd made their first contribution in #​404

Full Changelog: jedib0t/go-pretty@v6.7.9...v6.7.10

tidwall/gjson (github.com/tidwall/gjson)

v1.19.0

Compare Source

actions/go-versions (go)

v1.26.5: 1.26.5

Compare Source

Go 1.26.5

v1.26.4: 1.26.4

Compare Source

Go 1.26.4

v1.26.3: 1.26.3

Compare Source

Go 1.26.3

v1.26.2: 1.26.2

Compare Source

Go 1.26.2

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

v7.2.3

Compare Source

What's Changed

• ci(deps): bump the actions group with 3 updates by @​dependabot[bot] in #​563
• chore(deps): bump undici from 6.24.1 to 6.27.0 by @​dependabot[bot] in #​565
• build: regenerate dist after undici 6.27.0 bump by @​caarlos0 in #​567
• ci: auto-rebuild dist on dependabot PRs by @​caarlos0 in #​568
• ci: use a GitHub App token to rebuild dist on dependabot PRs by @​caarlos0 in #​569

Full Changelog: goreleaser/goreleaser-action@v7.2.2...v7.2.3

v7.2.2

Compare Source

What's Changed

• ci(deps): bump the actions group with 3 updates by @​dependabot[bot] in #​560
• fix: nightly resolution to select newest published release by @​Copilot in #​562

New Contributors

• @​Copilot made their first contribution in #​562

Full Changelog: goreleaser/goreleaser-action@v7...v7.2.2

v7.2.1

Compare Source

This fully removes the usage of the old nightly moving tag.

Full Changelog: goreleaser/goreleaser-action@v7.2.0...v7.2.1

v7.2.0

Compare Source

What's Changed

• test: cover install across release eras by @​caarlos0 in #​555
• feat: add version-file input by @​caarlos0 in #​556
• feat: resolve nightly to latest vX.Y.Z--nightly release by @​caarlos0 in #​558

Full Changelog: goreleaser/goreleaser-action@v7...v7.2.0

v7.1.0

Compare Source

What's Changed

• feat: verify release checksum and cosign signature by @​caarlos0 in #​550
• docs: document cosign verification in README by @​caarlos0 in #​553
• docs: Upgrade import GPG action version by @​flecno in #​547
• ci: drop docker-bake in favor of plain npm by @​caarlos0 in #​551
• ci: add release-major-tag workflow by @​caarlos0 in #​552
• ci: drop pre-cosign-v3 goreleaser versions from tests by @​caarlos0 in #​554
• ci(deps): bump the actions group with 2 updates by @​dependabot[bot] in #​543
• ci(deps): bump the actions group with 5 updates by @​dependabot[bot] in #​546
• chore(deps): bump undici from 6.23.0 to 6.24.1 by @​dependabot[bot] in #​545

New Contributors

• @​flecno made their first contribution in #​547

Full Changelog: goreleaser/goreleaser-action@v7...v7.1.0

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • Between 12:00 AM and 04:59 AM, on day 1 and 15 of the month (* 0-4 1,15 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.