Skip to content

deps: bump the go-dependencies group with 6 updates - #898

Merged
github-actions[bot] merged 2 commits into
mainfrom
dependabot/go_modules/go-dependencies-6b25e4d86d
Oct 13, 2026
Merged

github-actions[bot] merged 2 commits into
mainfrom
dependabot/go_modules/go-dependencies-6b25e4d86d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Bumps six dependencies in the go-dependencies group via Dependabot, along with their indirect transitive updates in go.mod and go.sum. All changes are patch or minor semver bumps (charm.land/bubbletea/v2 to v2.1.0, golang.org/x/net to v0.61.0, and golang.org/x/mod, golang.org/x/sys, and golang.org/x/text to their latest versions), so no breaking changes are expected.

Also refreshes the Nix vendorHash in nix/package.nix to match the updated vendored modules.

Written for commit eca25e0. Summary will update on new commits.

View guided diff Turn on auto-fix

---
updated-dependencies:
- dependency-name: charm.land/bubbletea/v2
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/charmbracelet/x/ansi
  dependency-version: 0.11.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: golang.org/x/mod
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 13, 2026 07:21
Copilot AI balanced review requested due to automatic review settings October 13, 2026 07:21
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 13, 2026
@github-actions github-actions Bot added the deps label Oct 13, 2026
go.sum changed in #898, so buildGoModule's fixed-output hash over the vendored modules moved from sha256-c4rZUcSMSOew7u562pFyOCToDCEfg/35lORskjK1pCY= to sha256-WHKt0cMO0Xnya3c5Kmt/Pnd/YquM3GovCHFrfFAGLmY=. Computed by nix build at the merge of 3c66366; this PR's own Nix flake check verifies it.
@github-actions
github-actions Bot enabled auto-merge (squash) October 13, 2026 07:24

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

Core TUI, networking, and platform dependencies changed and require successful CI and compatibility verification.

0 open findings

What changed in this PR

Updates six direct Go dependencies and refreshes their transitive module checksums.

Changes:

  • Upgrades Bubble Tea and ANSI terminal dependencies.
  • Updates golang.org/x modules and related transitive dependencies.

[!TIP]
If you aren't ready for review, convert to a draft PR.
Click "Convert to draft" or run gh pr ready --undo.
Click "Ready for review" or run gh pr ready to reengage.

File Description
go.mod Updates direct and indirect dependency versions.
go.sum Refreshes checksums for the resolved module graph.

🧠 Review effort: Balanced


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Copilot AI balanced review requested due to automatic review settings October 13, 2026 07:25

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approved

The dependency versions, transitive updates, checksums, and Nix vendor hash are consistently synchronized.

0 open findings

🧠 Review effort: Balanced

@github-actions
github-actions Bot merged commit 36a58d7 into main Oct 13, 2026
41 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-dependencies-6b25e4d86d branch October 13, 2026 07:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file deps go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant