Skip to content

Bump the go group across 1 directory with 4 updates#1572

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-c6c39bf031
Closed

Bump the go group across 1 directory with 4 updates#1572
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-c6c39bf031

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the go group with 4 updates in the / directory: github.com/jedib0t/go-pretty/v6, golang.org/x/sync, golang.org/x/term and golang.org/x/text.

Updates github.com/jedib0t/go-pretty/v6 from 6.7.10 to 6.8.1

Release notes

Sourced from github.com/jedib0t/go-pretty/v6's releases.

v6.8.1

What's Changed

A hardening pass across the table, list, progress, and text packages, fixing security issues, crash/race bugs, and performance problems in the render hot paths, with benchmarks added to back the optimizations.

Security

  • table/list (HTML): escape the title, caption, and CSS class names in RenderHTML() to prevent HTML/attribute injection.
  • table (CSV): make RenderCSV() output RFC 4180 compliant, and add an opt-in Style().CSV.FieldProtection option that neutralizes spreadsheet formula-injection fields (=, +, -, @, tab, CR).
  • text: sanitize hyperlink URLs and bound the escape-sequence parser buffer so adversarial input can't grow it without limit.

Correctness

  • progress: fix a render panic on tiny tracker lengths, data races on tracker/indicator state, and a leaked time.Ticker in the terminal-size watcher.
  • table: guard auto-index rendering against empty maxColumnLengths.
  • text: prevent a panic in VAlign.Apply on negative maxLines.

Performance

  • table: compile regex filters once per render; pre-size render builders.
  • list: hoist repeated width math out of the render loops.
  • text: speed up Align.Apply and StringWidthWithoutEscSequences.
  • progress: build PacManChomp frames with a strings.Builder.

Tooling

  • Moved root-level benchmarks into their packages and wired up make bench; added benchmarks for the table/text/list/progress render hot paths and tests covering the retained-done-tracker render paths.

Full Changelog: jedib0t/go-pretty@v6.8.0...v6.8.1

v6.8.0

What's Changed

New Contributors

Full Changelog: jedib0t/go-pretty@v6.7.10...v6.8.0

Commits
  • 22c68f6 fix panics, races, and injection vectors; speed up render hot paths (#409)
  • 45fb00d text: wrap wide runes when wrapLen is odd in WrapHard (#408)
  • ad17549 progress: fix speed decay on done trackers and log overwrite; fixes #405 (#406)
  • See full diff in compare view

Updates golang.org/x/sync from 0.20.0 to 0.21.0

Commits

Updates golang.org/x/term from 0.43.0 to 0.44.0

Commits

Updates golang.org/x/text from 0.37.0 to 0.38.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 9, 2026
@ehl-jf ehl-jf added the ignore for release Automatically generated release notes label Jun 9, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/go-c6c39bf031 branch from 387b42a to fd8db03 Compare June 10, 2026 00:52
@dependabot dependabot Bot force-pushed the dependabot/go_modules/go-c6c39bf031 branch from fd8db03 to 7dfea21 Compare June 16, 2026 00:52
@dependabot dependabot Bot force-pushed the dependabot/go_modules/go-c6c39bf031 branch from 7dfea21 to 0077681 Compare June 22, 2026 00:52
@dependabot dependabot Bot force-pushed the dependabot/go_modules/go-c6c39bf031 branch from 0077681 to 370c10d Compare June 23, 2026 00:52
Bumps the go group with 4 updates in the / directory: [github.com/jedib0t/go-pretty/v6](https://github.com/jedib0t/go-pretty), [golang.org/x/sync](https://github.com/golang/sync), [golang.org/x/term](https://github.com/golang/term) and [golang.org/x/text](https://github.com/golang/text).


Updates `github.com/jedib0t/go-pretty/v6` from 6.7.10 to 6.8.1
- [Release notes](https://github.com/jedib0t/go-pretty/releases)
- [Commits](jedib0t/go-pretty@v6.7.10...v6.8.1)

Updates `golang.org/x/sync` from 0.20.0 to 0.21.0
- [Commits](golang/sync@v0.20.0...v0.21.0)

Updates `golang.org/x/term` from 0.43.0 to 0.44.0
- [Commits](golang/term@v0.43.0...v0.44.0)

Updates `golang.org/x/text` from 0.37.0 to 0.38.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.37.0...v0.38.0)

---
updated-dependencies:
- dependency-name: github.com/jedib0t/go-pretty/v6
  dependency-version: 6.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/sync
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/term
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/text
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/go-c6c39bf031 branch from 370c10d to 0d7e597 Compare June 25, 2026 00:52
@dependabot @github

dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 13, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/go-c6c39bf031 branch July 13, 2026 00:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code ignore for release Automatically generated release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant