Skip to content

chore(deps): update module charm.land/bubbletea/v2 to v2.1.1 - #1064

Open
renovate[bot] wants to merge 4 commits into
mainfrom
renovate/charmbracelet
Open

renovate[bot] wants to merge 4 commits into
mainfrom
renovate/charmbracelet

Conversation

@renovate

@renovate renovate Bot commented Oct 28, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
charm.land/bubbletea/v2 v2.1.0 → v2.1.1 age confidence

Release Notes

charmbracelet/bubbletea (charm.land/bubbletea/v2)

v2.1.1

Compare Source

Terminal size query vulnerability

This patch version fixes a vulnerability reported by @​Reload3d. You can find the details of the exploit here.

Best regards,
Charm XX 💫

Changelog

Fixed
Other stuff

The Charm logo

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate

renovate Bot commented Oct 28, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

cpcloud and others added 2 commits October 28, 2026 08:47
The OSV scan blocks this pull request on GO-2026-6860 and GO-2026-6866,
two advisories against golang.org/x/net v0.61.0 that v0.62.0 fixes.
This branch was cut before main took the same upgrade, so it still
resolves the vulnerable version.

The Nix vendorHash changes because the Go module set changed.

Generated with Claude Code (claude-opus-5-5)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
GitHub runs no pull request checks while this branch conflicts with
main. Both sides changed the Nix vendorHash, and neither value matches
the combined Go module set, so the hash is recomputed for the merged
go.mod and go.sum.

Generated with Claude Code (claude-opus-5-5)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant