Skip to content

deps: bump github.com/fatih/color from 1.18.0 to 1.19.0 in /src#23

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/go_modules/src/github.com/fatih/color-1.19.0
Open

deps: bump github.com/fatih/color from 1.18.0 to 1.19.0 in /src#23
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/go_modules/src/github.com/fatih/color-1.19.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 25, 2026

Bumps github.com/fatih/color from 1.18.0 to 1.19.0.

Release notes

Sourced from github.com/fatih/color's releases.

v1.19.0

What's Changed

New Contributors

Full Changelog: fatih/color@v1.18.0...v1.19.0

Commits
  • ca25f6e Merge pull request #266 from fatih/dependabot/github_actions/actions/setup-go-6
  • 1205984 Bump actions/setup-go from 5 to 6
  • 5715c20 Merge pull request #269 from UnSubble/main
  • 2f6e200 Merge branch 'main' into main
  • f72ec94 Merge pull request #273 from fatih/dependabot/github_actions/actions/checkout-6
  • 848e633 Merge branch 'main' into main
  • 4c2cd34 Add tests
  • 7f812f0 Bump actions/checkout from 4 to 6
  • b7fc9f9 Merge pull request #259 from fatih/dependabot/github_actions/dominikh/staticc...
  • 239a88f Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/fatih/color](https://github.com/fatih/color) from 1.18.0 to 1.19.0.
- [Release notes](https://github.com/fatih/color/releases)
- [Commits](fatih/color@v1.18.0...v1.19.0)

---
updated-dependencies:
- dependency-name: github.com/fatih/color
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 25, 2026

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@greptile-apps
Copy link
Copy Markdown

greptile-apps bot commented Mar 25, 2026

Greptile Summary

This PR bumps github.com/fatih/color from v1.18.0 to v1.19.0, along with its transitive dependencies (github.com/mattn/go-colorable v0.1.13→v0.1.14 and golang.org/x/sys v0.41.0→v0.42.0). The go.sum file is updated accordingly with new checksums.

  • The color library upgrade brings several improvements: a fix for SetWriter/UnsetWriter color-support detection symmetry, a fix for Fprint/Fprintf byte counts including escape codes, a nil check on os.Stdout to prevent panics on Windows services, and a performance optimization for Color.Equals (O(n²) → O(n)).
  • Unexpected change: The go directive in go.mod was also bumped from 1.24.2 to 1.25.0, which is not mentioned in the PR description. This likely happened because go mod tidy was run with a newer Go toolchain. This raises the minimum required Go version for the module and should be intentional and documented, or reverted to keep this PR scoped solely to the dependency bump.

Confidence Score: 3/5

  • PR is mostly safe but contains an undocumented Go toolchain version bump that may break CI or user environments on Go 1.24.x.
  • The dependency bump itself is straightforward and low-risk. However, the unannounced change to the go directive (1.24.2 → 1.25.0) is out of scope and potentially breaking — it should either be explicitly justified or reverted before merging.
  • src/go.mod — verify the Go version bump is intentional

Important Files Changed

Filename Overview
src/go.mod Bumps fatih/color to v1.19.0 and its transitive deps (go-colorable, golang.org/x/sys), but also unexpectedly bumps the go directive from 1.24.2 to 1.25.0.
src/go.sum Checksum file updated to reflect new hashes for fatih/color v1.19.0, go-colorable v0.1.14, and golang.org/x/sys v0.42.0. Looks correct.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[go.mod update] --> B[github.com/fatih/color\n1.18.0 → 1.19.0]
    A --> C[go directive\n1.24.2 → 1.25.0 ⚠️]
    B --> D[github.com/mattn/go-colorable\n0.1.13 → 0.1.14]
    B --> E[golang.org/x/sys\n0.41.0 → 0.42.0]
    D --> F[go.sum updated]
    E --> F
Loading
Prompt To Fix All With AI
This is a comment left during a code review.
Path: src/go.mod
Line: 3

Comment:
**Undocumented Go version bump**

The `go` directive was updated from `1.24.2` to `1.25.0`, but this change is not mentioned anywhere in the PR title or description — which only references the `github.com/fatih/color` bump. Bumping the minimum required Go version is a potentially breaking change for users and CI environments still on Go 1.24.x.

If this is intentional, it should be documented explicitly. If it was introduced accidentally (e.g. by running `go mod tidy` with Go 1.25 locally), it should be reverted to keep this PR scoped to the dependency bump only.

How can I resolve this? If you propose a fix, please make it concise.

Reviews (1): Last reviewed commit: "deps: bump github.com/fatih/color from 1..." | Re-trigger Greptile

module github.com/muxi-ai/cli

go 1.24.2
go 1.25.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Undocumented Go version bump

The go directive was updated from 1.24.2 to 1.25.0, but this change is not mentioned anywhere in the PR title or description — which only references the github.com/fatih/color bump. Bumping the minimum required Go version is a potentially breaking change for users and CI environments still on Go 1.24.x.

If this is intentional, it should be documented explicitly. If it was introduced accidentally (e.g. by running go mod tidy with Go 1.25 locally), it should be reverted to keep this PR scoped to the dependency bump only.

Prompt To Fix With AI
This is a comment left during a code review.
Path: src/go.mod
Line: 3

Comment:
**Undocumented Go version bump**

The `go` directive was updated from `1.24.2` to `1.25.0`, but this change is not mentioned anywhere in the PR title or description — which only references the `github.com/fatih/color` bump. Bumping the minimum required Go version is a potentially breaking change for users and CI environments still on Go 1.24.x.

If this is intentional, it should be documented explicitly. If it was introduced accidentally (e.g. by running `go mod tidy` with Go 1.25 locally), it should be reverted to keep this PR scoped to the dependency bump only.

How can I resolve this? If you propose a fix, please make it concise.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants