Bump the minor-and-patch group with 10 updates

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the minor-and-patch group with 10 updates:

Package	From	To
github.com/charmbracelet/x/ansi	0.11.6	0.11.7
github.com/coreos/go-oidc/v3	3.17.0	3.18.0
github.com/mark3labs/mcp-go	0.47.0	0.47.1
github.com/mattn/go-isatty	0.0.20	0.0.21
github.com/mattn/go-runewidth	0.0.22	0.0.23
github.com/mattn/go-sqlite3	1.14.41	1.14.42
golang.org/x/mod	0.34.0	0.35.0
golang.org/x/net	0.50.0	0.52.0
golang.org/x/sys	0.42.0	0.43.0
golang.org/x/text	0.35.0	0.36.0

Updates github.com/charmbracelet/x/ansi from 0.11.6 to 0.11.7

Commits

• 6921c75 fix(ansi): width: always use grapheme finder for width calculation
• 266cf5a chore(deps): bump the all group across 1 directory with 2 updates (#836)
• ad0b1ae chore(scripts): update builds script to use codecov v6 and dependabot/fetch-m...
• b18aac2 chore(deps): bump golang.org/x/image in /vttest in the all group (#840)
• ffd2a07 chore(deps): bump golang.org/x/image in /mosaic in the all group (#839)
• 7664402 chore(deps): bump golang.org/x/sys in /input in the all group (#833)
• 44f725f chore(deps): bump github.com/mattn/go-runewidth (#838)
• ac9fd4b chore(deps): bump github.com/mattn/go-runewidth (#837)
• e969fb5 chore(deps): bump golang.org/x/sys in /termios in the all group (#828)
• acb1aa7 chore(deps): bump golang.org/x/crypto in /sshkey in the all group (#835)
• Additional commits viewable in compare view

Updates github.com/coreos/go-oidc/v3 from 3.17.0 to 3.18.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.18.0

What's Changed

• .github: configure dependabot by @​ericchiang in coreos/go-oidc#477
• .github: update go versions in CI by @​ericchiang in coreos/go-oidc#480
• build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0 by @​dependabot[bot] in coreos/go-oidc#478
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @​dependabot[bot] in coreos/go-oidc#479

Full Changelog: coreos/go-oidc@v3.17.0...v3.18.0

Commits

• da6b3bf build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4
• 7f80694 build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0
• 7271de5 .github: update go versions in CI
• 3ccf20f .github: configure dependabot
• See full diff in compare view

Updates github.com/mark3labs/mcp-go from 0.47.0 to 0.47.1

Release notes

Sourced from github.com/mark3labs/mcp-go's releases.

Release v0.47.1

What's Changed

• docs(client): add example to NewSSEMCPClient to avoid variable shadowing by @​vincent067 in mark3labs/mcp-go#773
• Bound stdio child shutdown in Close() by @​jbjardine in mark3labs/mcp-go#784
• fix(client/http_streamable): exit ContinuousListening goroutine on context cancellation by @​swedishborgie in mark3labs/mcp-go#790

New Contributors

• @​jbjardine made their first contribution in mark3labs/mcp-go#784
• @​swedishborgie made their first contribution in mark3labs/mcp-go#790

Full Changelog: mark3labs/mcp-go@v0.47.0...v0.47.1

Commits

• 2e8a408 fix(transport): exit ContinuousListening goroutine on context cancellation (#...
• 9a96404 Bound stdio child shutdown in Close() (#784)
• 1038f4c docs(client): add example to NewSSEMCPClient to avoid variable shadowing (#773)
• See full diff in compare view

Updates github.com/mattn/go-isatty from 0.0.20 to 0.0.21

Commits

• 4237fb1 Update Go test matrix to current versions (1.24-1.26)
• 433c12b Update GitHub Actions to latest versions
• 1cf5589 Add wasip1 and wasip2 to build constraints in isatty_others.go
• 1237245 Update dependencies: go 1.15 -> 1.21, golang.org/x/sys v0.6.0 -> v0.28.0
• ac9c88d Fix typo in comment: undocomented -> undocumented
• 8b7124e Add availability check for NtQueryObject in init
• 08d0313 Fix isCygwinPipeName to reject names with extra trailing tokens
• See full diff in compare view

Updates github.com/mattn/go-runewidth from 0.0.22 to 0.0.23

Commits

• 17a7a03 Merge pull request #95 from mattn/optimize-runewidth-performance
• 0a43bb8 Optimize RuneWidth and StringWidth performance
• See full diff in compare view

Updates github.com/mattn/go-sqlite3 from 1.14.41 to 1.14.42

Commits

• 5df13a0 Merge pull request #1387 from mattn/codex/stmt-cache
• e302e5c document that _stmt_cache_size is per connection
• 867dcbf move reset/clear into putCachedStmt and always finalize on failure
• 0e58fa4 simplify prepareWithCache to call prepare instead of duplicating logic
• e9f47da do not bail out on finalize error in closeCachedStmtsLocked
• 325cb8d remove redundant stmtCacheSize check in putCachedStmt
• 061c2a5 check stmtCacheSize before acquiring mutex in takeCachedStmt
• efa9b1c add opt-in statement cache
• See full diff in compare view

Updates golang.org/x/mod from 0.34.0 to 0.35.0

Commits

• 03901d3 go.mod: update golang.org/x dependencies
• See full diff in compare view

Updates golang.org/x/net from 0.50.0 to 0.52.0

Commits

• 316e20c go.mod: update golang.org/x dependencies
• 9767a42 internal/http3: add support for plugging into net/http
• 4a81284 http2: update docs to disrecommend this package
• dec6603 dns/dnsmessage: reject too large of names early during unpack
• 8afa12f http2: deprecate write schedulers
• 38019a2 http2: add missing copyright header to export_test.go
• 039b87f internal/http3: return error when Write is used after status 304 is set
• 6267c6c internal/http3: add HTTP 103 Early Hints support to ClientConn
• 591bdf3 internal/http3: add HTTP 103 Early Hints support to Server
• 1faa6d8 internal/http3: avoid potential race when aborting RoundTrip
• Additional commits viewable in compare view

Updates golang.org/x/sys from 0.42.0 to 0.43.0

Commits

• f33a730 windows: support nil security descriptor on GetNamedSecurityInfo
• 493d172 cpu: add runtime import in cpu_darwin_arm64_other.go
• 2c2be75 windows: use syscall.SyscallN in Proc.Call
• a76ec62 cpu: roll back "use IsProcessorFeaturePresent to calculate ARM64 on windows"
• See full diff in compare view

Updates golang.org/x/text from 0.35.0 to 0.36.0

Commits

• 8577a70 go.mod: update golang.org/x dependencies
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[roborev-ci]

roborev: Combined Review (c909768)

Verdict: No medium, high, or critical issues found in this dependency update.

The reviewed changes appear clean at the requested severity threshold. One agent noted low-severity test coverage gaps around OIDC verification and TUI width handling, but no reviewers identified any Medium, High, or Critical findings.

---

Synthesized from 3 reviews (agents: codex, gemini | types: default, security)

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml