[dependabot]

Bumps the go-modules group with 6 updates in the / directory:

Package	From	To
golang.org/x/net	0.59.0	0.62.0
github.com/charmbracelet/x/ansi	0.11.8	0.11.9
github.com/mattn/go-runewidth	0.0.30	0.0.31
github.com/xo/terminfo	1.2.0	1.3.1
golang.org/x/sys	0.48.0	0.49.0
golang.org/x/text	0.42.0	0.43.0

Updates golang.org/x/net from 0.59.0 to 0.62.0

Commits

• 3de643d html: check all ancestor namespace transitions when rendering raw text
• 05c76ee ipv4, ipv6: avoid slice bounds panics on empty batch or BPF filter
• dad306f ipv6: avoid out-of-bounds panic in ICMPFilter
• 9c0565a ipv4: fix TTL control message parsing on big-endian Linux and Solaris
• 9425eb3 internal/socket, ipv4, ipv6: avoid panic on empty control message on non-Unix
• 4b10404 ipv4, ipv6: avoid nil parse function call in ControlMessage.Parse
• afcf8cd ipv4: fix several missing bounds checks
• 4af4fce html: avoid quadratic complexity when coalescing text nodes
• 7e56200 quic: per-path connection ids
• c1d31df go.mod: update golang.org/x dependencies
• Additional commits viewable in compare view

Updates github.com/charmbracelet/x/ansi from 0.11.8 to 0.11.9

Commits

• faa4adf ansi/v0.11.9
• 09f7503 feat(ansi): OSC 7501 (#1004)
• ad85c59 chore(powernap): update lsp configs from nvim-lspconfig
• 953920d nerdfont/v0.1.0
• 4edfc00 feat(nerdfont): overrides (#1000)
• 7be62f4 chore(deps): bump golang.org/x/sys in /term in the all group (#996)
• 29bfdbd feat: nerdfont
• 9c77d67 chore(powernap): update lsp configs from nvim-lspconfig
• d676b01 v0.1.0 for charmtone and slices
• 53e2afe chore(powernap): update lsp configs from nvim-lspconfig
• Additional commits viewable in compare view

Updates github.com/mattn/go-runewidth from 0.0.30 to 0.0.31

Commits

• 466251b Merge pull request #118 from mattn/more-format-controls
• 180bd26 Treat the remaining invisible format controls as zero width
• cffa69d Merge pull request #117 from abo3losh1/fix/nonprint-format-chars
• 4b4e798 Treat bidi isolates and other invisible format characters as zero width
• 8445f99 Merge pull request #116 from mattn/latin-letters-narrow
• f46a7b3 Update the East Asian width totals in the benchmarks
• a3ce759 Measure ambiguous Latin letters as one cell in East Asian locales
• d74f63e Merge pull request #115 from mattn/hegel-fixes
• ea10d6a Cap only the part of a cluster that is drawn as one glyph
• 471864b Measure an incomplete UTF-8 sequence at the end of the text
• Additional commits viewable in compare view

Updates github.com/xo/terminfo from 1.2.0 to 1.3.1

Release notes

Sourced from github.com/xo/terminfo's releases.

terminfo v1.3.1

Fixed

• Decode returns ErrInvalidHeader for a negative count in the main header, as ncurses does. Before, such a file panicked.
• Decode no longer panics on an acs_chars value of odd length. The value now matches infocmp: an unpaired last byte stays at the end, and when a source character repeats, the last pair wins.
• Printf reads a % format as ncurses tparm does. Before the verb, a format accepts only the flags, a width and a precision. A width or precision over 10000 drops the flags. Before, a 12-byte string such as %:%%999999XX returned 1 MB.

Changed

• %c ignores its width, and %:+ is the + operator, as in ncurses.

Thanks to Andrei Beshkov (@​aibeshkov), who found these faults with fuzzing.

Full Changelog: xo/terminfo@v1.3.0...v1.3.1

terminfo v1.3.0

Added

• Puts(w, s, lines, baud) writes a capability with its padding applied, as tputs in ncurses does. A padding marker, such as the $<100/> in the flash of xterm, now becomes a delay and is not printed (D23).

Changed

• Load returns ErrFileNotFound when no directory holds the entry (D29).
• ColorLevelFromEnv returns ColorLevelBasic for a terminal with 8 to 255 colors. It returned ColorLevelNone for 8 or 16 colors (D24).
• StringCaps, StringCapsShort, ExtStringCaps and ExtStringCapsShort leave out each absent capability (D28).
• capvals.go is generated from ncurses 6.6, and names the release (D26). The constants did not change.

Removed

• ErrDatabaseDirectoryNotFound. A caller that compares with it must compare with ErrFileNotFound (D29).

Project

• CI runs golangci-lint v2.14.0 (D25).
• The README has the layout, badges and project links of the other xo packages.

The decisions are in docs/PLAN.md.

Full Changelog: xo/terminfo@v1.2.1...v1.3.0

terminfo v1.2.1

Full Changelog: xo/terminfo@v1.2.0...v1.2.1

Commits

• fd69d4a Fix two crashes in Decode and bound the output of a Printf format
• 41b695f Add Puts, lint with golangci-lint, and answer the open questions
• 17127ac Read $HOME for ~/.terminfo, as ncurses does
• 773318f Set terminfo up for coding agents as every xo repository is
• See full diff in compare view

Updates golang.org/x/sys from 0.48.0 to 0.49.0

Commits

• b6b8557 unix/linux: unify ppc64x syscall wrappers
• aab6988 unix: add PrctlArg5Ptr
• cdfd984 unix: pass fcntl data as unsafe.Pointer in FcntlF{lock,store} on darwin
• 782b836 unix/linux: don't warn about closed stderr from child process
• 61592fb unix: return syscall error in *listxattrNS on BSD
• c136fda unix/linux/Dockerfile: update to Go 1.26.8
• f1d0d79 unix: pass xattr data as unsafe.Pointer in BSD xattr syscalls
• 67f850b unix: update linux to v7.2
• eb1f659 unix: add O_EXEC and O_SEARCH on darwin
• 51bc731 unix: add Mmsghdr for linux
• Additional commits viewable in compare view

Updates golang.org/x/text from 0.42.0 to 0.43.0

Commits

• ac40b0f go.mod: update golang.org/x dependencies
• 6dcc5b6 unicode/bidi: avoid quadratic behavior in Paragraph.Order and Paragraph.Line
• d0ecd29 secure/bidirule: lazily precompute ASCII table
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang.org/​x/​net@​v0.59.0 ⏵ v0.62.0

View full report

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.