Skip to content

deps: bump github.com/charmbracelet/glamour from 0.10.0 to 1.0.0 in /src#18

Merged
ranaroussi merged 1 commit intodevelopfrom
dependabot/go_modules/src/github.com/charmbracelet/glamour-1.0.0
Mar 11, 2026
Merged

deps: bump github.com/charmbracelet/glamour from 0.10.0 to 1.0.0 in /src#18
ranaroussi merged 1 commit intodevelopfrom
dependabot/go_modules/src/github.com/charmbracelet/glamour-1.0.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 11, 2026

Bumps github.com/charmbracelet/glamour from 0.10.0 to 1.0.0.

Commits
  • 69661fd chore(deps): bump actions/checkout from 5 to 6 in the all group (#491)
  • 0af1a2d chore(deps): bump the all group with 2 updates (#482)
  • a9ec019 chore(deps): bump github.com/charmbracelet/x/ansi in the all group (#477)
  • 7a4cf0c ci: sync dependabot config (#476)
  • 49c8248 chore(deps): bump the all group with 2 updates (#472)
  • c1ce505 chore(deps): bump actions/setup-go from 5 to 6 in the all group (#471)
  • f9c650c ci: sync dependabot config (#470)
  • e3c481b chore(deps): bump actions/checkout from 4 to 5 (#469)
  • 7209389 chore(deps): bump golang.org/x/term from 0.33.0 to 0.34.0 (#468)
  • f447e14 chore(deps): bump github.com/charmbracelet/x/ansi from 0.9.3 to 0.10.1 (#467)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/charmbracelet/glamour](https://github.com/charmbracelet/glamour) from 0.10.0 to 1.0.0.
- [Release notes](https://github.com/charmbracelet/glamour/releases)
- [Commits](charmbracelet/glamour@v0.10.0...v1.0.0)

---
updated-dependencies:
- dependency-name: github.com/charmbracelet/glamour
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 11, 2026

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@greptile-apps
Copy link

greptile-apps bot commented Mar 11, 2026

Greptile Summary

This PR upgrades github.com/charmbracelet/glamour from v0.10.0 to v1.0.0 (a major-version bump) and pulls in updated transitive dependencies (goldmark 1.7.8→1.7.13, goldmark-emoji 1.0.5→1.0.6). Glamour is used in two places in the codebase — src/pkg/ui/ui.go (RenderMarkdown) and src/cmd/sessions.go (runSessionsMessages) — both via the stable public API (glamour.NewTermRenderer, glamour.WithStylePath, glamour.WithWordWrap). These core APIs are unchanged in v1.0.0, which represents the library declaring a stable public interface rather than introducing breaking changes.

Key details:

  • go.mod and go.sum are correctly updated and consistent with each other
  • The stale goldmark v1.7.1/go.mod reference has been properly removed from go.sum
  • No source code changes are required; all glamour call sites remain compatible with v1.0.0
  • The upgrade carries a Dependabot compatibility score indicating high safety

Confidence Score: 5/5

  • This PR is safe to merge — it is a routine automated dependency bump with no source changes required.
  • The only modified files are go.mod and go.sum. The glamour v1.0.0 release stabilises the public API rather than breaking it, and the two call sites in the codebase use only core options (NewTermRenderer, WithStylePath, WithWordWrap) that are present and unchanged in v1.0.0. Indirect dependency bumps are minor/patch releases with no behavioral risk.
  • No files require special attention.

Important Files Changed

Filename Overview
src/go.mod Bumps github.com/charmbracelet/glamour from v0.10.0 to v1.0.0 (major version), with companion indirect dependency updates to goldmark (1.7.8→1.7.13) and goldmark-emoji (1.0.5→1.0.6). Version string change is correct and well-formed.
src/go.sum Lockfile correctly updated with new hashes for glamour v1.0.0 and transitive dependency version bumps. Stale goldmark v1.7.1/go.mod entry removed and replaced with v1.7.13 entries as expected.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[src/cmd/sessions.go] -->|glamour.NewTermRenderer| C[glamour v1.0.0]
    B[src/pkg/ui/ui.go\nRenderMarkdown] -->|glamour.NewTermRenderer| C
    C --> D[goldmark v1.7.13\nMarkdown parser]
    D --> E[goldmark-emoji v1.0.6]
Loading

Last reviewed commit: 3ef2a82

@ranaroussi ranaroussi merged commit 6a5444d into develop Mar 11, 2026
3 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/src/github.com/charmbracelet/glamour-1.0.0 branch March 11, 2026 17:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant