Skip to content

Bump the minor-and-patch group with 5 updates#119

Merged
wesm merged 2 commits intomainfrom
dependabot/go_modules/minor-and-patch-9d210f0846
Feb 11, 2026
Merged

Bump the minor-and-patch group with 5 updates#119
wesm merged 2 commits intomainfrom
dependabot/go_modules/minor-and-patch-9d210f0846

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Feb 9, 2026

Bumps the minor-and-patch group with 5 updates:

Package From To
github.com/charmbracelet/x/ansi 0.11.5 0.11.6
golang.org/x/mod 0.32.0 0.33.0
golang.org/x/oauth2 0.34.0 0.35.0
golang.org/x/sys 0.39.0 0.40.0
golang.org/x/text 0.32.0 0.33.0

Updates github.com/charmbracelet/x/ansi from 0.11.5 to 0.11.6

Commits
  • 7642919 fix(ansi): use our own configuration for CJK width handling (#758)
  • a1c6140 chore(cellbuf): bump ansi to reduce memory allocations
  • See full diff in compare view

Updates golang.org/x/mod from 0.32.0 to 0.33.0

Commits

Updates golang.org/x/oauth2 from 0.34.0 to 0.35.0

Commits

Updates golang.org/x/sys from 0.39.0 to 0.40.0

Commits
  • 2f44229 sys/cpu: add symbolic constants for remaining cpuid bits
  • e5770d2 sys/cpu: use symbolic names for masks
  • 714a44c sys/cpu: modify x86 port to match what internal/cpu does
  • See full diff in compare view

Updates golang.org/x/text from 0.32.0 to 0.33.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Feb 9, 2026
@dependabot dependabot Bot requested a review from wesm as a code owner February 9, 2026 22:41
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Feb 9, 2026
@roborev-ci
Copy link
Copy Markdown

roborev-ci Bot commented Feb 9, 2026

roborev: Combined Review

Summary verdict: Clean dependency-only change; no issues found.

Critical

  • None.

High

  • None.

Medium

  • None.

Low

  • None.

All agents report no findings; the diff appears clean.


Synthesized from 4 reviews (agents: codex, gemini | types: review, security)

dependabot Bot and others added 2 commits February 11, 2026 06:24
Bumps the minor-and-patch group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/charmbracelet/x/ansi](https://github.com/charmbracelet/x) | `0.11.5` | `0.11.6` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.32.0` | `0.33.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.34.0` | `0.35.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.39.0` | `0.40.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.32.0` | `0.33.0` |


Updates `github.com/charmbracelet/x/ansi` from 0.11.5 to 0.11.6
- [Commits](charmbracelet/x@ansi/v0.11.5...ansi/v0.11.6)

Updates `golang.org/x/mod` from 0.32.0 to 0.33.0
- [Commits](golang/mod@v0.32.0...v0.33.0)

Updates `golang.org/x/oauth2` from 0.34.0 to 0.35.0
- [Commits](golang/oauth2@v0.34.0...v0.35.0)

Updates `golang.org/x/sys` from 0.39.0 to 0.40.0
- [Commits](golang/sys@v0.39.0...v0.40.0)

Updates `golang.org/x/text` from 0.32.0 to 0.33.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.32.0...v0.33.0)

---
updated-dependencies:
- dependency-name: github.com/charmbracelet/x/ansi
  dependency-version: 0.11.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/mod
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/sys
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/text
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@wesm wesm force-pushed the dependabot/go_modules/minor-and-patch-9d210f0846 branch from 17471f7 to 8ab68c4 Compare February 11, 2026 13:10
@roborev-ci
Copy link
Copy Markdown

roborev-ci Bot commented Feb 11, 2026

roborev: Combined Review

Verdict: No issues found — this PR appears clean and safe to merge.

All four reviews agree the changes are limited to routine dependency updates (go.mod/go.sum) plus the matching vendorHash update in flake.nix, with no identified security, correctness, or maintainability issues.


Synthesized from 4 reviews (agents: codex, gemini | types: security, review)

@wesm wesm merged commit a3cf87b into main Feb 11, 2026
3 checks passed
@dependabot dependabot Bot deleted the dependabot/go_modules/minor-and-patch-9d210f0846 branch February 11, 2026 13:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant