Skip to content

deps: update dependencies to latest - #383

Merged
jongio merged 2 commits into
mainfrom
deps/update-2026-07-27
Jul 31, 2026
Merged

deps: update dependencies to latest#383
jongio merged 2 commits into
mainfrom
deps/update-2026-07-27

Conversation

@jongio

@jongio jongio commented Jul 27, 2026

Copy link
Copy Markdown
Owner

Brings the Go modules and the web/ npm tree up to their latest published versions.

Go

package from to
charm.land/glamour/v2 v1.0.0 (charmbracelet/glamour) v2.0.1
modernc.org/sqlite v1.54.0 v1.55.0
modernc.org/libc v1.74.3 (retracted) v1.74.4
github.com/yuin/goldmark v1.8.4 v1.8.5
github.com/charmbracelet/ultraviolet 20260720091822 20260730003005
github.com/charmbracelet/x/exp/golden 20260726004341 20260730164118
github.com/charmbracelet/x/exp/slice 20260726004341 20260730164118
golang.org/x/exp 20260718201538 20260727155853

Glamour v2 moved to the charm.land vanity path and builds on lipgloss v2, so the pinned lipgloss v1 indirect from issue #59 is gone along with go-osc52, x/cellbuf, muesli/reflow, muesli/termenv, and golang.org/x/term. The API used by internal/tui/markdown didn't change, so only import paths moved. modernc.org/libc v1.74.3 was retracted upstream, so this clears a retracted module.

web (npm)

package from to
astro 7.1.3 7.1.6
@astrojs/check 0.9.9 0.9.10
@types/node 26.1.1 26.1.2
shiki 4.3.1 4.4.1
@astrojs/compiler-rs 0.3.1 0.3.2
@astrojs/internal-helpers 0.10.1 0.10.2
@astrojs/markdown-satteri 0.3.4 0.3.5
js-yaml 4.3.0 4.3.1
smol-toml 1.7.0 1.7.1

CI pins

pin from to
mvdan.cc/gofumpt v0.10.0 v0.11.0
goreleaser v2.17.0 v2.17.1

github.com/creack/pty stays on v1.1.24. The proxy still serves a creack/pty/v2 v2.0.1, but that tag was deleted upstream and its content is from 2023, a year older than v1.1.24, so v1 is the live line.

Validation: build, lint, typecheck, and tests all pass. Also checked cross-compile for darwin, windows, and linux on amd64 and arm64, govulncheck and npm audit (both clean), and coverage at 80.1% against the 60% gate.

- charm.land/glamour/v2: v2.0.1 (was github.com/charmbracelet/glamour v1.0.0)
- modernc.org/libc: v1.74.3 (retracted) -> v1.74.4
- github.com/charmbracelet/x/exp/golden: 20260726004341 -> 20260727090823
- github.com/charmbracelet/x/exp/slice: 20260726004341 -> 20260727090823
- golang.org/x/exp: 20260718201538 -> 20260727155853
- astro: 7.1.3 -> 7.1.4
- @astrojs/check: 0.9.9 -> 0.9.10
- @types/node: 26.1.1 -> 26.1.2
- CI gofumpt pin: v0.10.0 -> v0.11.0
- CI goreleaser pin: v2.17.0 -> v2.17.1

Glamour v2 moved to the charm.land vanity import path and now builds on
lipgloss v2, so the pinned lipgloss v1 indirect dependency from issue #59
is gone, along with go-osc52, x/cellbuf, muesli/reflow, muesli/termenv,
and golang.org/x/term. The public API used by internal/tui/markdown is
unchanged, so only the import paths moved.

modernc.org/libc v1.74.3 was retracted upstream, so this also clears a
retracted module from the build.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 7b365a6a-506f-4d86-a9d3-a7bdbbf9ee5b
@jongio jongio added the deps Dependency updates label Jul 27, 2026
@jongio jongio self-assigned this Jul 27, 2026
- modernc.org/sqlite: v1.54.0 -> v1.55.0
- github.com/yuin/goldmark: v1.8.4 -> v1.8.5
- github.com/charmbracelet/ultraviolet: 20260720091822 -> 20260730003005
- github.com/charmbracelet/x/exp/golden: 20260727090823 -> 20260730164118
- github.com/charmbracelet/x/exp/slice: 20260727090823 -> 20260730164118
- astro: 7.1.4 -> 7.1.6, which pulls shiki 4.3.1 -> 4.4.1,
  @astrojs/compiler-rs 0.3.1 -> 0.3.2, and js-yaml 4.3.0 -> 4.3.1

github.com/creack/pty stays on v1.1.24. The module proxy still serves a
github.com/creack/pty/v2 v2.0.1, but that tag was deleted upstream and its
content is from 2023, a year older than v1.1.24, so v1 is the live line.

Every CI tool pin and pinned action SHA was checked and is already current.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 322b4a6b-6ff1-4af4-a0e5-ee8f09b78c2c
@jongio
jongio merged commit 2e252e1 into main Jul 31, 2026
2 checks passed
@jongio
jongio deleted the deps/update-2026-07-27 branch July 31, 2026 20:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

deps Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant