Skip to content

build(deps): bump github.com/charmbracelet/x/ansi from 0.11.8 to 0.11.9 - #249

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/charmbracelet/x/ansi-0.11.9
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/charmbracelet/x/ansi-0.11.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/charmbracelet/x/ansi from 0.11.8 to 0.11.9.

Commits
  • faa4adf ansi/v0.11.9
  • 09f7503 feat(ansi): OSC 7501 (#1004)
  • ad85c59 chore(powernap): update lsp configs from nvim-lspconfig
  • 953920d nerdfont/v0.1.0
  • 4edfc00 feat(nerdfont): overrides (#1000)
  • 7be62f4 chore(deps): bump golang.org/x/sys in /term in the all group (#996)
  • 29bfdbd feat: nerdfont
  • 9c77d67 chore(powernap): update lsp configs from nvim-lspconfig
  • d676b01 v0.1.0 for charmtone and slices
  • 53e2afe chore(powernap): update lsp configs from nvim-lspconfig
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/charmbracelet/x/ansi](https://github.com/charmbracelet/x) from 0.11.8 to 0.11.9.
- [Commits](charmbracelet/x@ansi/v0.11.8...ansi/v0.11.9)

---
updated-dependencies:
- dependency-name: github.com/charmbracelet/x/ansi
  dependency-version: 0.11.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 15, 2026 18:43
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 15, 2026
@clawsweeper

clawsweeper Bot commented Oct 15, 2026 •

Copy link
Copy Markdown

🦞👀
ClawSweeper picked this up.

Pull request received. I will update this pull request when review starts.

ClawSweeper review complete

ClawSweeper finished reviewing this revision. The review result is being finalized.

View the workflow run.

@clawsweeper clawsweeper Bot added P3 Low-risk cleanup, docs, polish, ergonomics, or speculative feature. rating: 🦐 gold shrimp Decent PR readiness signal, but merge confidence is limited. status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR. labels Oct 15, 2026
@clawsweeper

clawsweeper Bot commented Oct 15, 2026

Copy link
Copy Markdown

Codex review: needs maintainer review before merge.

What this changes

This PR updates github.com/charmbracelet/x/ansi from v0.11.8 to v0.11.9 and replaces its module checksums.

Example: Build Gitcrawl and open its terminal cluster browser.

  • Before: The build selects ANSI v0.11.8 for terminal rendering.
  • After: The build selects ANSI v0.11.9; no visible rendering change is established.

Review scores

Measure Result What it means
Overall readiness 🦐 gold shrimp (3/6) The small patch is source-reviewed and supported by passing exact-head checks, with no live rendering evidence supplied.
Proof confidence 🦐 gold shrimp (3/6) Dependabot-authored maintenance is outside the ordinary contributor proof gate; exact-head CI supports compatibility but does not establish a live terminal-rendering result.
Patch quality 🐚 platinum hermit (4/6) No actionable review findings were identified.

Product

Kind: Maintenance · Worth it: Yes · Fix scope: Complete
User problem: No specific user-visible defect is claimed; the existing terminal-rendering dependency has a newer patch release.
Reason: A minimal dependency refresh follows established repository practice and preserves the existing application contract.

Merge readiness

✅ Ready for maintainer review

Keep open: current main still pins v0.11.8, and this narrowly scoped dependency update has no identified correctness or security defect. Another open PR contains the same update, but repository policy does not permit closing on that basis.

Priority: P3
Reviewed head: 9b8674c9e40be749a71732ab6ac230c0cdf18e8b

Before merge

None.

Findings

None.

Tests

  • Missing end-to-end proof: The supplied evidence does not exercise terminal rendering with the updated module; the ordinary contributor proof gate is inapplicable to this bot-authored PR.
Agent review details

How this fits together

Gitcrawl's terminal browser passes styled text through ANSI width and cropping helpers to produce terminal-sized rows and overlays.

flowchart LR
A[Local archive] --> B[Terminal browser]
B --> C[Layout and overlays]
C --> D[ANSI width and cropping]
D --> E[Terminal output]
Loading

Technical review

Best possible solution:

Land the ANSI update through this PR or the overlapping CrawlKit update, then retire the redundant PR once implementation on main is verified.

Do we have a high-confidence way to reproduce the issue?

This is dependency maintenance rather than a reported bug; no target code or tests were executed during this read-only review.

Is this the best way to solve the issue?

The version and checksum update is appropriately narrow, although the same change is also included in the open CrawlKit update.

AGENTS.md: found but not applied because it conflicted with ClawSweeper's review contract.

Codex review notes: model internal, reasoning medium; reviewed against 0b0b979b3cd6.

Provenance checked

Testing

Proof path: unit tests only.

Security

None.

Evidence

What I checked:

  • Verified introduced change and current main: The pinned introduction diff changes only the ANSI version and two checksum lines; current main retains v0.11.8. (go.mod:10, 9b8674c9e40b)
  • Upstream module changes: The ANSI module adds OSC 7501 helpers and tests, and refreshes go-colorful and go-runewidth requirements; existing width and cropping implementations are unchanged. Gitcrawl already selects versions meeting those refreshed requirements. The module retains Go 1.24.2. Root and ansi-subtree AGENTS.md lookups returned 404. (ansi/go.mod:3, faa4adf95555)
  • Production consumer and dependency-policy signal: The terminal layout imports this dependency and calls ansi.Cut and ansi.StringWidth for overlays and padding, establishing a concrete runtime dependency. (internal/cli/tui_layout.go:481, 0b0b979b3cd6)
  • Prior dependency intent: Merged chore(deps): refresh dependencies #159 refreshed ANSI from v0.11.7 to v0.11.8 as routine dependency maintenance; this PR continues that approach. (go.mod:10, becc7bb8b8f2)
  • Exact-head checks and discussion: Checks for the reviewed head include successful Linux and macOS Go jobs, Windows validation, Docker, documentation, and secret scanning; CodeQL is neutral. Full comments contain review-status messages, with no substantive approval or behavior proof. (.github/workflows/ci.yml, 9b8674c9e40b)
  • Verified overlapping open work: build(deps): bump github.com/openclaw/crawlkit from 0.16.7 to 0.17.0 #247 also updates ANSI to v0.11.9 with identical checksums while upgrading CrawlKit and other dependencies; it is open, so it does not establish implementation on main. (go.mod:10, 0b0b979b3cd6)

Likely related people:

  • Peter Steinberger: Raw commit dc565b4 adds internal/cli/tui_layout.go:481 relative to its recorded parents. This identifies author metadata, not feature responsibility or a PR merger. (role: source-line author; confidence: high; commits: dc565b4fc007; files: internal/cli/tui_layout.go)

Labels

Label changes:

  • add P3: Routine patch dependency maintenance with no demonstrated urgent user-facing failure.
  • add rating: 🦐 gold shrimp: Overall readiness is 🦐 gold shrimp; proof is 🦐 gold shrimp and patch quality is 🐚 platinum hermit.
  • add status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR.

Label justifications:

  • P3: Routine patch dependency maintenance with no demonstrated urgent user-facing failure.
  • rating: 🦐 gold shrimp: Overall readiness is 🦐 gold shrimp; proof is 🦐 gold shrimp and patch quality is 🐚 platinum hermit.
  • status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR.

Rating scale

6/6 🦀 challenger crab · 5/6 🦞 diamond lobster · 4/6 🐚 platinum hermit · 3/6 🦐 gold shrimp · 2/6 🦪 silver shellfish · 1/6 🧂 unranked krab. Overall follows the weaker of proof and patch quality; ✨ marks media proof (a screenshot, video, or linked artifact) that directly shows the changed behavior.

Workflow

ClawSweeper edits this one comment on every review. Comment @clawsweeper re-review for a fresh review only. Repair and merge execution lanes are retired.

Reviewed October 15, 2026, 2:57 PM ET / 18:57 UTC.

steipete added a commit that referenced this pull request Oct 15, 2026
Consolidate Dependabot #246, #247, #248, #249, #250, and #251. Update CrawlKit to 0.17.0, ANSI helpers to 0.11.9, transitive modules, and the Node setup, GoReleaser, app-token, and secret-scanning actions. Retain the Go 1.27.2 minimum. Thanks @dependabot.

Expose an explicit release dry run, forwarding the typed input to the shared workflow so the current version can be built, signed, and verified without publication. Document the command.

Validation: full make check passed on AWS, including 85.1% coverage, govulncheck with no vulnerabilities, docs, release-script tests, and six-platform snapshot builds. actionlint and independent Codex autoreview through P3 passed. Exact-head CI was required before merge.
@steipete

Copy link
Copy Markdown
Contributor

Included charmbracelet/x/ansi 0.11.9 in #252, now merged. The consolidated update passed the full make check gate, including govulncheck, 85.1% coverage, six-platform snapshot builds, and exact-head Linux/macOS/Windows/Docker CI. Closing this superseded dependency PR. Thanks!

@steipete steipete closed this Oct 15, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/charmbracelet/x/ansi-0.11.9 branch October 15, 2026 22:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code P3 Low-risk cleanup, docs, polish, ergonomics, or speculative feature. rating: 🦐 gold shrimp Decent PR readiness signal, but merge confidence is limited. status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant