Skip to content

fix(deps): update osv-scanner minor#2674

Open
renovate-bot wants to merge 4 commits intogoogle:mainfrom
renovate-bot:renovate/osv-scanner-minor
Open

fix(deps): update osv-scanner minor#2674
renovate-bot wants to merge 4 commits intogoogle:mainfrom
renovate-bot:renovate/osv-scanner-minor

Conversation

@renovate-bot
Copy link
Copy Markdown
Collaborator

@renovate-bot renovate-bot commented Mar 22, 2026

This PR contains the following updates:

Package Change Age Confidence
charm.land/lipgloss/v2 v2.0.1v2.0.3 age confidence
github.com/gkampitakis/go-snaps v0.5.20v0.5.21 age confidence
github.com/jedib0t/go-pretty/v6 v6.7.8v6.7.9 age confidence
github.com/modelcontextprotocol/go-sdk v1.4.1v1.5.0 age confidence
github.com/opencontainers/runtime-spec v1.2.1v1.3.0 age confidence
github.com/urfave/cli/v3 v3.7.0v3.8.0 age confidence
golang.org/x/term v0.40.0v0.42.0 age confidence
google.golang.org/grpc v1.79.3v1.80.0 age confidence

Release Notes

charmbracelet/lipgloss (charm.land/lipgloss/v2)

v2.0.3

Compare Source

Changelog

Fixed
Docs

The Charm logo

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

v2.0.2

Compare Source

Table patch

If you don't know, we made big improvements in table rendering recently shipped in v2.0.0.

@​MartinodF made a good job on improving it even further for tricky edge cases, in particular when content wrapping is enabled.

Changelog

Fixed

The Charm logo

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

gkampitakis/go-snaps (github.com/gkampitakis/go-snaps)

v0.5.21

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.20...v0.5.21

jedib0t/go-pretty (github.com/jedib0t/go-pretty/v6)

v6.7.9

Compare Source

What's Changed

Full Changelog: jedib0t/go-pretty@v6.7.8...v6.7.9

modelcontextprotocol/go-sdk (github.com/modelcontextprotocol/go-sdk)

v1.5.0

Compare Source

This release is equivalent to v1.5.0-pre.1. Thank you to those who tested the pre-release.

In this release we introduce important enhancements to the client-side OAuth flows. We also introduce several smaller fixes and improvements.

Stabilization of client-side OAuth APIs

As previously communicated, we're stabilizing the client-side OAuth APIs in v1.5.0. This means that the mcp_go_client_oauth build tag will no longer be required to compile the functionality and standard backward compatibility guarantees apply from now on.

Compared to the experimental support published in v1.4.0, we made some backwards incompatible changes:

  • auth.AuthorizationCodeHandlerConfig.AuthorizationCodeFetcher's type was changed from func(context.Context, *auth.AuthorizationArgs) (*auth.AuthorizationResult, error) to auth.AuthorizationCodeFetcher which is a reusable definition carrying the same underlying function type.
  • auth.AuthorizationCodeHandlerConfig.PreregisteredClientConfig was removed and replaced with auth.AuthorizationCodeHandlerConfig.PreregisteredClient which uses a newly introduced oauthex.ClientCredentials type. The type used previously (auth.PreregisteredClientConfig) has been removed.
  • Deprecated functionality has been removed from both auth and oauthex packages.

Enterprise Managed Authorization support added

Support for Enterprise Managed Authorization has been added to auth/extauth package. Huge thanks to @​radar07 for the implementation!

Note: this support is part of an official MCP extension and is not part of the core protocol. The support of this functionality is not covered by the principles defined in SDK tiers.

Other changes to the SDK

New Contributors

Full Changelog: modelcontextprotocol/go-sdk@v1.4.1...v1.5.0

opencontainers/runtime-spec (github.com/opencontainers/runtime-spec)

v1.3.0

Compare Source

This is the fourth minor release of the v1 series of the Open Container Initiative Runtime Specification.
This release features the addition of the specification for FreeBSD.

Additions
  • config-vm: add hwConfig object (#​1209)
  • config-linux: add intelRdt.schemata field (#​1230)
  • config-linux: add netDevices object (#​1271)
  • config-linux: add memoryPolicy object (#​1282)
  • config-freebsd: add the spec for FreeBSD (#​1286)
  • config-linux: add intelRdt.enableMonitoring field (#​1287)
Minor fixes
  • config-linux: clarify intelRdt configuration (#​1196)
  • runtime: fail when a poststart hook fails (#​1262)
  • config-linux: clarify pids cgroup settings (#​1279)
  • config-linux: define default clos for intelRdt (#​1289)
  • features-linux: add intelRdt.enableMonitoring field (#​1290)
  • features-linux: add intelRdt.schemata field (#​1291)
  • config-linux: fix and elaborate memoryPolicy.nodes field (#​1294)
  • config-linux, schema: fix FileMode description (#​1298)
Documentation, CI & Governance
  • add systemd-nspawn to implementations.md (#​1272)
  • CI: add codespell, bump golangci-lint (#​1281)
  • docs: add missing backticks for code formatting (#​1284)
  • docs: fix typo (#​1285)
  • principles: fix typo (#​1288)
  • schema: fix json (#​1297)
  • ci: use supported Go versions (#​1300)
  • Add minimum supported Go version to CI (#​1303)
  • Mention FreeBSD platform (#​1304)

Thanks to the following contributors for making this release possible: @​Artoria2e5 @​Sharmaann @​aojea @​ariel-anieli @​askervin @​cyphar @​dfr @​gogolok @​ipuustin @​kolyshkin @​marquiz @​oleksiimoisieiev @​tianon

Vote-Results: +9 -0 *2 (#​1302)
Signed-off-by: Akihiro Suda (@​AkihiroSuda)

urfave/cli (github.com/urfave/cli/v3)

v3.8.0

Compare Source

What's Changed

New Contributors

Full Changelog: urfave/cli@v3.7.0...v3.8.0

grpc/grpc-go (google.golang.org/grpc)

v1.80.0

Compare Source


Configuration

📅 Schedule: (in timezone Australia/Sydney)

  • Branch creation
    • "before 6am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate
Copy link
Copy Markdown

forking-renovate Bot commented Mar 22, 2026

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 8 additional dependencies were updated

Details:

Package Change
github.com/charmbracelet/colorprofile v0.4.2 -> v0.4.3
github.com/charmbracelet/x/ansi v0.11.6 -> v0.11.7
github.com/lucasb-eyer/go-colorful v1.3.0 -> v1.4.0
github.com/mattn/go-runewidth v0.0.20 -> v0.0.23
golang.org/x/oauth2 v0.34.0 -> v0.35.0
golang.org/x/sys v0.42.0 -> v0.43.0
golang.org/x/telemetry v0.0.0-20260109210033-bd525da824e2 -> v0.0.0-20260209163413-e7419c687ee4
golang.org/x/tools v0.41.0 -> v0.42.0

@forking-renovate forking-renovate Bot added the dependencies Pull requests that update a dependency file label Mar 22, 2026
@renovate-bot renovate-bot force-pushed the renovate/osv-scanner-minor branch 3 times, most recently from 375eae7 to b01979e Compare March 23, 2026 02:06
@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Mar 23, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 79.75%. Comparing base (123ef80) to head (44dfaf3).

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #2674      +/-   ##
==========================================
+ Coverage   79.63%   79.75%   +0.11%     
==========================================
  Files         117      117              
  Lines        8012     8005       -7     
==========================================
+ Hits         6380     6384       +4     
+ Misses       1255     1246       -9     
+ Partials      377      375       -2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate-bot renovate-bot force-pushed the renovate/osv-scanner-minor branch 16 times, most recently from 5cd8b42 to 079d4e7 Compare March 30, 2026 17:20
@renovate-bot renovate-bot force-pushed the renovate/osv-scanner-minor branch from 079d4e7 to f987814 Compare March 31, 2026 05:49
@renovate-bot renovate-bot force-pushed the renovate/osv-scanner-minor branch 6 times, most recently from e2068da to 0f8cbc6 Compare April 7, 2026 13:57
@renovate-bot renovate-bot force-pushed the renovate/osv-scanner-minor branch 12 times, most recently from 4d2f0c7 to 3478b3f Compare April 13, 2026 01:00
@cuixq
Copy link
Copy Markdown
Contributor

cuixq commented Apr 13, 2026

for version 3.8.0 of github.com/urfave/cli/v3, it seems an empty flag now sets the argument to be empty instead of erroring, see urfave/cli#2297 which caused the snapshot change.

we probably should rename the test case of WithDefaults/empty_plugins_flag_does_nothing to empty_plugins_flag_does_default considering the empty experimental plugins flag now indicates an empty list of experimental plugins which means the default list of plugins will be run.

@another-rex

@renovate-bot renovate-bot force-pushed the renovate/osv-scanner-minor branch 5 times, most recently from 2a967d6 to 0075c7b Compare April 21, 2026 01:09
@renovate-bot renovate-bot force-pushed the renovate/osv-scanner-minor branch from 0075c7b to d019ac7 Compare April 23, 2026 06:16
@forking-renovate
Copy link
Copy Markdown

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants