Skip to content

chore(deps): bump charm.land/bubbletea/v2 from 2.0.9 to 2.0.10 - #14541

Merged
williammartin merged 1 commit into
trunkfrom
dependabot/go_modules/charm.land/bubbletea/v2-2.0.10
Sep 29, 2026
Merged

chore(deps): bump charm.land/bubbletea/v2 from 2.0.9 to 2.0.10#14541
williammartin merged 1 commit into
trunkfrom
dependabot/go_modules/charm.land/bubbletea/v2-2.0.10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor

Bumps charm.land/bubbletea/v2 from 2.0.9 to 2.0.10.

Release notes

Sourced from charm.land/bubbletea/v2's releases.

v2.0.10

Change to no input programs

This is a small change to programs with no WithInput. Removed capability queries, which resulted in leaking of raw ANSI escape sequences.

Changelog

Fixed

  • 8b10e22689cdaf2c6f7adc70c8fe2241fe0f9404: fix: skip capability queries when input is disabled (#1801) (@​drawmeanelephant)

Other stuff

  • d5bfd5c2ff7480a6b94536c1cf4e73569b8d523e: v2.0.10 (@​andrinoff)

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore(deps): bump charm.land/bubbletea/v2 from 2.0.9 to 2.0.10
863766c 
Bumps [charm.land/bubbletea/v2](https://github.com/charmbracelet/bubbletea) from 2.0.9 to 2.0.10.
- [Release notes](https://github.com/charmbracelet/bubbletea/releases)
- [Commits](charmbracelet/bubbletea@v2.0.9...v2.0.10)

---
updated-dependencies:
- dependency-name: charm.land/bubbletea/v2
  dependency-version: 2.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 28, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 28, 2026 14:04
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 28, 2026
@dependabot
dependabot Bot requested a review from BagToad September 28, 2026 14:04
@dependabot dependabot Bot added the go Pull requests that update Go code label Sep 28, 2026
@cli-triage

cli-triage Bot commented Sep 28, 2026

Copy link
Copy Markdown

Recommendation: Merge, Confidence: Medium

The diff only edits go.mod/go.sum. The dependency is direct (no // indirect on its require line), and upstream's v2.0.10 release is a single targeted fix, 8b10e22, that skips capability queries when a program disables input (avoiding leaked raw ANSI escape sequences), with no API surface change. I could not establish which of this module's packages are compiled into the shipped gh binary, since neither vendor/ nor /tmp/gh-aw/go-production-packages.txt was present for this run, so that missing evidence caps confidence at Medium despite the narrow, well-documented change.

Assessed at head commit 863766c17abb27104597dfb30a06072cc79a0a33.

Generated by Dependabot PR Triage (skills-driven) · copilot · auto · 44 AIC · ⌖ 1.6 AIC · ⊞ 7.3K · ◷

@williammartin
williammartin merged commit cfc615f into trunk Sep 29, 2026
42 checks passed
@williammartin
williammartin deleted the dependabot/go_modules/charm.land/bubbletea/v2-2.0.10 branch September 29, 2026 10:33
@BrewTestBot BrewTestBot mentioned this pull request Sep 30, 2026
Merged
@github-actions github-actions Bot mentioned this pull request Sep 30, 2026
Merged
3 tasks done
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@williammartin williammartin williammartin approved these changes
@BagToad BagToad Awaiting requested review from BagToad BagToad is a code owner automatically assigned from cli/code-reviewers

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@williammartin