Skip to content

chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.8 to 6.8.1#465

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/main/github.com/jedib0t/go-pretty/v6-6.8.1
Closed

chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.8 to 6.8.1#465
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/main/github.com/jedib0t/go-pretty/v6-6.8.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/jedib0t/go-pretty/v6 from 6.7.8 to 6.8.1.

Release notes

Sourced from github.com/jedib0t/go-pretty/v6's releases.

v6.8.1

What's Changed

A hardening pass across the table, list, progress, and text packages, fixing security issues, crash/race bugs, and performance problems in the render hot paths, with benchmarks added to back the optimizations.

Security

  • table/list (HTML): escape the title, caption, and CSS class names in RenderHTML() to prevent HTML/attribute injection.
  • table (CSV): make RenderCSV() output RFC 4180 compliant, and add an opt-in Style().CSV.FieldProtection option that neutralizes spreadsheet formula-injection fields (=, +, -, @, tab, CR).
  • text: sanitize hyperlink URLs and bound the escape-sequence parser buffer so adversarial input can't grow it without limit.

Correctness

  • progress: fix a render panic on tiny tracker lengths, data races on tracker/indicator state, and a leaked time.Ticker in the terminal-size watcher.
  • table: guard auto-index rendering against empty maxColumnLengths.
  • text: prevent a panic in VAlign.Apply on negative maxLines.

Performance

  • table: compile regex filters once per render; pre-size render builders.
  • list: hoist repeated width math out of the render loops.
  • text: speed up Align.Apply and StringWidthWithoutEscSequences.
  • progress: build PacManChomp frames with a strings.Builder.

Tooling

  • Moved root-level benchmarks into their packages and wired up make bench; added benchmarks for the table/text/list/progress render hot paths and tests covering the retained-done-tracker render paths.

Full Changelog: jedib0t/go-pretty@v6.8.0...v6.8.1

v6.8.0

What's Changed

New Contributors

Full Changelog: jedib0t/go-pretty@v6.7.10...v6.8.0

v6.7.10

What's Changed

... (truncated)

Commits
  • 22c68f6 fix panics, races, and injection vectors; speed up render hot paths (#409)
  • 45fb00d text: wrap wide runes when wrapLen is odd in WrapHard (#408)
  • ad17549 progress: fix speed decay on done trackers and log overwrite; fixes #405 (#406)
  • 66563fd text: fix panic on align with unicode (#404)
  • 017a359 table: markdown padding for human-friendly output; fixes #402 (#403)
  • See full diff in compare view

@dependabot dependabot Bot added the Type: Maintenance Updating phrasing or wording to make things clearer or removing ambiguity. label Jun 15, 2026

@ehsandeep ehsandeep left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot merge

Bumps [github.com/jedib0t/go-pretty/v6](https://github.com/jedib0t/go-pretty) from 6.7.8 to 6.8.1.
- [Release notes](https://github.com/jedib0t/go-pretty/releases)
- [Commits](jedib0t/go-pretty@v6.7.8...v6.8.1)

---
updated-dependencies:
- dependency-name: github.com/jedib0t/go-pretty/v6
  dependency-version: 6.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/main/github.com/jedib0t/go-pretty/v6-6.8.1 branch from d2b46e3 to b790b9b Compare June 24, 2026 11:29

@ehsandeep ehsandeep left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot merge

@ehsandeep ehsandeep closed this Jun 24, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 24, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/go_modules/main/github.com/jedib0t/go-pretty/v6-6.8.1 branch June 24, 2026 19:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Type: Maintenance Updating phrasing or wording to make things clearer or removing ambiguity.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant