Skip to content

chore(deps): update dependency: bump github.com/jedib0t/go-pretty/v6 from 6.7.10 to 6.8.1#46

Merged
DistroByte merged 1 commit into
masterfrom
dependabot/go_modules/master/github.com/jedib0t/go-pretty/v6-6.8.1
Jun 25, 2026
Merged

chore(deps): update dependency: bump github.com/jedib0t/go-pretty/v6 from 6.7.10 to 6.8.1#46
DistroByte merged 1 commit into
masterfrom
dependabot/go_modules/master/github.com/jedib0t/go-pretty/v6-6.8.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 11, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/jedib0t/go-pretty/v6 from 6.7.10 to 6.8.1.

Release notes

Sourced from github.com/jedib0t/go-pretty/v6's releases.

v6.8.1

What's Changed

A hardening pass across the table, list, progress, and text packages, fixing security issues, crash/race bugs, and performance problems in the render hot paths, with benchmarks added to back the optimizations.

Security

  • table/list (HTML): escape the title, caption, and CSS class names in RenderHTML() to prevent HTML/attribute injection.
  • table (CSV): make RenderCSV() output RFC 4180 compliant, and add an opt-in Style().CSV.FieldProtection option that neutralizes spreadsheet formula-injection fields (=, +, -, @, tab, CR).
  • text: sanitize hyperlink URLs and bound the escape-sequence parser buffer so adversarial input can't grow it without limit.

Correctness

  • progress: fix a render panic on tiny tracker lengths, data races on tracker/indicator state, and a leaked time.Ticker in the terminal-size watcher.
  • table: guard auto-index rendering against empty maxColumnLengths.
  • text: prevent a panic in VAlign.Apply on negative maxLines.

Performance

  • table: compile regex filters once per render; pre-size render builders.
  • list: hoist repeated width math out of the render loops.
  • text: speed up Align.Apply and StringWidthWithoutEscSequences.
  • progress: build PacManChomp frames with a strings.Builder.

Tooling

  • Moved root-level benchmarks into their packages and wired up make bench; added benchmarks for the table/text/list/progress render hot paths and tests covering the retained-done-tracker render paths.

Full Changelog: jedib0t/go-pretty@v6.8.0...v6.8.1

v6.8.0

What's Changed

New Contributors

Full Changelog: jedib0t/go-pretty@v6.7.10...v6.8.0

Commits
  • 22c68f6 fix panics, races, and injection vectors; speed up render hot paths (#409)
  • 45fb00d text: wrap wide runes when wrapLen is odd in WrapHard (#408)
  • ad17549 progress: fix speed decay on done trackers and log overwrite; fixes #405 (#406)
  • See full diff in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 11, 2026
@DistroByte DistroByte enabled auto-merge (squash) June 25, 2026 01:46
Bumps [github.com/jedib0t/go-pretty/v6](https://github.com/jedib0t/go-pretty) from 6.7.10 to 6.8.1.
- [Release notes](https://github.com/jedib0t/go-pretty/releases)
- [Commits](jedib0t/go-pretty@v6.7.10...v6.8.1)

---
updated-dependencies:
- dependency-name: github.com/jedib0t/go-pretty/v6
  dependency-version: 6.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/master/github.com/jedib0t/go-pretty/v6-6.8.1 branch from f71fd4a to 693ab51 Compare June 25, 2026 01:47
@DistroByte DistroByte merged commit dbe1212 into master Jun 25, 2026
2 checks passed
@DistroByte DistroByte deleted the dependabot/go_modules/master/github.com/jedib0t/go-pretty/v6-6.8.1 branch June 25, 2026 01:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant