chore(deps): bump github.com/odvcencio/gotreesitter from 0.20.8 to 0.47.1 in the go-dependencies group across 1 directory

[dependabot]

Bumps the go-dependencies group with 1 update in the / directory: github.com/odvcencio/gotreesitter.

Updates github.com/odvcencio/gotreesitter from 0.20.8 to 0.47.1

Release notes

Sourced from github.com/odvcencio/gotreesitter's releases.

gotreesitter v0.47.1

Fixed

• Recovery reductions preserve deferred parent links during fresh parses. Valid Go files remain complete during final result materialization. The invariant guard still rejects invalid transient replacements.

v0.47.0 — generalized incremental correctness

This release closes the generalized incremental-correctness campaign: capability-based scanner admission, exact checkpoint receipts for stateful GSS forest reuse, strict ownership and fail-closed boundaries, JavaScript/TypeScript incremental scheduling work, and broader stateless-scanner admission. It also refreshes repository and release hygiene. See CHANGELOG.md for the complete evidence and residuals. This is the final planned off-cadence minor; planned minor releases move to Thursdays in America/Los_Angeles.

v0.46.0 — compact admission and editor contracts

Highlights

• Compact parser admission is ratcheted at 166 byte-exact routes out of 206 fixtures, with 35 fail-closed fallbacks and 5 token-source skips.
• Certified collapsed named leaves now materialize natively; compatibility passes have explicit ownership, witnesses, and retirement criteria.
• The editor gate now covers Go, JavaScript, TypeScript, Python, and CSS across insert, delete, and replace edits at start, middle, and end for roughly 20 KiB and 137 KiB sources, plus a manual 1 MiB tier.
• JavaScript and TypeScript transient-error deletes have deterministic parser-work, retry, stack, node, and memory bounds while remaining structurally equal to fresh parses.
• All 119 registered external scanners have a published, drift-tested incremental-reuse contract. SQL, HTML, and Markdown explicitly fail closed to the production full-parse path after the narrow token-invariant leaf exception declines.
• Incremental documentation now states the measured cost model: cheap edited-region parse work plus linear coordinate maintenance for affected trailing siblings, not an absolute O(edit) guarantee.

Evidence

• PR #428: odvcencio/gotreesitter#428
• Final-SHA CI, including root race and exhaustive cgo parity: https://github.com/odvcencio/gotreesitter/actions/runs/29892883776
• Manual full editor gate, 20 KiB / 137 KiB / 1 MiB: https://github.com/odvcencio/gotreesitter/actions/runs/29892922471/job/88836872560

Known limits

• Uncertified or explicitly opted-out external scanners retain the documented production full-parse fallback.
• JavaScript and TypeScript leading-prefix splice proof remains conservative for some middle and end edits; the new gates bound this behavior rather than claiming it is eliminated.
• Performance improvement beyond the ratcheted correctness and memory band remains ongoing work rather than a release gate.

v0.45.0

Fixed

• TypeScript arrow functions with a return-type annotation no longer collapse to ERROR as a const/let initializer (issue #402, PR #409). Example: const f = (a: A): B => { ... }. The typed-arrow and destructured-arrow-return-type detectors added in PR #389 did not cover this shape. Neither required the arrow to be immediately preceded by ). A typed, non-destructured parameter list combined with an explicit return-type annotation fell through both. This fix adds a dedicated detector for that shape. It widens the merge budget to two survivors, matching the typed-arrow and default-parameter cases. TSX was unaffected; its wider JSX conflict set already kept a second survivor alive. The detector also covers parenthesized return types: (a: A): (B) => a, (a: A): (string | number) => a, and (a: A): (() => B) => a. Its backward colon scan now balances parentheses, so a colon nested inside the return type is not mistaken

... (truncated)

Changelog

Sourced from github.com/odvcencio/gotreesitter's changelog.

[0.47.1] - 2026-07-28

Fixed

• Recovery reductions preserve deferred parent links during fresh parses. Valid Go files remain complete during final result materialization. The invariant guard still rejects invalid transient replacements.

[0.47.0] - 2026-07-22

Changed

• Stateful GSS forest trees now enter incremental reuse through exact checkpoint receipts. Admission requires the scanner's generic checkpoint and incremental-reuse capabilities, then authenticates non-empty start and end snapshots at every reachable token boundary. A missing endpoint declines the forest as scanner_checkpoint_unavailable instead of letting distinct unrepresentable states collide as empty snapshots. A length-changing stateful witness requires actual subtree reuse and deep fresh-tree equality; a synthetic absent-checkpoint scanner locks the fail-closed path.

• GSS forest trees now use capability-based incremental admission. Forest construction records exact pre-goto ownership for every reusable subtree, and the reuse cursor requires that ownership before transferring top-level nodes. Languages without an external scanner, plus scanners with an explicit stateless/failure-preserving proof, can therefore reuse forest-built trees without a language-name allowlist. AWK, KDL, Nix, Squirrel, and Uxntal are newly admitted through a shared multi-position and 137 KiB fresh-tree differential.

• JavaScript, TypeScript, and TSX leading incremental reuse is admitted. The generic byte-identity, fragility, and scanner gates now govern unchanged leading siblings without a language-name holdback. Exhaustive clean byte-edit sweeps compare the complete incremental tree directly with a fresh parse, and the 20 KiB/137 KiB latency gate plus its opt-in 1 MiB tier lock middle and end edits to small, size-independent work counters. Transient-error insert/delete/replace edits retain separate recovery and memory bounds.

• TypeScript and TSX now parse import-type queries in generic call type arguments. Forms such as foo<typeof import("module")>() and foo<import("module").Name>() use a pinned upstream grammar overlay that is applied identically during ts2go generation and C-oracle parity builds. Ordinary dynamic import() expressions remain call expressions.

• Eight additional stateless scanners are certified for changed-edit reuse: Comment, Dhall, DTD, Foam, Godot Resource, Kconfig, Odin, and RON. Each passes the shared multi-position 4 KiB edit matrix and a 137 KiB changed-length fresh-tree differential with actual subtree reuse. Kconfig's deliberately small 16-byte macro floor keeps its parser-level ownership residual visible without treating performance as a correctness gate.

... (truncated)

Commits

• e5ac093 Merge pull request #496 from odvcencio/codex/release-v0.47.1
• b748225 release(docs): Release v0.47.1
• 10aca33 Merge pull request #495 from odvcencio/codex/issue490-go-grammar-regression
• 29c8a75 fix(parser): preserve deferred parent links during recovery
• 61cb2c3 Merge pull request #494 from odvcencio/codex/rescript-normalizer-retirement
• c73670f remove(rescript): retire ReScript result compatibility pass
• 9cf969c Merge pull request #493 from odvcencio/codex/linkerscript-normalizer-retirement
• 4ac19d4 remove(compat): Remove Linker Script compatibility arm
• b8f61b5 Merge compact fixture coverage and EBNF retirement
• 67ab960 Merge compact parser graduation and compatibility retirement
• Additional commits viewable in compare view

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	github.com/​odvcencio/​gotreesitter@​v0.47.1

View full report