fix(deps): update osv-scanner minor

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/charmbracelet/bubbletea	v0.26.1 -> v0.26.2
github.com/package-url/packageurl-go	v0.1.2 -> v0.1.3
golang.org/x/exp	v0.0.0-20240416160154-fe59bbe5cc7f -> v0.0.0-20240506185415-9bf2ced13842
google.golang.org/grpc	v1.63.2 -> v1.64.0
google.golang.org/protobuf	v1.34.0 -> v1.34.1

---

Release Notes

charmbracelet/bubbletea (github.com/charmbracelet/bubbletea)

v0.26.2

Compare Source

This fixes a small regression that was introduced in v0.26.0 related to the first line on the first render not being displayed correctly. Thank you @​mistakenelf for pointing this out in https://github.com/charmbracelet/bubbletea/issues/1000!

What's Changed

• fix: stop and drain timers by @​caarlos0 in https://github.com/charmbracelet/bubbletea/pull/993
• chore(lint): minor lint-related improvements by @​meowgorithm in https://github.com/charmbracelet/bubbletea/pull/1007
• fix: renderer: reset the cursor on the first line by @​aymanbagabas in https://github.com/charmbracelet/bubbletea/pull/1008
• chore(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0 by @​dependabot in https://github.com/charmbracelet/bubbletea/pull/1003
• chore(deps): bump golangci/golangci-lint-action from 5 to 6 by @​dependabot in https://github.com/charmbracelet/bubbletea/pull/1005
• chore(deps): bump golang.org/x/term from 0.19.0 to 0.20.0 by @​dependabot in https://github.com/charmbracelet/bubbletea/pull/1002

Full Changelog: charmbracelet/bubbletea@v0.26.1...v0.26.2

---

Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, The Fediverse, or Discord.

package-url/packageurl-go (github.com/package-url/packageurl-go)

v0.1.3

Compare Source

What's Changed

• go.mod: Bump required Go version to 1.18 by @​magnusbaeck in https://github.com/package-url/packageurl-go/pull/66
• Fix Github Actions by @​shibumi in https://github.com/package-url/packageurl-go/pull/69
• Adds ./ and ../ as valid subpath prefix by @​ridhoq in https://github.com/package-url/packageurl-go/pull/68

New Contributors

• @​magnusbaeck made their first contribution in https://github.com/package-url/packageurl-go/pull/66
• @​ridhoq made their first contribution in https://github.com/package-url/packageurl-go/pull/68

Full Changelog: package-url/packageurl-go@v0.1.2...v0.1.3

grpc/grpc-go (google.golang.org/grpc)

v1.64.0: Release 1.64.0

Compare Source

API Changes

• stats: Deprecate InPayload.Data and OutPayload.Data; they were experimental and will be deleted in the next release (#​7121)

Behavior Changes

• codec: Remove handling of environment variable GRPC_GO_ADVERTISE_COMPRESSORS to suppress setting supported compressors in grpc-accept-encoding header. Compressors will always be advertised, as they have been by default for some time (#​7203)

New Features

• resolver/dns: Add SetMinResolutionInterval to set the minimum interval at which DNS re-resolutions may occur (#​6962)
  • Special Thanks: @​HomayoonAlimohammadi
• peer/peer: Implement the fmt.Stringer interface for pretty printing Peer, and
• metadata/metadata: Implement the fmt.Stringer interface for pretty printing MD (#​7137)
  • Special Thanks: @​AnomalRoil

Performance Improvements

• client: Improve RPC performance by reducing work while holding a lock (#​7132)

Bug Fixes

• transport/server: Display the proper timeout value when keepalive pings are not ack'd in time (#​7038)
  • Special Thanks: @​BatmanAoD
• channelz: Fix bug that was causing the subchannel's target to be unset (#​7189)
• stats: Fix bug where peer was not set in context when calling stats handler for OutPayload, InPayload, and End (#​7096)

Dependencies

• deps: Remove dependency on deprecated github.com/golang/protobuf module (#​7122)

Documentation

• grpc: Deprecate WithBlock, WithReturnConnectionError, FailOnNonTempDialError which are ignored by NewClient (#​7097)
  • Special Thanks: @​pellared
• grpc: Deprecate Dial and DialContext. These will continue to be supported throughout 1.x, but are deprecated to direct users to NewClient (See #​7090 for more information)
• examples: Add custom lb example (#​6691)

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.34.1

Compare Source

Minor fixes for editions compliance:

• CL/582635: all: update to protobuf 27.0-rc1 and regenerate protos
• CL/582755: encoding/proto[json|text]: accept lower case names for group-like fields

---

Configuration

📅 Schedule: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 66.66667% with 1 lines in your changes are missing coverage. Please review.

Project coverage is 64.23%. Comparing base (d72f3d9) to head (9ecc534).

Files	Patch %	Lines
internal/resolution/client/npm_registry_client.go	0.00%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #978      +/-   ##
==========================================
+ Coverage   64.22%   64.23%   +0.01%     
==========================================
  Files         148      148              
  Lines       12088    12088              
==========================================
+ Hits         7763     7765       +2     
+ Misses       3866     3865       -1     
+ Partials      459      458       -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[forking-renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.