Update golang

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
charm.land/bubbles/v2	v2.1.0 → v2.1.1
charm.land/bubbletea/v2	v2.0.7 → v2.0.8
github.com/anthropics/anthropic-sdk-go	v1.53.0 → v1.56.0

---

Release Notes

charmbracelet/bubbles (charm.land/bubbles/v2)

v2.1.1

Compare Source

Lil’ Textarea Fix

This is a tiny patch to fix a bug in textarea where the prompt character could be missing styling on empty lines. That’s all for now!

Thanks for using Bubbles,
Charm 🌞

Changelog

Fixed

• d2b2217: fix(textarea): apply prompt style on all lines, including fillers (@​meowgorithm)

Docs

• a13f110: docs: fix typo in README (#​921) (@​Rohan5commit)

---

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

charmbracelet/bubbletea (charm.land/bubbletea/v2)

v2.0.8

Compare Source

Graphemes, schmraphemes

No terminal can render emojis perfectly, but we can try. This release improves some very specific edge cases around emoji rendering. Enjoy!

Changelog

• db569ad: fix(deps): bump ultraviolet for emoji-related rendering improvements

---

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

anthropics/anthropic-sdk-go (github.com/anthropics/anthropic-sdk-go)

v1.56.0

Compare Source

Full Changelog: v1.55.1...v1.56.0

Features

• api: add agent-memory-2026-07-22 beta header (5bcfda4)

v1.55.1

Compare Source

Full Changelog: v1.55.1...v1.56.0

Features

• api: add agent-memory-2026-07-22 beta header (5bcfda4)

v1.55.0

Compare Source

Full Changelog: v1.55.0...v1.55.1

Chores

• api: remove some nonfunctional types from the SDKs (9bd3d09)

v1.54.0

Compare Source

Full Changelog: v1.54.0...v1.55.0

Features

• api: add support for Managed Agents event delta streaming, agent overrides, reverse pagination, vault credential injection scoping, and agent and deployment webhook events (021ef45)

---

Configuration

📅 Schedule: (in timezone America/Chicago)

• Branch creation
  • "after 9am every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated

Details:

Package	Change
github.com/charmbracelet/ultraviolet	v0.0.0-20260525132238-948f4557a654 -> v0.0.0-20260703014108-f5a850f9c2b7
github.com/mattn/go-runewidth	v0.0.23 -> v0.0.24
golang.org/x/sync	v0.20.0 -> v0.21.0

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 3 package(s) with unknown licenses.

See the Details below.

License Issues

go.mod

Package	Version	License	Issue Type
github.com/anthropics/anthropic-sdk-go	1.56.0	Null	Unknown License
github.com/mattn/go-runewidth	0.0.24	Null	Unknown License
golang.org/x/sync	0.21.0	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
gomod/charm.land/bubbles/v2	2.1.1	🟢 5.6	Details Check Score Reason Code-Review 🟢 6 Found 7/11 approved changesets -- score normalized to 6 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 8 10 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8 Binary-Artifacts 🟢 10 no binaries found in the repo Packaging ⚠️ -1 packaging workflow not detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing 🟢 10 project is fuzzed License 🟢 10 license file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 10 security policy file detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
gomod/charm.land/bubbletea/v2	2.0.8	🟢 5.1	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Maintained 🟢 10 22 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 3 Found 7/23 approved changesets -- score normalized to 3 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Branch-Protection 🟢 3 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 10 security policy file detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
gomod/github.com/anthropics/anthropic-sdk-go	1.56.0	Unknown	Unknown
gomod/github.com/charmbracelet/ultraviolet	0.0.0-20260703014108-f5a850f9c2b7	Unknown	Unknown
gomod/github.com/mattn/go-runewidth	0.0.24	Unknown	Unknown
gomod/golang.org/x/sync	0.21.0	Unknown	Unknown

Scanned Files

• go.mod