fix(deps): update osv-scanner minor

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
charm.land/lipgloss/v2	v2.0.5 → v2.0.6			require	patch
deps.dev/api/v3	v3.0.0-20260727054525-2946ae4a6141 → v3.0.0-20260811035547-133c155ce203			require	patch
deps.dev/api/v3alpha	2946ae4 → 133c155			require	digest
google.golang.org/protobuf	v1.36.12-0.20260120151049-f2248ac996af → v1.36.12			require	patch

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

charmbracelet/lipgloss (charm.land/lipgloss/v2)

v2.0.6

Compare Source

Measure Twice, Draw Once

Mostly a width-measurement release, courtesy of some Ultraviolet and x/ansi bumps, plus a table fix.

Emoji

Ultraviolet now asks the terminal at startup whether it supports Unicode core mode (DEC mode 2027), and when it does, measures widths the same way the terminal does. No more drifting borders on rows with ⚠️ and friends.

It also had a four-column cap on cell width, which meant anything wider was dropped from the screen entirely — 👨‍👩‍👧‍👦 is eight columns. That cap is gone.

Hindi

Terminals without mode 2027 advance the cursor once per codepoint and don't know about cluster boundaries. Unicode 15.1 merged Indic conjuncts into single clusters, so स्ते is one cluster that those terminals still paint in two columns. Measuring it as a unit put everything after it in the wrong place.

The wcwidth path now measures per codepoint, matching what those terminals actually do. If you're rendering through Bubble Tea, Devanagari should line up.

Tables

Columns no longer shrink to zero. There's now a minimum width floor of padding plus one character, with a fallback to the old behavior when the width budget is impossible. Thanks to @​taciturnaxolotl!

Heads up

Canvas.Render() now trims trailing whitespace. Expect goldens to move.

---

Changelog

Fixed

• d231906: fix(table): prevent columns from shrinking to zero width (#​671) (@​taciturnaxolotl)

---

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

---

Configuration

📅 Schedule: (in timezone Australia/Sydney)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 79.38%. Comparing base (eb801ca) to head (1c1a593).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2960   +/-   ##
=======================================
  Coverage   79.38%   79.38%           
=======================================
  Files         118      118           
  Lines        8086     8086           
=======================================
  Hits         6419     6419           
  Misses       1310     1310           
  Partials      357      357           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[forking-renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
github.com/charmbracelet/ultraviolet	v0.0.0-20260803092147-8b693049ce2a -> v0.0.0-20260811164956-006e29f97886
github.com/charmbracelet/x/ansi	v0.11.7 -> v0.11.8