chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.8 to 6.6.9#48
Conversation
Needs ReviewI recommend reviewing this upgrade before merging because the provided context indicates that the target version does not exist in the official releases. Web search findings confirm the official releases page shows the latest version is 6.6.7 from March 2024, while this upgrade attempts to use version 6.6.9. The library is used exclusively for CLI table formatting in the main output path, so while the usage scope is limited and well-defined, upgrading to a potentially non-existent or unofficial version poses significant risks including supply chain security concerns and build reproducibility issues. What we checked
Dependency UsageBased on my analysis, here's the executive summary: The go-pretty library is used exclusively in the main CLI output formatting logic to render food safety inspection data as formatted console tables. It powers the user-facing presentation layer by creating structured, indexed tables with headers and rows that display inspection results including facility names, addresses, dates, violations, and legal information. This is a single-purpose dependency used only in the main output path when JSON output is not requested, making it a focused but essential component for the application's primary command-line interface.
View 1 more usage
ChangesThe
References (4)[1]: Dependency declares version 6.6.9 which according to web search does not exist in official releases (latest is 6.6.7) Line 7 in 6e7ee29 [2]: Library imported and used for table formatting functionality Line 25 in 6e7ee29 [3]: Primary usage: table.NewWriter() creates formatted tables for CLI output of food safety inspection data Line 362 in 6e7ee29 [4]: Official releases page shows latest version is 6.6.7 from March 2024, version 6.6.9 does not exist (source link) fossabot analyzed this PR using dependency research. |
6e7ee29 to
9cf938c
Compare
|
@dependabot recreate |
Bumps [github.com/jedib0t/go-pretty/v6](https://github.com/jedib0t/go-pretty) from 6.6.8 to 6.6.9. - [Release notes](https://github.com/jedib0t/go-pretty/releases) - [Commits](jedib0t/go-pretty@v6.6.8...v6.6.9) --- updated-dependencies: - dependency-name: github.com/jedib0t/go-pretty/v6 dependency-version: 6.6.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
9cf938c to
174d554
Compare
Bumps github.com/jedib0t/go-pretty/v6 from 6.6.8 to 6.6.9.
Release notes
Sourced from github.com/jedib0t/go-pretty/v6's releases.
Commits
b2249datext: don't enable colors ifTERMis set todumb(#374)f8bbd12progress: option to skip auto-stop for trackers (#373)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)