fix(deps): update module github.com/charmbracelet/bubbles to v0.21.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/charmbracelet/bubbles	v0.21.0 → v0.21.1

---

Release Notes

charmbracelet/bubbles (github.com/charmbracelet/bubbles)

v0.21.1

Compare Source

Changelog

New!

• dff42dd: feat: update keybindings in list setSize method (@​Broderick-Westrope)

Fixed

• c376ce3: fix(cursor): fix data race on blinkTag (#​784) (@​DryHumour)
• 11d52ca: fix(table): preventing cursor from being out-of-bounds. (@​s0ders)
• 49ff5c0: fix(textinput): improve placeholder (#​768) (@​caarlos0)
• 7c44f63: v1: fix(list): ensure correct cursor positions with page/cursor methods (#​831) (@​lrstanley)

Docs

• 7fcf75d: docs(readme): update footer image and copyright date (@​meowgorithm)
• d4feefe: docs: remove Charm Cloud reference (#​785) (@​ShalokShalom)

Other stuff

• daab808: ci: sync dependabot config (#​786) (@​charmcli)
• 4b2d311: ci: sync dependabot config (#​835) (@​charmcli)
• 8562e90: ci: sync golangci-lint config (#​781) (@​github-actions[bot])
• f54a125: test(table): improve table unit tests (#​601) (@​Broderick-Westrope)

---

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.24.0 -> 1.24.2
github.com/charmbracelet/colorprofile	v0.2.3-0.20250311203215-f60798e515dc -> v0.4.1
github.com/charmbracelet/x/ansi	v0.10.1 -> v0.11.5
github.com/charmbracelet/x/cellbuf	v0.0.13-0.20250311204145-2c3ea96c31dd -> v0.0.15
github.com/charmbracelet/x/term	v0.2.1 -> v0.2.2
github.com/lucasb-eyer/go-colorful	v1.2.0 -> v1.3.0
github.com/mattn/go-runewidth	v0.0.16 -> v0.0.19
golang.org/x/sys	v0.36.0 -> v0.38.0

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

• New Features: Updated keybindings in list setSize method - does not affect this codebase as it only uses spinner component
• Bug Fixes: Fixed cursor data race in blinkTag, improved table cursor positioning, enhanced textinput placeholder, and corrected list cursor positions - all components not used by this codebase
• Security Fixes: The cursor data race fix (c376ce3) resolves a concurrency issue that could cause instability - beneficial for overall stability
• Breaking Changes: None identified in the release notes; this is a patch version (0.21.0 → 0.21.1) following semantic versioning

🎯 Impact Scope Investigation

• Usage Analysis: Codebase only imports and uses github.com/charmbracelet/bubbles/spinner component
• Specific Usage:
  • spinner.Model type at internal/ui/model.go:26
  • spinner.New() constructor with spinner.WithSpinner(spinner.Dot) and spinner.WithStyle() options at internal/ui/model.go:37
  • spinner.TickMsg message handling at internal/ui/update.go:34
  • spinner.Update() method at internal/ui/update.go:36
• Dependency Impact: Update also brings newer versions of indirect dependencies (charmbracelet/x/*, go-colorful, go-runewidth, etc.) - all backward compatible minor/patch updates
• No Breaking Changes: All spinner APIs used in the codebase remain unchanged between v0.21.0 and v0.21.1

💡 Recommended Actions

• Safe to Merge: This update can be merged immediately without any code modifications
• Testing: No manual testing required as the spinner component API is unchanged and the codebase's usage patterns are simple and stable
• Benefits: Gains bug fixes for improved stability, especially the cursor data race fix

🔗 Reference Links

• Release Notes v0.21.1
• Compare v0.21.0...v0.21.1

Generated by koki-develop/claude-renovate-review

---

🚫 Permission Denied Tool Executions

The following tool executions that Claude Code attempted were blocked due to insufficient permissions.
Consider adding them to allowed_tools if needed.

Run #25035087088 - 1 tool denied

Tool	Input
Bash	{"command":"gh api repos/charmbracelet/bubbles/releases/tags/v0.21.1","description":"Get release information for bubbles v0.21.1"}

Generated by koki-develop/claude-denied-tools