Update golang

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
charm.land/bubbletea/v2	v2.0.6 → v2.0.7
github.com/anthropics/anthropic-sdk-go	v1.46.0 → v1.48.0

---

Release Notes

charmbracelet/bubbletea (charm.land/bubbletea/v2)

v2.0.7

Compare Source

A few lil’ stability patches

Hi! This is a patch release with a few solid improvements around stability and correctness.

• @​lrstanley, one of our faves, fixed a race condition around mice in the Cursed Renderer
• @​lawrence3699 fixed a panic that could happen when input's not available
• We fixed a correctness issue with regard to mouse releases when Kitty Keyboard was active (thanks, @​mitchellh)

Thanks for using Bubble Tea, and if you see anything awry please do let us know!

—Charm 👋

Changelog

Fixed

• c60f0c5: fix: prevent data race with cursedRenderer.onMouse (#​1691) (@​lrstanley)
• 074596e: fix: skip input reader restore when input is disabled (#​1680) (@​lawrence3699)
• 878d7df: fix(deps): bump ultraviolet for kitty keyboard fix (@​meowgorithm)

---

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

anthropics/anthropic-sdk-go (github.com/anthropics/anthropic-sdk-go)

v1.48.0

Compare Source

Full Changelog: v1.48.0...v1.49.0

Features

• api: add support for claude-mythos-5 and claude-fable-5, with support for server-side fallbacks on refusal (782f223)
• client: adds client-side fallbacks middleware for API providers that do not support server-side fallbacks (782f223)

Bug Fixes

• 3p middleware ordering (#​38) (8f47086)

v1.47.0

Compare Source

Full Changelog: v1.47.0...v1.48.0

Features

• api: small updates to Managed Agents types (3ebeea5)

---

Configuration

📅 Schedule: (in timezone America/Chicago)

• Branch creation
  • "after 9am every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
github.com/charmbracelet/ultraviolet	v0.0.0-20260416155717-489999b90468 -> v0.0.0-20260525132238-948f4557a654
github.com/invopop/jsonschema	v0.13.0 -> v0.14.0

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

License Issues

go.mod

Package	Version	License	Issue Type
github.com/invopop/jsonschema	0.14.0	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
gomod/charm.land/bubbletea/v2	2.0.7	🟢 5.1	Details Check Score Reason Code-Review 🟢 3 Found 7/23 approved changesets -- score normalized to 3 Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 10 30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10 Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Branch-Protection 🟢 3 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 10 security policy file detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
gomod/github.com/anthropics/anthropic-sdk-go	1.48.0	Unknown	Unknown
gomod/github.com/charmbracelet/ultraviolet	0.0.0-20260525132238-948f4557a654	Unknown	Unknown
gomod/github.com/invopop/jsonschema	0.14.0	Unknown	Unknown
gomod/github.com/pb33f/ordered-map/v2	2.3.1	Unknown	Unknown
gomod/go.yaml.in/yaml/v4	4.0.0-rc.2	Unknown	Unknown

Scanned Files

• go.mod