build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.9 to 6.8.1

[dependabot]

Bumps github.com/jedib0t/go-pretty/v6 from 6.7.9 to 6.8.1.

Release notes

Sourced from github.com/jedib0t/go-pretty/v6's releases.

v6.8.1

What's Changed

A hardening pass across the table, list, progress, and text packages, fixing security issues, crash/race bugs, and performance problems in the render hot paths, with benchmarks added to back the optimizations.

Security

• table/list (HTML): escape the title, caption, and CSS class names in RenderHTML() to prevent HTML/attribute injection.
• table (CSV): make RenderCSV() output RFC 4180 compliant, and add an opt-in Style().CSV.FieldProtection option that neutralizes spreadsheet formula-injection fields (=, +, -, @, tab, CR).
• text: sanitize hyperlink URLs and bound the escape-sequence parser buffer so adversarial input can't grow it without limit.

Correctness

• progress: fix a render panic on tiny tracker lengths, data races on tracker/indicator state, and a leaked time.Ticker in the terminal-size watcher.
• table: guard auto-index rendering against empty maxColumnLengths.
• text: prevent a panic in VAlign.Apply on negative maxLines.

Performance

• table: compile regex filters once per render; pre-size render builders.
• list: hoist repeated width math out of the render loops.
• text: speed up Align.Apply and StringWidthWithoutEscSequences.
• progress: build PacManChomp frames with a strings.Builder.

Tooling

• Moved root-level benchmarks into their packages and wired up make bench; added benchmarks for the table/text/list/progress render hot paths and tests covering the retained-done-tracker render paths.

Full Changelog: jedib0t/go-pretty@v6.8.0...v6.8.1

v6.8.0

What's Changed

• progress: fix speed decay on done trackers and log overwrite; fixes #405 by @​jedib0t in jedib0t/go-pretty#406
• fix: wrap wide runes when wrapLen is odd in WrapHard by @​koriyoshi2041 in jedib0t/go-pretty#408

New Contributors

• @​koriyoshi2041 made their first contribution in jedib0t/go-pretty#408

Full Changelog: jedib0t/go-pretty@v6.7.10...v6.8.0

v6.7.10

What's Changed

• Fix panic on text align with unicode by @​edznux-dd in jedib0t/go-pretty#404

... (truncated)

Commits

• 22c68f6 fix panics, races, and injection vectors; speed up render hot paths (#409)
• 45fb00d text: wrap wide runes when wrapLen is odd in WrapHard (#408)
• ad17549 progress: fix speed decay on done trackers and log overwrite; fixes #405 (#406)
• 66563fd text: fix panic on align with unicode (#404)
• See full diff in compare view

---

Note

Dependabot bump of github.com/jedib0t/go-pretty/v6 from 6.7.9 to 6.8.1, a semver-minor update that includes security hardening (HTML/CSV injection prevention), crash/race fixes, and performance improvements in the upstream library.

^{Written by Mendral for commit cac48ca.}

[mendral-app]

🧪 Testing Guide

What this PR addresses

This is a dependency bump of github.com/jedib0t/go-pretty/v6 from v6.7.9 to v6.8.1. According to the release notes, v6.8.1 is a hardening pass across the table, list, progress, and text packages — fixing security issues, crash/race bugs, and performance problems in render hot paths.

Steps to verify

Since this is a dependency update with no application code changes, there are no reproduction steps for a specific bug. Instead, validate the following:

1. Build succeeds: Confirm the project compiles cleanly (go build ./...).
2. Tests pass: Run the full test suite (go test ./...) and ensure no regressions.
3. Functionality check: If the project uses go-pretty for CLI table/list rendering, exercise those code paths (e.g., run any CLI commands that produce formatted output) and confirm output looks correct.

What to verify (expected behavior)

• All CI checks pass (build, lint, tests).
• No changes in CLI output formatting or table rendering behavior.
• No new panics or race conditions in any paths that use go-pretty.

Note

Posted by PR Testing Guide · Tag @mendral-app with feedback.

[mendral-app]

LGTM

Previous bake-time concern is resolved — v6.8.1 has been available for ~19 days with no reported issues. The change is a straightforward dependency bump in go.mod/go.sum with no code modifications. The upstream release notes indicate security and correctness improvements, making this a beneficial update.

_{Tag @mendral-app with feedback or questions. View session}

[dependabot]

Superseded by #338.