fix(deps): update go dependencies

[GiteaBot]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/alecthomas/chroma/v2	v2.26.1 → v2.27.0
github.com/caddyserver/certmagic	v0.25.3 → v0.25.4
github.com/dlclark/regexp2/v2	v2.2.1 → v2.2.2
github.com/mattn/go-sqlite3	v1.14.45 → v1.14.46
github.com/redis/go-redis/v9	v9.20.0 → v9.20.1
github.com/urfave/cli/v3	v3.9.1 → v3.10.0
gitlab.com/gitlab-org/api/client-go/v2	v2.38.0 → v2.39.0
golang.org/x/image	v0.42.0 → v0.43.0

---

Release Notes

alecthomas/chroma (github.com/alecthomas/chroma/v2)

v2.27.0

Compare Source

Changelog

• a6d00fe fix(html): make mode class output opt-in via WithModeClasses
• f52d015 chore: some house-keeping
• f08a9ab chore: add fmt + test to BUILD.bit
• 6da8f88 fix(yaml): comments can be key-values (#​1289)
• 67785a4 chore(deps): update all non-major dependencies (#​1285)
• d9dd73f Add templ XML lexer (#​1283)
• effffdb chore(deps): update all non-major dependencies (#​1280)
• 03236a4 support for PostScript font files (#​1282)
• e10d532 Fix YAML slash comments with colons (#​1278)

caddyserver/certmagic (github.com/caddyserver/certmagic)

v0.25.4

Compare Source

dlclark/regexp2 (github.com/dlclark/regexp2/v2)

v2.2.2

Compare Source

mattn/go-sqlite3 (github.com/mattn/go-sqlite3)

v1.14.46

Compare Source

redis/go-redis (github.com/redis/go-redis/v9)

v9.20.1: 9.20.1

Compare Source

This is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement.

🚀 Highlights

RESP3 pub/sub message loss fixed

PeekPushNotificationName previously inspected only the bytes already buffered by bufio, so when a push frame header straddled a buffer fill boundary it could return a truncated notification name (e.g. "messa" instead of "message"). The push processor then mis-routed the frame and ReadReply silently dropped it, causing intermittent RESP3 pub/sub message loss. The peek now grows its window (36 bytes → up to 4 KiB) and reads more from the connection until the header is complete, cleanly separating incomplete prefixes from corrupt frames (including overflow-safe bulk-length handling). Fixes #​3839.

(#​3842) by @​ndyakov

🐛 Bug Fixes

• RESP3 push peeking: PeekPushNotificationName no longer returns a truncated notification name when a push frame header spans a buffer boundary, preventing silent RESP3 pub/sub message loss (fixes #​3839) (#​3842) by @​ndyakov
• FT.HYBRID vector params: Vector data is now always sent via PARAMS with auto-generated param names (__vector_param_N, with collision avoidance) when VectorParamName is omitted, since Redis no longer accepts inline vector blobs; the FTHybridOptions.Params map is no longer mutated, so the same options struct can be reused across calls (#​3844) by @​ndyakov
• CLUSTER SHARDS forward compatibility: Unknown shard- and node-level attributes in the CLUSTER SHARDS reply are now skipped via DiscardNext() instead of erroring, so clients keep working when the server introduces new fields (#​3843) by @​madolson
• PubSub double reconnect: PubSub.releaseConn no longer reconnects twice when a connection is both unusable (or pending handoff) and reports a bad-connection error, avoiding a wasted connection establish-then-close cycle (#​3833) by @​cxljs

👥 Contributors

We'd like to thank all the contributors who worked on this release!

@​cxljs, @​madolson, @​ndyakov

---

Full Changelog: redis/go-redis@v9.20.0...v9.20.1

urfave/cli (github.com/urfave/cli/v3)

v3.10.0

Compare Source

What's Changed

• feat: add Flag.SchemaType() and Flag.SchemaItemsType() for JSON Schema introspection by @​dearchap in #​2368
• feat: add Command.Walk() and Command.Path() convenience methods by @​dearchap in #​2353
• fix: let --help flag take precedence over parse errors by @​dearchap in #​2360
• fix: resolve remaining help invocation inconsistencies by @​dearchap in #​2361
• fix: skip After hook when help is displayed on subcommand by @​dearchap in #​2363
• fix: show GLOBAL OPTIONS in SubcommandHelpTemplate by @​dearchap in #​2359
• fix: resolve broken links in CHANGELOG.md by @​dearchap in #​2357
• docs: document what happened to build tags in v3 migration guide by @​dearchap in #​2358
• Various docs updates and dependency bumps

Full Changelog: urfave/cli@v3.9.1...v3.10.0

gitlab-org/api/client-go (gitlab.com/gitlab-org/api/client-go/v2)

v2.39.0

Compare Source

2.39.0

🚀 Features

• Add Scopes field to Application struct (!2918) by Ashraf Abdellatif

2.39.0 (2026-06-12)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Monday (* * * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[bircni]

db tests all fail

[lunny]

It seems cli has a break change.

[puni9869]

We shall mark ths pr as Draft.