Skip to content

Bump github.com/junegunn/fzf from 0.65.2 to 0.73.1#3341

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/junegunn/fzf-0.73.1
Open

Bump github.com/junegunn/fzf from 0.65.2 to 0.73.1#3341
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/junegunn/fzf-0.73.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 29, 2026

Bumps github.com/junegunn/fzf from 0.65.2 to 0.73.1.

Release notes

Sourced from github.com/junegunn/fzf's releases.

0.73.1

  • Bug fixes
    • Skip $FZF_CURRENT_ITEM export when the item contains a NUL byte; exec(2) rejects the env, breaking preview and other child commands (#4806)
    • Fixed O(n^2) HTTP body accumulation in --listen; a single ~390 KB request could block the single-threaded server for ~8 s (Michal Majchrowicz, Marcin Wyczechowski, AFINE Team)

0.73.0

Release highlights: https://junegunn.github.io/fzf/releases/0.73.0/

  • Nushell integration via fzf --nushell and the installer (#4630) (@​sim590)
  • New --preview-window=next position that places the preview adjacent to the input section, on the list side: above the input in the default layout, below it in --layout=reverse (#4798)
  • Timer-driven every(N) event for --bind, where N is seconds
  • Added $FZF_IDLE_TIME (whole seconds) and $FZF_IDLE_TIME_MS (milliseconds), holding the elapsed time since the last user activity
    • Pair with every(N) to build idle-based behavior such as auto-accept or auto-quit (#1211)
      # Live process list; --track --id-nth 2 keeps the cursor on the same PID across reloads
      fzf --header-lines 1 --track --id-nth 2 --bind 'start,every(2):reload-sync:ps -ef'
      Auto-accept after 10 seconds of inactivity, with a countdown in the footer after 5s
      fzf --bind 'every(1):bg-transform:
      if   [[ $FZF_IDLE_TIME -lt 5  ]]; then echo change-footer:
      elif [[ $FZF_IDLE_TIME -lt 10 ]]; then echo "change-footer:auto-accept in $((10 - FZF_IDLE_TIME))s"
      else echo accept
      fi'

  • Added $FZF_CURRENT_ITEM for shells where quoting {} is awkward (#4802)
  • Bug fixes
    • Scoring: non-word characters at the start of input or after a delimiter now receive the same boundary bonus as word characters (#4795)
    • change-preview-window no longer resets wrap / wrap-word state set via toggle-preview-wrap / toggle-preview-wrap-word (#4791)
    • Stripped UTF-8-encoded C1 control characters from rendered items to prevent terminal control-sequence injection
    • Fixed integer-overflow panic in FuzzyMatchV2 on 32-bit builds (Michal Majchrowicz, Marcin Wyczechowski, AFINE Team)
    • Fixed bg-transform reload / exclude payloads being dropped
    • Fixed rendering glitch with preview window on the left combined with footer

0.72.0

Release highlights: https://junegunn.github.io/fzf/releases/0.72.0/

  • --header-border, --header-lines-border, and --footer-border now accept a new inline style that embeds the section inside the list frame, separated from the list content by a horizontal line. When the list border has side segments, the separator joins them as T-junctions.
    • Requires a --list-border shape that has both top and bottom segments (rounded, sharp, bold, double, block, thinblock, or horizontal); falls back to line otherwise. horizontal has no side borders, so the separator is drawn without T-junction endpoints.
    • Sections stack. Example combining all three:
      ps -ef | fzf --reverse --style full \
          --header 'Select a process' --header-lines 1 \
          --bind 'load:transform-footer:echo $FZF_TOTAL_COUNT processes' \
          --header-border dashed --header-first \
          --header-lines-border inline --footer-border inline
    • --header-label and --footer-label render on their respective separator row.

... (truncated)

Changelog

Sourced from github.com/junegunn/fzf's changelog.

0.73.1

  • Bug fixes
    • Skip $FZF_CURRENT_ITEM export when the item contains a NUL byte; exec(2) rejects the env, breaking preview and other child commands (#4806)
    • Fixed O(n^2) HTTP body accumulation in --listen; a single ~390 KB request could block the single-threaded server for ~8 s (Michal Majchrowicz, Marcin Wyczechowski, AFINE Team)

0.73.0

Release highlights: https://junegunn.github.io/fzf/releases/0.73.0/

  • Nushell integration via fzf --nushell and the installer (#4630) (@​sim590)
  • New --preview-window=next position that places the preview adjacent to the input section, on the list side: above the input in the default layout, below it in --layout=reverse (#4798)
  • Timer-driven every(N) event for --bind, where N is seconds
  • Added $FZF_IDLE_TIME (whole seconds) and $FZF_IDLE_TIME_MS (milliseconds), holding the elapsed time since the last user activity
    • Pair with every(N) to build idle-based behavior such as auto-accept or auto-quit (#1211)
      # Live process list; --track --id-nth 2 keeps the cursor on the same PID across reloads
      fzf --header-lines 1 --track --id-nth 2 --bind 'start,every(2):reload-sync:ps -ef'
      Auto-accept after 10 seconds of inactivity, with a countdown in the footer after 5s
      fzf --bind 'every(1):bg-transform:
      if   [[ $FZF_IDLE_TIME -lt 5  ]]; then echo change-footer:
      elif [[ $FZF_IDLE_TIME -lt 10 ]]; then echo "change-footer:auto-accept in $((10 - FZF_IDLE_TIME))s"
      else echo accept
      fi'

  • Added $FZF_CURRENT_ITEM for shells where quoting {} is awkward (#4802)
  • Bug fixes
    • Scoring: non-word characters at the start of input or after a delimiter now receive the same boundary bonus as word characters (#4795)
    • change-preview-window no longer resets wrap / wrap-word state set via toggle-preview-wrap / toggle-preview-wrap-word (#4791)
    • Stripped UTF-8-encoded C1 control characters from rendered items to prevent terminal control-sequence injection
    • Fixed integer-overflow panic in FuzzyMatchV2 on 32-bit builds (Michal Majchrowicz, Marcin Wyczechowski, AFINE Team)
    • Fixed bg-transform reload / exclude payloads being dropped
    • Fixed rendering glitch with preview window on the left combined with footer

0.72.0

Release highlights: https://junegunn.github.io/fzf/releases/0.72.0/

  • --header-border, --header-lines-border, and --footer-border now accept a new inline style that embeds the section inside the list frame, separated from the list content by a horizontal line. When the list border has side segments, the separator joins them as T-junctions.
    • Requires a --list-border shape that has both top and bottom segments (rounded, sharp, bold, double, block, thinblock, or horizontal); falls back to line otherwise. horizontal has no side borders, so the separator is drawn without T-junction endpoints.
    • Sections stack. Example combining all three:
      ps -ef | fzf --reverse --style full \
          --header 'Select a process' --header-lines 1 \
          --bind 'load:transform-footer:echo $FZF_TOTAL_COUNT processes' \
          --header-border dashed --header-first \
          --header-lines-border inline --footer-border inline
    • --header-label and --footer-label render on their respective separator row.

... (truncated)

Commits
  • ce4bef7 0.73.1
  • 25868a6 Address code scanning alerts
  • 7963a2c server: avoid O(n^2) body accumulation in HTTP listener
  • 4b23aa4 Skip FZF_CURRENT_ITEM export when item contains NUL
  • 3953d1c Add make tag for release tagging
  • 5e13761 Add GitHub Actions release workflow
  • a24deef 0.73.0
  • 1b6e17c nushell: [uninstall] Query nu for autoload directory
  • 94f6daa nushell: [install] Query nu for autoload directory
  • 02594f8 nushell: Rename duplicate __fzf_defaults in completion.nu
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/junegunn/fzf](https://github.com/junegunn/fzf) from 0.65.2 to 0.73.1.
- [Release notes](https://github.com/junegunn/fzf/releases)
- [Changelog](https://github.com/junegunn/fzf/blob/master/CHANGELOG.md)
- [Commits](junegunn/fzf@v0.65.2...v0.73.1)

---
updated-dependencies:
- dependency-name: github.com/junegunn/fzf
  dependency-version: 0.73.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants