deps: bump the go-dependencies group with 2 updates

[dependabot]

Bumps the go-dependencies group with 2 updates: github.com/mattn/go-isatty and github.com/yuin/goldmark.

Updates github.com/mattn/go-isatty from 0.0.22 to 0.0.23

Commits

• 4bc9b75 Lower go directive to 1.20 for Windows 7 users (#94)
• 4e061da add stub for haiku os (#93)
• See full diff in compare view

Updates github.com/yuin/goldmark from 1.8.2 to 1.8.4

Release notes

Sourced from github.com/yuin/goldmark's releases.

v1.8.4

fix: disable svg in data:image urls

v1.8.3

Full Changelog: yuin/goldmark@v1.8.2...v1.8.3

• fix: #556

Commits

• 50ba9fc fix: disable svg in data:image urls
• 2326684 fix: #556
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

Summary by cubic

Update two Go dependencies to pick up fixes and security hardening in Markdown parsing. No application code changes.

• Dependencies
  • github.com/yuin/goldmark: 1.8.2 → 1.8.4 (disables SVG in data:image URLs; bug fixes)
  • github.com/mattn/go-isatty: 0.0.22 → 0.0.23 (minor fixes and platform updates)

^{Written for commit ac47a64. Summary will update on new commits.}

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates Go module dependencies to newer patch releases to pick up fixes and stay current.

Changes:

• Bump github.com/mattn/go-isatty from v0.0.22 to v0.0.23
• Bump github.com/yuin/goldmark from v1.8.2 to v1.8.4
• Regenerate go.sum entries to match updated module versions

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
go.mod	Updates required dependency versions for go-isatty and goldmark.
go.sum	Updates checksum entries corresponding to the new module versions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.