chore: bump bubbletea v2.0.7 → v2.0.8, annotate WithInput(nil)

[Copilot]

Routine dependency refresh for charm.land/bubbletea/v2 per Go Fan review (#43153). v2.0.8 pulls in an ultraviolet fix for emoji-rendering edge cases; v2.0.7 hardened the WithInput(nil) code path this project relies on (charmbracelet/bubbletea#1680).

Changes

• go.mod / go.sum — bump charm.land/bubbletea/v2 v2.0.7 → v2.0.8; ultraviolet updated transitively.
• pkg/console/spinner.go — extend the tea.WithInput(nil) comment to note that the input-disabled path is officially supported as of v2.0.7 ([WIP] Merge add reactions step into activation job #1680), so future readers know it's deliberate rather than a workaround.

[github-actions]

🧠 Matt Pocock Skills Reviewer has completed the skills-based review. ✅

[github-actions]

✅ Design Decision Gate 🏗️ completed the design decision gate check.

No ADR enforcement needed: PR #43171 does not have the 'implementation' label and has only 2 new lines of code in business logic directories (threshold: 100).

[github-actions]

✅ Test Quality Sentinel completed test quality analysis.

No test files were added or modified in this PR. Test Quality Sentinel skipped.

[github-actions]

✅ PR Code Quality Reviewer completed the code quality review.

[Copilot]

Pull request overview

Routine dependency refresh for charm.land/bubbletea/v2 (v2.0.7 → v2.0.8) and a small clarifying comment in the Bubble Tea spinner wrapper to document intentional use of tea.WithInput(nil).

Changes:

• Bumped charm.land/bubbletea/v2 to v2.0.8 (with the corresponding transitive ultraviolet update).
• Annotated the tea.WithInput(nil) usage in pkg/console/spinner.go to note the input-disabled path is supported as of bubbletea v2.0.7.

Show a summary per file

File	Description
pkg/console/spinner.go	Adds context explaining why tea.WithInput(nil) is intentional and supported.
go.mod	Updates Bubble Tea to v2.0.8 and refreshes the transitive ultraviolet version.
go.sum	Updates module checksums for the bumped dependencies.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 2/3 changed files
• Comments generated: 0
• Review effort level: Low

[github-actions]

Review: chore bump + comment annotation

Routine patch-level dependency update. Changes look correct:

• go.mod / go.sum — hashes and module paths updated consistently for bubbletea v2.0.8 and the transitive ultraviolet bump.
• spinner.go comment — the note that WithInput(nil) is officially supported as of v2.0.7 is accurate (the feature landed in v2.0.7; v2.0.8 retains it). Citing charmbracelet/bubbletea#1680 gives future readers a clear trail.

No correctness, security, or reliability issues found. ✅

🧵 Reviewed using Impeccable skills by Impeccable Skills Reviewer · 11.6 AIC · ⌖ 5.75 AIC · ⊞ 4.9K

[github-actions]

Skills-Based Review 🧠

Applied /grill-with-docs — clean maintenance PR, no blocking issues.

📋 Key Themes & Highlights

Key Themes

• Routine dependency refresh: bubbletea v2.0.7 → v2.0.8 and transitive ultraviolet bump are minimal-risk, well-justified changes
• Comment quality: The WithInput(nil) annotation correctly attributes the officially-supported path to v2.0.7 (charmbracelet/bubbletea#1680) even though the project has since advanced to v2.0.8 — this is standard practice when documenting when support was first introduced

Positive Highlights

• ✅ PR description clearly cross-references upstream issues (#43153, #1680)
• ✅ No new abstractions or vocabulary; existing patterns preserved
• ✅ go.sum hashes are consistent with the declared versions
• ✅ Comment enhancement is concise and adds genuine signal for future maintainers

🧠 Reviewed using Matt Pocock's skills by Matt Pocock Skills Reviewer · 27.7 AIC · ⌖ 6.36 AIC · ⊞ 6.6K
_{Comment /matt to run again}

[github-actions]

Routine dependency bump — nothing actionable found.

The three-file change is minimal and correct: bubbletea v2.0.8 replaces v2.0.7, the ultraviolet transitive dependency advances to its matching pseudo-version commit, go.sum hashes are updated with the expected two-entry pattern (h1 + go.mod hash), and the comment addition in spinner.go is accurate and adds useful provenance via the upstream issue reference.

🔎 Code quality review by PR Code Quality Reviewer · 53.5 AIC · ⌖ 6.36 AIC · ⊞ 5.4K
_{Comment /review to run again}

[gh-aw-bot]

@copilot please run the pr-finisher skill, investigate the failing lint-go check, address any remaining issues, and rerun checks once the branch is ready.

Generated by 👨‍🍳 PR Sous Chef · 5.99 AIC · ⌖ 7.3 AIC · ⊞ 5.1K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot please run the pr-finisher skill, investigate the failing lint-go check, address any remaining issues, and rerun checks once the branch is ready.

...

Fixed. The lint-go failure was a -manualmutexunlock violation in pkg/workflow/process_env_lookup.go (pre-existing, introduced in the base commit): lookupProcessEnv called RLock() without deferring RUnlock(). Changed to defer processEnvLookupMu.RUnlock() immediately after RLock(), which also simplifies the function by removing the intermediate fn variable. make fmt and make lint both pass locally. CI needs a human re-trigger to confirm.

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.82.3