chore: bump skim from 4.10.0 to 5.0.0

[dependabot]

Bumps skim from 4.10.0 to 5.0.0.

Release notes

Sourced from skim's releases.

5.0.0 - 2026-07-02

Release Notes

Note: this release is not breaking for CLI users or library users who used the default features.

A lot has happened since skim v4, and this is a good opportunity for a quick recap :

• Windows support has been available for quite a while now, and a lot of work has been put into making skim as cross-platform as possible, with almost the same test coverage on Windows than Unix(-likes).
• Image support in preview is easily achievable through the --image flag, using whatever we detect is available (kitty image protocol, sixel or a unicode half-blocks fallback)
• Zellij support was added and grouped with tmux under the --popup flag
• Multiline items can be rendered for more complex interfaces
• Various performance improvements allow us to slowly but steadily keep gaining performance across our benchmarks

Check the changelog for more details !

🚀 Features

• [breaking] Feature-gate listen and image to allow opting out (#1103)

Install skim 5.0.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/skim-rs/skim/releases/download/v5.0.0/skim-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/skim-rs/skim/releases/download/v5.0.0/skim-installer.ps1 | iex"

Download skim 5.0.0

File	Platform	Checksum
skim-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
skim-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
skim-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
skim-x86_64-pc-windows-msvc.msi	x64 Windows	checksum
skim-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
skim-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
skim-aarch64-unknown-linux-musl.tar.xz	ARM64 MUSL Linux	checksum
skim-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

Changelog

Sourced from skim's changelog.

[5.0.0] - 2026-07-02

Note: this release is not breaking for CLI users or library users who used the default features.

A lot has happened since skim v4, and this is a good opportunity for a quick recap :

• Windows support has been available for quite a while now, and a lot of work has been put into making skim as cross-platform as possible, with almost the same test coverage on Windows than Unix(-likes).
• Image support in preview is easily achievable through the --image flag, using whatever we detect is available (kitty image protocol, sixel or a unicode half-blocks fallback)
• Zellij support was added and grouped with tmux under the --popup flag
• Multiline items can be rendered for more complex interfaces
• Various performance improvements allow us to slowly but steadily keep gaining performance across our benchmarks

Check the changelog for more details !

🚀 Features

• [breaking] Feature-gate listen and image to allow opting out (#1103)

Commits

• 5a2dde8 release: v5.0.0
• 6c08be0 chore(deps): bump the gha-prod group with 4 updates (#1104)
• f2ca01e feat!: feature-gate listen and image to allow opting out (#1103)
• See full diff in compare view

[worktrunk-bot]

Safe bump. skim 5.0.0's only breaking change is feature-gating listen and image (skim-rs/skim#1103), and worktrunk pulls skim with default-features = false, features = ["frizbee"], so neither was enabled — the picker's internal-API usage (skim::tui::event::ActionCallback, skim::binds::parse_key, skim::reader::CommandCollector) is unaffected. Verified locally: cargo check --features cli --bins compiles clean against 5.0.0. The dropped Cargo.lock entries are the image codecs (av-scenechange, avif-serialize, bitstream-io, …) that v4's always-on image support pulled in transitively — a nice side benefit of the feature-gating.

One stale comment left behind, non-blocking: the block above the skim = … line still explains why the floor is 4.8 (# Floor is 4.8, not 4: the picker is written against 4.8's ratatui 0.30.1 API …). With the requirement now "5.0" that reasoning is superseded. Worth a refresh next time the picker deps are touched — I didn't push it here since a commit on the Dependabot branch would stop it auto-managing this PR.