chore(deps): update dependency charmbracelet/gum to v0.16.0

[uniget-bot]

This PR contains the following updates:

Package	Update	Change
charmbracelet/gum	minor	0.15.2 -> 0.16.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

charmbracelet/gum (charmbracelet/gum)

v0.16.0

Compare Source

Hey, little counter

This release contains some bug fixes as well as a small feature that adds an item position counter to the help. It's right there on the bottom left!

Changelog

New Features

• 984c84fbd02e06589928bfa66304f3db1dc76605: feat(table): show indicator on help keybindings (opt-in) (#​839) (@​raphamorim)

Bug fixes

• 204d21940eab977fb5ce6bd84742a17c17d404c1: fix(choose): order when using --label-delimiter (#​867) (@​caarlos0)
• 2b72e8029773e474802b804b97346cdc640a7346: fix(confirm): ensure --show-output show the right answer (#​853) (@​andreynering)
• 93f6857e3dc06e45f3fb2874ea3f798ae342068b: fix(spin): preserve color output when --show-output is given (#​850) (@​andreynering)
• d795b8ab2ffb048f281d0af901d119ff00ebba59: fix(table): padding on item indicator (#​841) (@​caarlos0)
• 9705aa338448bb7b2b797f09866b7e14247bf0ea: fix: generated completion invalid for fish shell (#​837) (@​raphamorim)
• bb098b2662682141474ca8398197e8a2e94cfe6a: fix(choose): generated completion invalid for fish shell (choose/options) (#​838) (@​raphamorim)
• 85a29801d8f6b031a988a3cc1eebacf27a199f9b: fix(filter): wildcard escaping issue (#​862) (@​abelcha)

---

Verifying the artifacts

First, download the checksums.txt file, for example, with wget:

wget 'https://github.com/charmbracelet/gum/releases/download/v0.16.0/checksums.txt'

Then, verify it using cosign:

cosign verify-blob \
  --certificate-identity 'https://github.com/charmbracelet/meta/.github/workflows/goreleaser.yml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --cert 'https://github.com/charmbracelet/gum/releases/download/v0.16.0/checksums.txt.pem' \
  --signature 'https://github.com/charmbracelet/gum/releases/download/v0.16.0/checksums.txt.sig' \
  ./checksums.txt

If the output is Verified OK, you can safely use it to verify the checksums of other artifacts you downloaded from the release using sha256sum:

sha256sum --ignore-missing -c checksums.txt

Done! You artifacts are now verified!

Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, The Fediverse, or on Discord.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[nicholasdille-bot]

Auto-approved because label type/renovate is present.

[github-actions]

🔍 Vulnerabilities of ghcr.io/uniget-org/tools/gum:0.16.0

📦 Image Reference ghcr.io/uniget-org/tools/gum:0.16.0

digest	sha256:a018c9cddf933f01ef00a383eabeae7bac25ea50a4540e7dda9654736feb835d
vulnerabilities
platform	linux/amd64
size	4.5 MB
packages	44

[github-actions]

Attempting automerge. See https://github.com/uniget-org/tools/actions/runs/13802102536.

[github-actions]

PR is clean and can be merged. See https://github.com/uniget-org/tools/actions/runs/13802102536.