Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​opentui/​core@​0.1.88 ⏵ 0.1.89			+1
	@​opentui/​react@​0.1.88 ⏵ 0.1.89	+1

View full report

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm @opentui/core is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package.json → npm/@opentui/core@0.1.89 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@opentui/core@0.1.89. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Greptile Summary

This PR bumps @opentui/core and @opentui/react from 0.1.88 to 0.1.89 to pick up a native renderer fix for color and background rendering in light/dark themes. The lockfile is updated consistently for all six platform-specific native binaries, and the fix is documented in the [Unreleased] section of the changelog.

• package.json: Version constraint for @opentui/core and @opentui/react raised to ^0.1.89.
• bun.lock: All six platform native packages (darwin-arm64, darwin-x64, linux-arm64, linux-x64, win32-arm64, win32-x64) updated to 0.1.89 with new hashes; @opentui/react's pinned peer dependency on @opentui/core also updated to 0.1.89.
• CHANGELOG.md: Entry added under the [Unreleased] > Fixed section, correctly formatted and placed.

Confidence Score: 5/5

Safe to merge — a narrow patch-version bump with a consistent lockfile update and well-placed changelog entry.

The change touches only the OpenTUI dependency version in package.json, the generated lockfile, and the changelog. All six platform-specific native binaries are updated to the matching version with new hashes, and @opentui/react's internal pinned reference to @opentui/core is also bumped correctly. The changelog entry is correctly placed under [Unreleased] > Fixed and matches the format of the surrounding entries. There are no logic changes, no migration concerns, and no inconsistencies between the declared and resolved versions.

No files require special attention.

Important Files Changed

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[package.json] -->|declares 0.1.89| B[opentui-core 0.1.89]
    A -->|declares 0.1.89| C[opentui-react 0.1.89]
    C -->|pinned peer dep| B
    B --> D[core-darwin-arm64 0.1.89]
    B --> E[core-darwin-x64 0.1.89]
    B --> F[core-linux-arm64 0.1.89]
    B --> G[core-linux-x64 0.1.89]
    B --> H[core-win32-arm64 0.1.89]
    B --> I[core-win32-x64 0.1.89]
    J[bun.lock] -->|pins all packages with hashes| B
    J --> C

_{Reviews (1): Last reviewed commit: "fix(ui): update OpenTUI color renderer" | Re-trigger Greptile}

Refs #399