renovate[bot] e99b88182b chore(deps): update all non-major dependencies (#1263)
This PR contains the following updates:

| Package | Type | Update | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|---|---|
| [biome](https://redirect.github.com/biomejs/biome) | | patch |
`2.4.14` → `2.4.15` |
![age](https://developer.mend.io/api/mc/badges/age/hermit/biome/2.4.15?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/hermit/biome/2.4.14/2.4.15?slim=true)
|
| [caddy](https://redirect.github.com/caddyserver/caddy) | | patch |
`2.11.2` → `2.11.3` |
![age](https://developer.mend.io/api/mc/badges/age/hermit/caddy/2.11.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/hermit/caddy/2.11.2/2.11.3?slim=true)
|
|
[github.com/dlclark/regexp2/v2](https://redirect.github.com/dlclark/regexp2)
| require | patch | `v2.0.2` → `v2.0.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fdlclark%2fregexp2%2fv2/v2.0.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fdlclark%2fregexp2%2fv2/v2.0.2/v2.0.3?slim=true)
|
| [just](https://redirect.github.com/casey/just) | | minor | `1.50.0` →
`1.51.0` |
![age](https://developer.mend.io/api/mc/badges/age/hermit/just/1.51.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/hermit/just/1.50.0/1.51.0?slim=true)
|
| [uv](https://redirect.github.com/astral-sh/uv) | | patch | `0.11.12` →
`0.11.14` |
![age](https://developer.mend.io/api/mc/badges/age/hermit/uv/0.11.14?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/hermit/uv/0.11.12/0.11.14?slim=true)
|

---

### Release Notes

<details>
<summary>biomejs/biome (biome)</summary>

###
[`v2.4.15`](https://redirect.github.com/biomejs/biome/compare/46393e0240944064eb2a33c1810fc4204ced0cf7...9dd3271eef16090416b6e77615a01e3bfbcf7993)

</details>

<details>
<summary>caddyserver/caddy (caddy)</summary>

###
[`v2.11.3`](https://redirect.github.com/caddyserver/caddy/releases/tag/v2.11.3)

This release improves several aspects of Caddy with minor features, bug
fixes, and security patches. Thank you to everyone and their bots who
contributed to help make this release the best one yet!

**Security patches:**

- fastcgi: Carrying over a patch from FrankenPHP for a bug that could
allow non-PHP files to be executed; collaborated on by
[@&#8203;dunglas](https://redirect.github.com/dunglas),
[@&#8203;KC1zs4](https://redirect.github.com/KC1zs4), and
[@&#8203;chenjj](https://redirect.github.com/chenjj).
- vars: A more thorough fix for
<https://github.com/advisories/GHSA-m2w3-8f23-hxxf>, collaborated by
[@&#8203;everping](https://redirect.github.com/everping) and
[@&#8203;vnxme](https://redirect.github.com/vnxme).
- admin: Array index normalization to prevent remote admin socket auth
bypass, by [@&#8203;Amemoyoi](https://redirect.github.com/Amemoyoi) and
bot.
- admin: More rigorous path prefix matching to prevent remote admin
socket auth bypass, by
[@&#8203;Amemoyoi](https://redirect.github.com/Amemoyoi) and bot.

We've also merged a couple PRs that fix upstream security bugs in other
projects like quic-go and CertMagic. Thank you to
[@&#8203;marten-seemann](https://redirect.github.com/marten-seemann) for
maintaining quic-go so diligently!

#### What's Changed

- caddyhttp: Sync placeholder expansion in `vars` and `vars_regexp` by
[@&#8203;vnxme](https://redirect.github.com/vnxme) in
[#&#8203;7573](https://redirect.github.com/caddyserver/caddy/pull/7573)
- caddytls: Avoid ACME fallback for implicit Tailscale \*.ts.net
policies by [@&#8203;steadytao](https://redirect.github.com/steadytao)
in
[#&#8203;7577](https://redirect.github.com/caddyserver/caddy/pull/7577)
- chore: Resolve recent CI failures by
[@&#8203;mholt](https://redirect.github.com/mholt) in
[#&#8203;7593](https://redirect.github.com/caddyserver/caddy/pull/7593)
- caddytls: Consolidate empty APs more smartly by
[@&#8203;mholt](https://redirect.github.com/mholt) in
[#&#8203;7567](https://redirect.github.com/caddyserver/caddy/pull/7567)
- rewrite: skip query rename when source key is absent by
[@&#8203;steadytao](https://redirect.github.com/steadytao) in
[#&#8203;7599](https://redirect.github.com/caddyserver/caddy/pull/7599)
- root: introduce down-propagating Helper.BlockState for other
directives/plugins to use by
[@&#8203;henderkes](https://redirect.github.com/henderkes) in
[#&#8203;7594](https://redirect.github.com/caddyserver/caddy/pull/7594)
- http: make zstd checksum configurable by
[@&#8203;ottenhoff](https://redirect.github.com/ottenhoff) in
[#&#8203;7586](https://redirect.github.com/caddyserver/caddy/pull/7586)
- notify: Always send "READY=1" even after an error by
[@&#8203;francislavoie](https://redirect.github.com/francislavoie) in
[#&#8203;7597](https://redirect.github.com/caddyserver/caddy/pull/7597)
- reverseproxy: Fix check for `header_up Host {upstream_hostport}`
redundancy by [@&#8203;yubiuser](https://redirect.github.com/yubiuser)
in
[#&#8203;7564](https://redirect.github.com/caddyserver/caddy/pull/7564)
- caddytls: Expand placeholders in dns\_challenge override\_domain tls
parameter by [@&#8203;pberkel](https://redirect.github.com/pberkel) in
[#&#8203;7609](https://redirect.github.com/caddyserver/caddy/pull/7609)
- tls: add system and combined CA pool modules by
[@&#8203;HarshPatel5940](https://redirect.github.com/HarshPatel5940) in
[#&#8203;7406](https://redirect.github.com/caddyserver/caddy/pull/7406)
- vars: Don't expand placeholders in values by
[@&#8203;vnxme](https://redirect.github.com/vnxme) in
[#&#8203;7629](https://redirect.github.com/caddyserver/caddy/pull/7629)
- build(deps): bump
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from
1.42.0 to 1.43.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;7637](https://redirect.github.com/caddyserver/caddy/pull/7637)
- build(deps): bump the all-updates group across 1 directory with 11
updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;7641](https://redirect.github.com/caddyserver/caddy/pull/7641)
- reverseproxy: make stream copy buffer size configurable by
[@&#8203;steadytao](https://redirect.github.com/steadytao) in
[#&#8203;7627](https://redirect.github.com/caddyserver/caddy/pull/7627)
- vars: Add matcher placeholder handling tests by
[@&#8203;steadytao](https://redirect.github.com/steadytao) in
[#&#8203;7640](https://redirect.github.com/caddyserver/caddy/pull/7640)
- build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;7621](https://redirect.github.com/caddyserver/caddy/pull/7621)
- logging: Add journald encoder wrapper by
[@&#8203;steadytao](https://redirect.github.com/steadytao) in
[#&#8203;7623](https://redirect.github.com/caddyserver/caddy/pull/7623)
- caddyfile: Improve import/global options UX for imports before global
options by [@&#8203;steadytao](https://redirect.github.com/steadytao) in
[#&#8203;7642](https://redirect.github.com/caddyserver/caddy/pull/7642)
- chore: replace `interface{}` with `any` for modernization by
[@&#8203;tsinglua](https://redirect.github.com/tsinglua) in
[#&#8203;7571](https://redirect.github.com/caddyserver/caddy/pull/7571)
- chore: bump timberjack to v1.4.1 by
[@&#8203;DeRuina](https://redirect.github.com/DeRuina) in
[#&#8203;7618](https://redirect.github.com/caddyserver/caddy/pull/7618)
- logging: Preserve ts for journald-wrapped JSON logs by
[@&#8203;steadytao](https://redirect.github.com/steadytao) in
[#&#8203;7644](https://redirect.github.com/caddyserver/caddy/pull/7644)
- fileserver: show symlink targets verbatim
([#&#8203;7476](https://redirect.github.com/caddyserver/caddy/issues/7476))
by [@&#8203;maxtruxa](https://redirect.github.com/maxtruxa) in
[#&#8203;7579](https://redirect.github.com/caddyserver/caddy/pull/7579)
- fix(caddyfile): {block} in snippet by
[@&#8203;prettysunflower](https://redirect.github.com/prettysunflower)
in
[#&#8203;7558](https://redirect.github.com/caddyserver/caddy/pull/7558)
- caddyhttp: Document missing placeholders for escaped URI and prefixed
query by
[@&#8203;steffenbusch](https://redirect.github.com/steffenbusch) in
[#&#8203;7659](https://redirect.github.com/caddyserver/caddy/pull/7659)
- chore: add `AGENTS.md` by
[@&#8203;mohammed90](https://redirect.github.com/mohammed90) in
[#&#8203;7652](https://redirect.github.com/caddyserver/caddy/pull/7652)
- build(deps): bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;7655](https://redirect.github.com/caddyserver/caddy/pull/7655)
- admin: Redact sensitive request headers in API logs by
[@&#8203;steadytao](https://redirect.github.com/steadytao) in
[#&#8203;7578](https://redirect.github.com/caddyserver/caddy/pull/7578)
- reverseproxy: add `lb_retry_match` condition on response status by
[@&#8203;seroperson](https://redirect.github.com/seroperson) in
[#&#8203;7569](https://redirect.github.com/caddyserver/caddy/pull/7569)
- caddyhttp: prefer port 443 in auto-HTTPS and add tests by
[@&#8203;mholt](https://redirect.github.com/mholt) in
[#&#8203;7666](https://redirect.github.com/caddyserver/caddy/pull/7666)
- fix: Propagate ECH keys to the QUIC listener by
[@&#8203;steadytao](https://redirect.github.com/steadytao) in
[#&#8203;7670](https://redirect.github.com/caddyserver/caddy/pull/7670)
- chore: Use atomics where appropriate by
[@&#8203;francislavoie](https://redirect.github.com/francislavoie) in
[#&#8203;7648](https://redirect.github.com/caddyserver/caddy/pull/7648)
- metrics: Implement pushing via OLTP by
[@&#8203;dunglas](https://redirect.github.com/dunglas) in
[#&#8203;7664](https://redirect.github.com/caddyserver/caddy/pull/7664)
- logging: Add regression coverage for rotated file mode by
[@&#8203;steadytao](https://redirect.github.com/steadytao) in
[#&#8203;7620](https://redirect.github.com/caddyserver/caddy/pull/7620)
- httpcaddyfile: Inherit global ACME issuer settings in tls shortcuts by
[@&#8203;steadytao](https://redirect.github.com/steadytao) in
[#&#8203;7617](https://redirect.github.com/caddyserver/caddy/pull/7617)
- build(deps): bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;7668](https://redirect.github.com/caddyserver/caddy/pull/7668)
- admin: require path segment boundary in remote access control by
[@&#8203;Amemoyoi](https://redirect.github.com/Amemoyoi) in
[#&#8203;7673](https://redirect.github.com/caddyserver/caddy/pull/7673)
- reverseproxy: Add ability to clear dynamic upstreams cache during
retries by [@&#8203;mholt](https://redirect.github.com/mholt) in
[#&#8203;7662](https://redirect.github.com/caddyserver/caddy/pull/7662)
- listeners: clean up stale Unix socket files on Windows by
[@&#8203;mfrischknecht](https://redirect.github.com/mfrischknecht) in
[#&#8203;7676](https://redirect.github.com/caddyserver/caddy/pull/7676)
- admin: reject non-canonical config array indices by
[@&#8203;Amemoyoi](https://redirect.github.com/Amemoyoi) in
[#&#8203;7592](https://redirect.github.com/caddyserver/caddy/pull/7592)
- caddytls: Expand ACME credentials by
[@&#8203;tribut](https://redirect.github.com/tribut) in
[#&#8203;7554](https://redirect.github.com/caddyserver/caddy/pull/7554)
- caddyauth: set user placeholders before auth rejection by
[@&#8203;cyphercodes](https://redirect.github.com/cyphercodes) in
[#&#8203;7685](https://redirect.github.com/caddyserver/caddy/pull/7685)
- caddyauth: revert user placeholders on auth rejection by
[@&#8203;steadytao](https://redirect.github.com/steadytao) in
[#&#8203;7688](https://redirect.github.com/caddyserver/caddy/pull/7688)
- chore: Fix golangci-lint 2.12.1 findings by
[@&#8203;steadytao](https://redirect.github.com/steadytao) in
[#&#8203;7690](https://redirect.github.com/caddyserver/caddy/pull/7690)
- httpcaddyfile: accept duration strings for log sampling interval by
[@&#8203;tomholford](https://redirect.github.com/tomholford) in
[#&#8203;7694](https://redirect.github.com/caddyserver/caddy/pull/7694)
- tls: Add alpn to managed HTTPS records by
[@&#8203;steadytao](https://redirect.github.com/steadytao) in
[#&#8203;7653](https://redirect.github.com/caddyserver/caddy/pull/7653)
- caddytls: avoid duplicate automation for wildcard-covered hosts by
[@&#8203;Rijul-A](https://redirect.github.com/Rijul-A) in
[#&#8203;7697](https://redirect.github.com/caddyserver/caddy/pull/7697)
- docs: add documentation for fileExists and fileStat template functions
by [@&#8203;steffenbusch](https://redirect.github.com/steffenbusch) in
[#&#8203;7700](https://redirect.github.com/caddyserver/caddy/pull/7700)
- rewrite: escape file matcher paths before rewriting by
[@&#8203;cyphercodes](https://redirect.github.com/cyphercodes) in
[#&#8203;7683](https://redirect.github.com/caddyserver/caddy/pull/7683)
- metrics: Add nil check for metricsHandler in AdminMetrics.serveHTTP by
[@&#8203;Br1an67](https://redirect.github.com/Br1an67) in
[#&#8203;7553](https://redirect.github.com/caddyserver/caddy/pull/7553)

#### New Contributors

- [@&#8203;steadytao](https://redirect.github.com/steadytao) made their
first contribution in
[#&#8203;7577](https://redirect.github.com/caddyserver/caddy/pull/7577)
- [@&#8203;henderkes](https://redirect.github.com/henderkes) made their
first contribution in
[#&#8203;7594](https://redirect.github.com/caddyserver/caddy/pull/7594)
- [@&#8203;yubiuser](https://redirect.github.com/yubiuser) made their
first contribution in
[#&#8203;7564](https://redirect.github.com/caddyserver/caddy/pull/7564)
- [@&#8203;pberkel](https://redirect.github.com/pberkel) made their
first contribution in
[#&#8203;7609](https://redirect.github.com/caddyserver/caddy/pull/7609)
- [@&#8203;HarshPatel5940](https://redirect.github.com/HarshPatel5940)
made their first contribution in
[#&#8203;7406](https://redirect.github.com/caddyserver/caddy/pull/7406)
- [@&#8203;tsinglua](https://redirect.github.com/tsinglua) made their
first contribution in
[#&#8203;7571](https://redirect.github.com/caddyserver/caddy/pull/7571)
- [@&#8203;maxtruxa](https://redirect.github.com/maxtruxa) made their
first contribution in
[#&#8203;7579](https://redirect.github.com/caddyserver/caddy/pull/7579)
- [@&#8203;seroperson](https://redirect.github.com/seroperson) made
their first contribution in
[#&#8203;7569](https://redirect.github.com/caddyserver/caddy/pull/7569)
- [@&#8203;Amemoyoi](https://redirect.github.com/Amemoyoi) made their
first contribution in
[#&#8203;7673](https://redirect.github.com/caddyserver/caddy/pull/7673)
- [@&#8203;mfrischknecht](https://redirect.github.com/mfrischknecht)
made their first contribution in
[#&#8203;7676](https://redirect.github.com/caddyserver/caddy/pull/7676)
- [@&#8203;tribut](https://redirect.github.com/tribut) made their first
contribution in
[#&#8203;7554](https://redirect.github.com/caddyserver/caddy/pull/7554)
- [@&#8203;cyphercodes](https://redirect.github.com/cyphercodes) made
their first contribution in
[#&#8203;7685](https://redirect.github.com/caddyserver/caddy/pull/7685)
- [@&#8203;tomholford](https://redirect.github.com/tomholford) made
their first contribution in
[#&#8203;7694](https://redirect.github.com/caddyserver/caddy/pull/7694)
- [@&#8203;Rijul-A](https://redirect.github.com/Rijul-A) made their
first contribution in
[#&#8203;7697](https://redirect.github.com/caddyserver/caddy/pull/7697)
- [@&#8203;Br1an67](https://redirect.github.com/Br1an67) made their
first contribution in
[#&#8203;7553](https://redirect.github.com/caddyserver/caddy/pull/7553)

**Full Changelog**:
<https://github.com/caddyserver/caddy/compare/v2.11.2...v2.11.3>

</details>

<details>
<summary>dlclark/regexp2 (github.com/dlclark/regexp2/v2)</summary>

###
[`v2.0.3`](https://redirect.github.com/dlclark/regexp2/compare/v2.0.2...v2.0.3)

[Compare
Source](https://redirect.github.com/dlclark/regexp2/compare/v2.0.2...v2.0.3)

</details>

<details>
<summary>casey/just (just)</summary>

###
[`v1.51.0`](https://redirect.github.com/casey/just/blob/HEAD/CHANGELOG.md#1510---2026-05-09)

[Compare
Source](https://redirect.github.com/casey/just/compare/1.50.0...1.51.0)

##### Added

- Add `no-cd` setting
([#&#8203;2981](https://redirect.github.com/casey/just/pull/2981) by
[hans-d](https://redirect.github.com/hans-d))

##### Changed

- Allow `[env]` attribute to take expressions
([#&#8203;3329](https://redirect.github.com/casey/just/pull/3329) by
[casey](https://redirect.github.com/casey))
- Allow using expressions with `[working-directory]`
([#&#8203;3326](https://redirect.github.com/casey/just/pull/3326) by
[casey](https://redirect.github.com/casey))
- Read justfile from standard input with `--justfile -`
([#&#8203;3325](https://redirect.github.com/casey/just/pull/3325) by
[casey](https://redirect.github.com/casey))
- Make `parent_directory()` of bare filename return `.`
([#&#8203;3313](https://redirect.github.com/casey/just/pull/3313) by
[casey](https://redirect.github.com/casey))
- Make `[env]` override module-level exports
([#&#8203;3312](https://redirect.github.com/casey/just/pull/3312) by
[casey](https://redirect.github.com/casey))

##### Fixed

- Fail on deep recursion instead of overflowing stack
([#&#8203;3319](https://redirect.github.com/casey/just/pull/3319) by
[casey](https://redirect.github.com/casey))
- Invoke chooser selections separately
([#&#8203;3311](https://redirect.github.com/casey/just/pull/3311) by
[casey](https://redirect.github.com/casey))
- Don't evaluate unused assertions
([#&#8203;3310](https://redirect.github.com/casey/just/pull/3310) by
[casey](https://redirect.github.com/casey))
- Respect lazy setting in submodules
([#&#8203;3308](https://redirect.github.com/casey/just/pull/3308) by
[casey](https://redirect.github.com/casey))
- Fix overrides not being visible in user-defined functions
([#&#8203;3307](https://redirect.github.com/casey/just/pull/3307) by
[casey](https://redirect.github.com/casey))
- Don't panic on invalid datetime format string
([#&#8203;3304](https://redirect.github.com/casey/just/pull/3304) by
[casey](https://redirect.github.com/casey))

##### Misc

- Use `cargo-limit` commands in justfile
([#&#8203;3331](https://redirect.github.com/casey/just/pull/3331) by
[casey](https://redirect.github.com/casey))
- Simplify code more
([#&#8203;3330](https://redirect.github.com/casey/just/pull/3330) by
[casey](https://redirect.github.com/casey))
- Update install-dev-deps recipe with compatible mdbook
([#&#8203;3328](https://redirect.github.com/casey/just/pull/3328) by
[casey](https://redirect.github.com/casey))
- Simplify code
([#&#8203;3327](https://redirect.github.com/casey/just/pull/3327) by
[casey](https://redirect.github.com/casey))
- Link to duplicate recipe issue in readme
([#&#8203;3321](https://redirect.github.com/casey/just/pull/3321) by
[casey](https://redirect.github.com/casey))
- Remove periods from error messages
([#&#8203;3316](https://redirect.github.com/casey/just/pull/3316) by
[casey](https://redirect.github.com/casey))
- Avoid multi-sentence error messagess
([#&#8203;3315](https://redirect.github.com/casey/just/pull/3315) by
[casey](https://redirect.github.com/casey))
- Make error messages lowercase
([#&#8203;3314](https://redirect.github.com/casey/just/pull/3314) by
[casey](https://redirect.github.com/casey))
- Actually bump version to 1.50.0
([#&#8203;3303](https://redirect.github.com/casey/just/pull/3303) by
[casey](https://redirect.github.com/casey))

</details>

<details>
<summary>astral-sh/uv (uv)</summary>

###
[`v0.11.14`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01114)

[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.11.13...0.11.14)

Released on 2026-05-12.

##### Enhancements

- Add Astral mirror URL override
([#&#8203;19206](https://redirect.github.com/astral-sh/uv/pull/19206))
- Ignore `top_level.txt` entries in uninstall that are not valid Python
identifiers
([#&#8203;19340](https://redirect.github.com/astral-sh/uv/pull/19340))

##### Bug fixes

- Avoid applying `.env` files in parent process
([#&#8203;19343](https://redirect.github.com/astral-sh/uv/pull/19343))
- Filter ANSI codes in logging output
([#&#8203;19311](https://redirect.github.com/astral-sh/uv/pull/19311))
- Fix `uv tree` showing extra-conditional deps for packages required
without extras
([#&#8203;19332](https://redirect.github.com/astral-sh/uv/pull/19332))
- Respect build options (e.g., `--no-build`) during lock validation
([#&#8203;19366](https://redirect.github.com/astral-sh/uv/pull/19366))

###
[`v0.11.13`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01113)

[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.11.12...0.11.13)

Released on 2026-05-10.

##### Bug fixes

- Include data files in editable builds
([#&#8203;19312](https://redirect.github.com/astral-sh/uv/pull/19312))
- Respect `--require-hashes` when installing from `pylock.toml` files
([#&#8203;19334](https://redirect.github.com/astral-sh/uv/pull/19334))

##### Python

- Add CPython 3.14.5

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/alecthomas/chroma).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE3OS4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-15 15:42:05 +10:00
2026-05-12 16:48:00 +10:00
2026-05-12 16:48:00 +10:00
2026-05-12 16:48:00 +10:00
2026-05-12 16:48:00 +10:00
2026-05-12 16:48:00 +10:00
2026-05-12 16:48:00 +10:00
2026-05-04 01:08:59 +10:00
2026-05-12 16:48:00 +10:00
2026-05-12 16:48:00 +10:00
2026-05-12 16:48:00 +10:00

Chroma

A general purpose syntax highlighter in pure Go

Go Reference CI Slack chat

Chroma takes source code and other structured text and converts it into syntax highlighted HTML, ANSI-coloured text, etc.

Chroma is based heavily on Pygments, and includes translators for Pygments lexers and styles.

Table of Contents

  1. Supported languages
  2. Try it
  3. Using the library
    1. Quick start
    2. Identifying the language
    3. Formatting the output
    4. The HTML formatter
  4. More detail
    1. Lexers
    2. Formatters
    3. Styles
  5. Command-line interface
  6. Testing lexers
  7. What's missing compared to Pygments?

Supported languages

Prefix Language
A ABAP, ABNF, ActionScript, ActionScript 3, Ada, Agda, AL, Alloy, AMPL, Angular2, ANTLR, ApacheConf, APL, AppleScript, ArangoDB AQL, Arduino, ArmAsm, Arturo, ATL, AutoHotkey, AutoIt, Awk
B Ballerina, Bash, Bash Session, Batchfile, Beef, BibTeX, Bicep, BlitzBasic, BNF, BQN, Brainfuck
C C, C#, C++, C3, Caddyfile, Caddyfile Directives, Cap'n Proto, Cassandra CQL, Ceylon, CFEngine3, cfstatement, ChaiScript, Chapel, Cheetah, Clojure, CMake, COBOL, CoffeeScript, Common Lisp, Coq, Core, Crystal, CSS, CSV, CUE, Cython
D D, Dart, Dax, Desktop file, Devicetree, Diff, Django/Jinja, dns, Docker, DTD, Dylan
E EBNF, Elixir, Elm, EmacsLisp, ERB, Erlang
F Factor, Fennel, Fish, Forth, Fortran, FortranFixed, FSharp
G GAS, GDScript, GDScript3, Gemtext, Genshi, Genshi HTML, Genshi Text, Gettext, Gherkin, Gleam, GLSL, Gnuplot, Go, Go HTML Template, Go Template, Go Text Template, GraphQL, Groff, Groovy
H Handlebars, Hare, Haskell, Haxe, HCL, Hexdump, HLB, HLSL, HolyC, HTML, HTTP, Hy
I Idris, Igor, INI, Io, ISCdhcpd
J J, Janet, Java, JavaScript, JSON, JSONata, Jsonnet, Julia, Jungle
K Kakoune, KDL, Kotlin
L Lateralus, Lean4, Lighttpd configuration file, LilyPond, LLVM, lox, Lua, Luau
M Makefile, Mako, markdown, Markless, Mason, Materialize SQL dialect, Mathematica, Matlab, MCFunction, Meson, Metal, microcad, MiniZinc, MLIR, Modelica, Modula-2, Mojo, MonkeyC, MoonBit, MoonScript, MorrowindScript, Myghty, MySQL
N NASM, Natural, NDISASM, Newspeak, Nginx configuration file, Nim, Nix, NSIS, Nu
O Objective-C, ObjectPascal, OCaml, Octave, Odin, OnesEnterprise, OpenEdge ABL, OpenSCAD, Org Mode
P PacmanConf, Perl, PHP, PHTML, Pig, PkgConfig, PL/pgSQL, plaintext, Plutus Core, Pony, PostgreSQL SQL dialect, PostScript, POVRay, PowerQuery, PowerShell, Prolog, Promela, PromQL, properties, Protocol Buffer, Protocol Buffer Text Format, PRQL, PSL, Puppet, Python, Python 2
Q QBasic, QML
R R, Racket, Ragel, Raku, react, ReasonML, reg, Rego, reStructuredText, Rexx, RGBDS Assembly, Ring, RPGLE, RPMSpec, Ruby, Rust
S SAS, Sass, Scala, scdoc, Scheme, Scilab, SCSS, Sed, Sieve, Smali, Smalltalk, Smarty, SNBT, Snobol, Solidity, SourcePawn, Spade, SPARQL, SQL, SquidConf, Standard ML, stas, Stylus, Svelte, Swift, SYSTEMD, systemverilog
T TableGen, Tal, TASM, Tcl, Tcsh, Termcap, Terminfo, Terraform, TeX, Thrift, TOML, TradingView, Transact-SQL, Turing, Turtle, Twig, TypeScript, TypoScript, TypoScriptCssData, TypoScriptHtmlData, Typst
U ucode
V V, V shell, Vala, VB.net, verilog, VHDL, VHS, VimL, vue
W WDTE, WebAssembly Text Format, WebGPU Shading Language, WebVTT, Whiley
X XML, Xorg
Y YAML, YANG
Z Z80 Assembly, Zed, Zig

I will attempt to keep this section up to date, but an authoritative list can be displayed with chroma --list.

Try it

Try out various languages and styles on the Chroma Playground.

Using the library

This is version 2 of Chroma, use the import path:

import "github.com/alecthomas/chroma/v2"

Chroma, like Pygments, has the concepts of lexers, formatters and styles.

Lexers convert source text into a stream of tokens, styles specify how token types are mapped to colours, and formatters convert tokens and styles into formatted output.

A package exists for each of these, containing a global Registry variable with all of the registered implementations. There are also helper functions for using the registry in each package, such as looking up lexers by name or matching filenames, etc.

In all cases, if a lexer, formatter or style can not be determined, nil will be returned. In this situation you may want to default to the Fallback value in each respective package, which provides sane defaults.

Quick start

A convenience function exists that can be used to simply format some source text, without any effort:

err := quick.Highlight(os.Stdout, someSourceCode, "go", "html", "monokai")

Identifying the language

To highlight code, you'll first have to identify what language the code is written in. There are three primary ways to do that:

  1. Detect the language from its filename.

    lexer := lexers.Match("foo.go")
    
  2. Explicitly specify the language by its Chroma syntax ID (a full list is available from lexers.Names()).

    lexer := lexers.Get("go")
    
  3. Detect the language from its content.

    lexer := lexers.Analyse("package main\n\nfunc main()\n{\n}\n")
    

In all cases, nil will be returned if the language can not be identified.

if lexer == nil {
  lexer = lexers.Fallback
}

At this point, it should be noted that some lexers can be extremely chatty. To mitigate this, you can use the coalescing lexer to coalesce runs of identical token types into a single token:

lexer = chroma.Coalesce(lexer)

Formatting the output

Once a language is identified you will need to pick a formatter and a style (theme).

style := styles.Get("swapoff")
if style == nil {
  style = styles.Fallback
}
formatter := formatters.Get("html")
if formatter == nil {
  formatter = formatters.Fallback
}

Then obtain an iterator over the tokens:

contents, err := ioutil.ReadAll(r)
iterator, err := lexer.Tokenise(nil, string(contents))

And finally, format the tokens from the iterator:

err := formatter.Format(w, style, iterator)

The HTML formatter

By default the html registered formatter generates standalone HTML with embedded CSS. More flexibility is available through the formatters/html package.

Firstly, the output generated by the formatter can be customised with the following constructor options:

  • Standalone() - generate standalone HTML with embedded CSS.
  • WithClasses() - use classes rather than inlined style attributes.
  • ClassPrefix(prefix) - prefix each generated CSS class.
  • TabWidth(width) - Set the rendered tab width, in characters.
  • WithLineNumbers() - Render line numbers (style with LineNumbers).
  • WithLinkableLineNumbers() - Make the line numbers linkable and be a link to themselves.
  • HighlightLines(ranges) - Highlight lines in these ranges (style with LineHighlight).
  • LineNumbersInTable() - Use a table for formatting line numbers and code, rather than spans.

If WithClasses() is used, the corresponding CSS can be obtained from the formatter with:

formatter := html.New(html.WithClasses(true))
err := formatter.WriteCSS(w, style)

More detail

Lexers

See the Pygments documentation for details on implementing lexers. Most concepts apply directly to Chroma, but see existing lexer implementations for real examples.

In many cases lexers can be automatically converted directly from Pygments by using the included Python 3 script pygments2chroma_xml.py. I use something like the following:

uv run --script _tools/pygments2chroma_xml.py \
  pygments.lexers.jvm.KotlinLexer \
  > lexers/embedded/kotlin.xml

A list of all lexers available in Pygments can be found in pygments-lexers.txt.

Formatters

Chroma supports HTML output, as well as terminal output in 8 colour, 256 colour, and true-colour.

A noop formatter is included that outputs the token text only, and a tokens formatter outputs raw tokens. The latter is useful for debugging lexers.

Styles

Chroma styles are defined in XML. The style entries use the same syntax as Pygments. All Pygments styles have been converted to Chroma using the _tools/style.py script.

Style names are case-insensitive. For example, monokai and Monokai are treated as the same style.

When you work with one of Chroma's styles, know that the Background token type provides the default style for tokens. It does so by defining a foreground color and background color.

For example, this gives each token name not defined in the style a default color of #f8f8f8 and uses #000000 for the highlighted code block's background:

<entry type="Background" style="#f8f8f2 bg:#000000"/>

Also, token types in a style file are hierarchical. For instance, when CommentSpecial is not defined, Chroma uses the token style from Comment. So when several comment tokens use the same color, you'll only need to define Comment and override the one that has a different color.

For a quick overview of the available styles and how they look, check out the Chroma Style Gallery.

Command-line interface

A command-line interface to Chroma is included.

Binaries are available to install from the releases page.

The CLI can be used as a preprocessor to colorise output of less(1), see documentation for the LESSOPEN environment variable.

The --fail flag can be used to suppress output and return with exit status 1 to facilitate falling back to some other preprocessor in case chroma does not resolve a specific lexer to use for the given file. For example:

export LESSOPEN='| p() { chroma --fail "$1" || cat "$1"; }; p "%s"'

Replace cat with your favourite fallback preprocessor.

When invoked as .lessfilter, the --fail flag is automatically turned on under the hood for easy integration with lesspipe shipping with Debian and derivatives; for that setup the chroma executable can be just symlinked to ~/.lessfilter.

Projects using Chroma

Testing lexers

If you edit some lexers and want to try it, open a shell in cmd/chromad and run:

go run . --csrf-key=securekey

A Link will be printed. Open it in your Browser. Now you can test on the Playground with your local changes.

If you want to run the tests and the lexers, open a shell in the root directory and run:

go test ./lexers

When updating or adding a lexer, please add tests. See lexers/README.md for more.

What's missing compared to Pygments?

  • Quite a few lexers, for various reasons (pull-requests welcome):
    • Pygments lexers for complex languages often include custom code to handle certain aspects, such as Raku's ability to nest code inside regular expressions. These require time and effort to convert.
    • I mostly only converted languages I had heard of, to reduce the porting cost.
  • Some more esoteric features of Pygments are omitted for simplicity.
  • Though the Chroma API supports content detection, very few languages support them. I have plans to implement a statistical analyser at some point, but not enough time.
S
Description
A general purpose syntax highlighter in pure Go
Readme
23 MiB
Languages
Go 93.9%
JavaScript 3.2%
Python 1.6%
Go Template 0.5%
Just 0.3%
Other 0.4%