chore(deps): bump github.com/odvcencio/gotreesitter from 0.20.8 to 0.48.1 in the go-dependencies group across 1 directory

[dependabot]

Bumps the go-dependencies group with 1 update in the / directory: github.com/odvcencio/gotreesitter.

Updates github.com/odvcencio/gotreesitter from 0.20.8 to 0.48.1

Release notes

Sourced from github.com/odvcencio/gotreesitter's releases.

gotreesitter v0.48.1

Emergency patch release for issue #660. This release restores reference-compatible field names for anonymous separator nodes in Python import and subscript forms. It includes focused regression tests and parity validation. It was built from the v0.48 maintenance branch and does not include the unresolved v10 performance work.

gotreesitter v0.48.0

Added

• A validated Swift corpus now guards real-code parsing. Twelve files come from swiftlang/swift 6.3 and apple/swift-algorithms 1.2.1. A ratcheting expectations test fails on any regression or unrecorded fix. Five upstream grammar gaps are recorded in issues #574 through #578.

• The dispatcher census now reports distinct Ada, Apex, Bash, and Cooklang materialization subpasses. Compatibility-free probes record active and inert producer behavior.

• grammargen -js-cli now resolves grammar.js with Tree-sitter 0.26 or newer. It imports the temporary canonical grammar.json through the existing path. The explicit flag warns that grammar evaluation executes JavaScript.

• grammargen -js-cli now identifies a missing JavaScript runtime when Tree-sitter cannot start Node. The command help and README list both prerequisites.

• The canonical compact real-corpus matrix now records 70 direct routes, 30 fallbacks, exactly 10 skips, and no divergence or error. The bounded current receipt covers 110 rows.

Performance

• Live-header scoping reduces compact full-parse allocation counts by 11.27 percent on the 235,626-byte Go fixture. Allocated bytes fall by 26.64 percent. Parse time remains statistically unchanged for that fixture. The rewrite fixture regresses by 19.99 percent. The query-compile fixture regresses by 15.77 percent.

• The parser now skips four redundant source reconstruction passes for certified isolated C# recovered roots. The receipt requires one one-byte error, no missing nodes, and matching raw top-level spans. The 137 KiB deletion witness still matches the pinned C parser. Median full-parse time falls from 8.24 seconds to 5.01 seconds. Median memory falls from 608 MB to 195 MB. Median allocation count falls from 286,009 to 9,663. BenchmarkIssue454CSharpRecoveredFullParse uses GOMAXPROCS=1, -benchmem, -benchtime=1x, and -count=5.

• The graph-structured stack shape walk now skips a duplicate cache lookup

... (truncated)

Changelog

Sourced from github.com/odvcencio/gotreesitter's changelog.

[0.48.1] - 2026-08-04

Fixed

• Anonymous separator nodes in Python import and subscript forms stay unfielded. The patch restores field-name behavior from the reference C runtime. This fixes [issue #660](odvcencio/gotreesitter#660).

[0.48.0] - 2026-08-01

Added

• A validated Swift corpus now guards real-code parsing. Twelve files come from swiftlang/swift 6.3 and apple/swift-algorithms 1.2.1. A ratcheting expectations test fails on any regression or unrecorded fix. Five upstream grammar gaps are recorded in issues #574 through #578.

• The dispatcher census now reports distinct Ada, Apex, Bash, and Cooklang materialization subpasses. Compatibility-free probes record active and inert producer behavior.

• grammargen -js-cli now resolves grammar.js with Tree-sitter 0.26 or newer. It imports the temporary canonical grammar.json through the existing path. The explicit flag warns that grammar evaluation executes JavaScript.

• grammargen -js-cli now identifies a missing JavaScript runtime when Tree-sitter cannot start Node. The command help and README list both prerequisites.

• The canonical compact real-corpus matrix now records 70 direct routes, 30 fallbacks, exactly 10 skips, and no divergence or error. The bounded current receipt covers 110 rows.

Performance

• Live-header scoping reduces compact full-parse allocation counts by 11.27 percent on the 235,626-byte Go fixture. Allocated bytes fall by 26.64 percent. Parse time remains statistically unchanged for that fixture. The rewrite fixture regresses by 19.99 percent. The query-compile fixture regresses by 15.77 percent.

• The parser now skips four redundant source reconstruction passes for certified isolated C# recovered roots. The receipt requires one one-byte error, no missing nodes, and matching raw top-level spans. The 137 KiB deletion witness still matches the pinned C parser.

... (truncated)

Commits

• bbd24cd release: publish v0.48.1 for issue 660
• e85c33f fix(parser): stop inherited fields on anonymous separators
• 706457c Merge pull request #583 from odvcencio/release/v0.48.0-receipt-contract
• 1685fba fix(release): Quote the receipt URI description
• d3f9eea fix(releasegate): Require signed release receipt IDs
• a2cfa76 Merge pull request #582 from odvcencio/release/v0.48.0-owner-waiver
• 08fa4ff add(release-gate): Add one-time v0.48.0 release waiver
• 1a0eba4 Merge pull request #581 from odvcencio/codex/release-v0.48.0-graduation
• 2612d9e release: Release v0.48.0
• d5fff69 Merge pull request #572 from odvcencio/codex/swift-corpus-validation
• Additional commits viewable in compare view

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	github.com/​odvcencio/​gotreesitter@​v0.48.1

View full report