chore(deps): bump github.com/odvcencio/gotreesitter from 0.20.8 to 0.52.0 in the go-dependencies group across 1 directory

[dependabot]

Bumps the go-dependencies group with 1 update in the / directory: github.com/odvcencio/gotreesitter.

Updates github.com/odvcencio/gotreesitter from 0.20.8 to 0.52.0

Release notes

Sourced from github.com/odvcencio/gotreesitter's releases.

gotreesitter v0.52.0

Release overview

• Eligible fresh parses use the compact parser by default. Unsupported cases retain the legacy fallback. This release does not complete compact parser graduation.
• Compact incremental parsing now reuses authenticated unchanged subtrees. The bounded route includes nested nonterminals with lexer dependency proofs. Edits invalidate affected proofs, including dependencies on examined suffix bytes.
• The authenticated Go profile supports bounded end-of-file recovery with native error-tree construction. Unsupported recovery cases retain fallback.
• The detailed entries below preserve the development history, including rejected experiments, superseded measurements, and unresolved parity blockers.

Issue #1087 remains open. This release temporarily disables the unsafe same-width token-invariant shortcut. Real edits reparse through the supported incremental or full-parse route. Ordinary subtree reuse and no-edit reuse remain available. Restore the shortcut only after complete lexical dependency proofs pass. The full correction remains deferred; this mitigation does not close the issue. The owner approved the temporary slowdown. The measured single-byte edit rises from 1.706 us to 3,350.460 us, with 184.4 KiB and 95 allocations per operation. Full-parse and no-edit timing changes are not significant. Full parsing reduces allocated bytes by 42.90 percent and allocations by 99.72 percent. See the release performance report.

Lexical error-leaf flags and TypeScript recovery divergences remain graduation work. The attempted flag correction changed AWK recovery selection and remains deferred.

Performance tooling and optimizations

• Pull request #1089 restores paired performance evidence and authenticated work counts. The paired driver alternates execution order and rejects incomplete evidence.
• Pull request #1090 caches recovery visible-subtree counts and removes canonicalization callback allocations. The cache reduces time across four frozen Go fixtures. The callback change reduces allocations without a significant timing change. Read the recovery count report and canonicalization report for measured commits, paired results, and limits. These measurements precede the temporary shortcut mitigation.

The owner authorized a v0.52.0-only exception for an unsupported tag-creation actor rule. All other publication gates remain mandatory. See the dated exception.

Performance

• Bound temporary conflict-frontier growth with the maximum of the resolved

... (truncated)

Changelog

Sourced from github.com/odvcencio/gotreesitter's changelog.

[0.52.0] - 2026-09-05

Release overview

• Eligible fresh parses use the compact parser by default. Unsupported cases retain the legacy fallback. This release does not complete compact parser graduation.
• Compact incremental parsing now reuses authenticated unchanged subtrees. The bounded route includes nested nonterminals with lexer dependency proofs. Edits invalidate affected proofs, including dependencies on examined suffix bytes.
• The authenticated Go profile supports bounded end-of-file recovery with native error-tree construction. Unsupported recovery cases retain fallback.
• The detailed entries below preserve the development history, including rejected experiments, superseded measurements, and unresolved parity blockers.

Issue #1087 remains open. This release temporarily disables the unsafe same-width token-invariant shortcut. Real edits reparse through the supported incremental or full-parse route. Ordinary subtree reuse and no-edit reuse remain available. Restore the shortcut only after complete lexical dependency proofs pass. The full correction remains deferred; this mitigation does not close the issue. The owner approved the temporary slowdown. The measured single-byte edit rises from 1.706 us to 3,350.460 us, with 184.4 KiB and 95 allocations per operation. Full-parse and no-edit timing changes are not significant. Full parsing reduces allocated bytes by 42.90 percent and allocations by 99.72 percent. See the release performance report.

Lexical error-leaf flags and TypeScript recovery divergences remain graduation work. The attempted flag correction changed AWK recovery selection and remains deferred.

Performance tooling and optimizations

• Pull request #1089 restores paired performance evidence and authenticated work counts. The paired driver alternates execution order and rejects incomplete evidence.
• Pull request #1090 caches recovery visible-subtree counts and removes canonicalization callback allocations. The cache reduces time across four frozen Go fixtures. The callback change reduces allocations without a significant timing change. Read the recovery count report and canonicalization report for measured commits, paired results, and limits. These measurements precede the temporary shortcut mitigation.

The owner authorized a v0.52.0-only exception for an unsupported tag-creation actor rule. All other publication gates remain mandatory. See the dated exception.

Performance

... (truncated)

Commits

• 2295871 Merge pull request #1092 from odvcencio/codex/release-v0.52.0-notes-20260905
• 93a8724 Merge pull request #1091 from odvcencio/codex/release-v0.52.0-20260905
• 7427c0f document(performance): record container RSS benchmark log
• 0638434 update(docs): document v0.52.0 release evidence
• 7bc3a8a test(incremental): cover scanner-proof fallback in incremental tests
• c85abaf fix(recovery): align lexical error leaves with lexer provenance
• a4714c3 fix(incremental): classify same-width edits as reparses
• 0b60cce add(parsercore): track recovery visible counts and harden bench runs
• 026ea3d fix(incremental): disable unsafe token-invariant leaf reuse
• 19d31ba fix(lexer): preserve raw lexical error provenance
• Additional commits viewable in compare view

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	github.com/​odvcencio/​gotreesitter@​v0.52.0

View full report