Bump git-pkgs dependencies (#324)

Bump git-pkgs enrichment, manifests, registries (#293)

Merge pull request #288 from git-pkgs/fix/sbom-version-metadata

Use version metadata in SBOMs

Bump dependencies before release (#282)

github.com/git-pkgs/enrichment  v0.5.0  -> v0.6.1
github.com/git-pkgs/purl        v0.1.14 -> v0.1.15
github.com/git-pkgs/vers        v0.2.6  -> v0.3.0
github.com/git-pkgs/vulns       v0.1.6  -> v0.2.1
github.com/mattn/go-isatty      v0.0.22 -> v0.0.23
modernc.org/sqlite              v1.53.0 -> v1.54.0

Bump git-pkgs and third-party dependencies (#255)

Minimize indexer progress updates to a single line on a TTY

* feat: minimize progress updates to a single line

Instead of printing every line, if we have a TTY, replace it instead.

Signed-off-by: Mike Fiedler <miketheman@gmail.com>

* Extract progress reporting into internal/progress package

Wraps the io.Writer in a Reporter that detects whether it is a terminal
via go-isatty (already a direct dependency) and exposes Update for
transient status lines, Println for permanent output, and Clear. The
nil receiver is a no-op so callers don't need to guard on Quiet at
every call site.

The indexer no longer carries an isTTY flag or hardcodes ANSI escapes;
it just calls Update for the per-100-commit counter and Println for
snapshot logs. TTY detection now inspects the actual output writer
rather than always checking os.Stdout.

---------

Signed-off-by: Mike Fiedler <miketheman@gmail.com>
Co-authored-by: Andrew Nesbitt <andrewnez@gmail.com>

Bump git-pkgs deps for v0.16.1 (#204)

Bump go-git to v5.19.0 and go-billy to v5.9.0 (#197)