Update tmux to 3.7

[gominimal-pkgmgr-mgr]

Update tmux 3.6a → 3.7

Source: github:tmux/tmux
Release: https://github.com/tmux/tmux/releases/tag/3.7
Changelog: tmux/tmux@3.6a...3.7
Released: 16 days ago (2026-06-26)

Pkgscan: clean — diff against the prior version surfaced no newly-introduced suspicious patterns.

Vulnerability impact

Partition analysis at 3.7 (uses each advisory's fixed-version, vulnerable-range, affected-ranges, and fix-commit ancestry to decide):

• 1 cleared — the new version is outside the advisory's affected range, OR the tag's lineage includes a known fix-commit. These will drop off the next scan.

Vulnerabilities fixed (1)

This update clears 1 vulnerabilities affecting 3.6a:

CVE / GHSA	CPE	Severity	Fixed in
CVE-2026-11623	(nicholas_marriott, tmux)	LOW	via range: introduced in commit cc117b5, fixed in commit fc6d94a

Components changed

CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)

	Component	Old	New
~	tmux	3.6a	3.7
~	tmux-upstream	3.6a	3.7

Changes

	Old	New
Version	3.6a	3.7
SHA256	cd8d97f344cd2faa...	123b9ed37c7ee957...
Size	1.1 MB	1.1 MB
Source	gs://minimal-staging-archives/tmux/tmux/3.6a.tar.gz	gs://minimal-staging-archives/tmux/tmux/3.7.tar.gz

• License: ISC (source: GitHub + tarball)

Quality suggestions

• Missing tests block. This package has no standalone tests, so the buildbot will only verify compilation — not functional correctness. Consider adding a minimal smoke test (e.g., a --version or small round-trip invocation) as part of this PR so future bumps catch regressions. See packages/python/build.ncl for a simple example.

---

Created by pkgmgr