fix(deps): update module github.com/spf13/cobra to v1.10.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/spf13/cobra	v1.9.1 -> v1.10.1

---

Release Notes

spf13/cobra (github.com/spf13/cobra)

v1.10.1

Compare Source

🐛 Fix

• chore: upgrade pflags v1.0.9 by @​jpmcb in #​2305

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

Compare Source

What's Changed

🚨 Attention!

• Bump pflag to 1.0.8 by @​tomasaschan in #​2303

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

• If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`
• or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: #​2303 (comment)

✨ Features

• Flow context to command in SetHelpFunc by @​Frassle in #​2241
• The default ShellCompDirective can be customized for a command and its subcommands by @​albers in #​2238

🐛 Fix

• Upgrade golangci-lint to v2, address findings by @​scop in #​2279

🪠 Testing

• Test with Go 1.24 by @​harryzcy in #​2236
• chore: Rm GitHub Action PR size labeler by @​jpmcb in #​2256

📝 Docs

• Remove traling curlybrace by @​yedayak in #​2237
• Update command.go by @​styee in #​2248
• feat: Add security policy by @​jpmcb in #​2253
• Update Readme (Warp) by @​ericdachen in #​2267
• Add Periscope to the list of projects using Cobra by @​anishathalye in #​2299

New Contributors

• @​harryzcy made their first contribution in #​2236
• @​yedayak made their first contribution in #​2237
• @​Frassle made their first contribution in #​2241
• @​styee made their first contribution in #​2248
• @​ericdachen made their first contribution in #​2267
• @​albers made their first contribution in #​2238
• @​anishathalye made their first contribution in #​2299
• @​tomasaschan made their first contribution in #​2303

Full Changelog: spf13/cobra@v1.9.1...v1.9.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
github.com/spf13/pflag	v1.0.6 -> v1.0.9

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

• v1.10.0: Minor version update with new features (customizable help functions, shell completion directives) and pflag upgrade to v1.0.8
• v1.10.1: Patch release upgrading pflag to v1.0.9 to restore deprecated ParseErrorsWhitelist for backward compatibility
• Breaking Changes: The breaking change in pflag v1.0.8 (ParseErrorsWhitelist → ParseErrorsAllowlist) was immediately fixed in v1.0.9
• Security Fixes: No security-related changes identified in either release

🎯 Impact Scope Investigation

• Direct Usage: Cobra is used only in cmd/root.go:8 as import and basic command structure in cmd/root.go:23-80
• Flag Handling: Uses standard Cobra flag APIs in cmd/flags.go:50-63 via rootCmd.Flags() and MarkFlagsMutuallyExclusive()
• Version Integration: Simple version assignment in cmd/version.go:13
• No Direct pflag Usage: The codebase uses pflag only indirectly through Cobra's API
• API Compatibility: All used Cobra APIs (cobra.Command, Flags(), MarkFlagsMutuallyExclusive()) remain unchanged

💡 Recommended Actions

• Immediate Merge: This update is safe to merge without code changes
• No Migration Required: The codebase uses stable Cobra APIs that maintain backward compatibility
• Dependency Resolution: The pflag v1.0.9 upgrade resolves the breaking change concern from v1.0.8

🔗 Reference Links

• Cobra v1.10.1 Release
• Cobra v1.10.0 Release

Generated by koki-develop/claude-renovate-review