Skip to content

Bump github.com/spf13/cobra from 1.9.1 to 1.10.2 in /src - #411

Merged
Farjaad merged 1 commit into
mainfrom
dependabot/go_modules/src/github.com/spf13/cobra-1.10.1
Oct 16, 2026
Merged

Farjaad merged 1 commit into
mainfrom
dependabot/go_modules/src/github.com/spf13/cobra-1.10.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2025 •

Copy link
Copy Markdown
Contributor

Bumps github.com/spf13/cobra from 1.9.1 to 1.10.2.

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

  • chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @​dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

v1.10.1

🐛 Fix

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

  • If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`
  • or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 2, 2025
@Farjaad

Farjaad commented Oct 16, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot dependabot Bot changed the title Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 in /src Bump github.com/spf13/cobra from 1.9.1 to 1.10.2 in /src Oct 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/src/github.com/spf13/cobra-1.10.1 branch from 5ee87a6 to 8ce07c8 Compare October 16, 2026 16:09
@Farjaad

Farjaad commented Oct 16, 2026

Copy link
Copy Markdown
Contributor

Dependency review: safe to merge

Note: the branch name says 1.10.1, but Dependabot updated the PR and the diff is cobra 1.10.2.

  • Scope: Only src/go.mod and src/go.sum change: cobra 1.10.2, pflag 1.0.9, and go.yaml.in/yaml/v3 3.0.4 (cobra moved to the maintained yaml.v3 fork).
  • How we use it: Basic, stable features across 42 files: cobra.Command, CheckErr, ExactArgs-style argument checks and OnInitialize.
  • Breaking changes: None that affect us. pflag 1.0.8's ParseErrorsWhitelist rename was undone in 1.0.9 (the version pinned here), and we never used it. cobra 1.10.0 only adds two optional features (context for custom help functions, configurable default shell completion) that we don't use.
  • Verification: The Tests workflow didn't run because its path filter doesn't match src/go.mod. Locally, go mod verify, build, vet and the common tests pass, and help output and unknown-flag errors work normally. The cmd/e2e tests fail only with 401s from the live API (no token), and main fails the same way.

@Farjaad

Farjaad commented Oct 16, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@Farjaad

Farjaad commented Oct 16, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/src/github.com/spf13/cobra-1.10.1 branch from ec63630 to 040edc5 Compare October 16, 2026 16:34
@Farjaad

Farjaad commented Oct 16, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.9.1 to 1.10.2.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.9.1...v1.10.2)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/src/github.com/spf13/cobra-1.10.1 branch from 040edc5 to 9c1d21c Compare October 16, 2026 18:39
@Farjaad
Farjaad merged commit f1c2be4 into main Oct 16, 2026
2 checks passed
@Farjaad
Farjaad deleted the dependabot/go_modules/src/github.com/spf13/cobra-1.10.1 branch October 16, 2026 18:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant