chore(deps): update Go modules and GitHub Actions

[williamwmarx]

Summary

• Update cobra v1.10.1 → v1.10.2
• Update bubbletea v1.3.6 → v1.3.10
• Update actions/checkout v3 → v6
• Update actions/setup-go v3 → v6
• Update transitive dependencies (colorprofile, ansi, sys, text, etc.)

This supersedes the following Dependabot PRs which should auto-close once merged:

• feat(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 #19 (cobra)
• chore(deps): bump actions/checkout from 3 to 6 #18 (actions/checkout)
• feat(deps): bump github.com/charmbracelet/bubbletea from 1.3.6 to 1.3.10 #17 (bubbletea)
• chore(deps): bump actions/setup-go from 3 to 6 #13 (actions/setup-go)
• feat(deps): bump github.com/charmbracelet/lipgloss from 0.6.0 to 0.7.1 #6 (lipgloss - stale, already at higher version)
• feat(deps): bump golang.org/x/text from 0.3.7 to 0.3.8 #5 (x/text - stale, already at higher version)

Test plan

• Build passes locally (go build)
• Binary runs correctly (./shell --help)

[greptile-apps]

Greptile Summary

Consolidated dependency update PR that updates Go modules and GitHub Actions to their latest versions.

Key Changes:

• Updated github.com/spf13/cobra from v1.10.1 to v1.10.2 (migrates from deprecated gopkg.in/yaml.v3 to go.yaml.in/yaml/v3)
• Updated github.com/charmbracelet/bubbletea from v1.3.6 to v1.3.10 (bug fixes for event loop handling and nested Sequence/Batch commands)
• Updated actions/checkout from v3 to v6 (requires runner v2.327.1+, uses Node.js 24)
• Updated actions/setup-go from v3 to v6 (requires runner v2.329.0+, uses Node.js 24, improved toolchain handling)
• Transitive dependency updates including colorprofile, ansi, sys, text, and several new clipperhouse dependencies
• Removed golang.org/x/sync dependency (no longer required)

Test Coverage:
The PR description indicates local testing was performed (go build and ./shell --help both pass).

Confidence Score: 5/5

• This PR is safe to merge with minimal risk
• All changes are routine dependency updates with patch/minor version bumps. The GitHub Actions updates require runner v2.329.0+ which GitHub-hosted runners already meet. The Go module updates include bug fixes and improved supply chain security (cobra's yaml migration). Local testing confirms the build works correctly.
• No files require special attention

Important Files Changed

Filename	Overview
.github/workflows/deploy.yml	Updated actions/checkout from v3→v6 and actions/setup-go from v3→v6 to use Node.js 24 runtime
.github/workflows/markdown.yml	Updated actions/checkout from v3→v6 and actions/setup-go from v3→v6 to use Node.js 24 runtime
go.mod	Updated direct dependencies (cobra v1.10.2, bubbletea v1.3.10) and transitive dependencies with minor version bumps
go.sum	Checksum updates matching the go.mod dependency changes

Sequence Diagram

sequenceDiagram
    participant Dev as Developer
    participant PR as PR #24
    participant GHA as GitHub Actions
    participant Runner as Actions Runner
    participant Go as Go Module System
    
    Dev->>PR: Push dependency updates
    Note over PR: cobra v1.10.1→v1.10.2<br/>bubbletea v1.3.6→v1.3.10<br/>actions/checkout v3→v6<br/>actions/setup-go v3→v6
    
    PR->>GHA: Trigger workflows
    GHA->>Runner: Check runner version
    Note over Runner: Requires v2.327.1+ for actions v5<br/>Requires v2.329.0+ for actions v6
    
    GHA->>Runner: Execute checkout@v6
    Note over Runner: Uses Node.js 24 runtime
    
    GHA->>Runner: Execute setup-go@v6
    Note over Runner: Uses Node.js 24 runtime
    Runner->>Go: Install Go >=1.19.0
    
    Go->>Go: Resolve dependencies
    Note over Go: Direct deps: cobra, bubbletea<br/>Transitive deps: colorprofile,<br/>ansi, sys, text, etc.
    
    Go->>GHA: Build binary
    GHA->>GHA: Run tests locally
    Note over GHA: Binary runs correctly<br/>./shell --help passes
    
    GHA-->>PR: Build success

Loading