Update github.com/spf13/cobra from v1.9.1 to v1.10.1

[Copilot]

Minor version update for the Cobra CLI framework dependency, bringing in pflags v1.0.9 and bug fixes.

Changes

• Updated github.com/spf13/cobra from v1.9.1 to v1.10.1
• Transitive dependency github.com/spf13/pflag upgraded to v1.0.10
• Regenerated documentation files (frontmatter reference, workflow status badges)

What's in v1.10.1

• pflags upgrade to v1.0.9
• ParseErrorsWhitelist restored (deprecated)
• Bug fixes and stability improvements
• Full backward compatibility maintained

All CLI commands (compile, mcp, logs, audit, status) tested and working. No deprecation warnings or breaking changes detected.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[Dependabot] Update github.com/spf13/cobra from v1.9.1 to v1.10.1</issue_title>
<issue_description>## Summary
Update github.com/spf13/cobra dependency from v1.9.1 to v1.10.1

Current State

• Package: github.com/spf13/cobra
• Current Version: v1.9.1
• Proposed Version: v1.10.1
• Update Type: Minor

Safety Assessment

✅ Safe to update

• Minor version update (1.9.1 → 1.10.1)
• Backward compatible changes only
• Maintenance update focusing on dependency upgrades

Changes

v1.10.1 (Latest):

• Upgraded pflags to v1.0.9
• Brought back ParseErrorsWhitelist (marked as deprecated)
• Bug fixes and improvements

v1.10.0:

• Various improvements and bug fixes
• Maintained backward compatibility

Links

• Release v1.10.1
• Package Repository
• Go Package
• Full Changelog

Recommended Action

go get -u github.com/spf13/cobra@v1.10.1
go mod tidy

Testing Notes

• Run all tests: make test
• Verify CLI commands still work correctly with ./gh-aw --help
• Test all subcommands: compile, logs, mcp, audit, etc.
• Check for any deprecation warnings during build
• Ensure CLI argument parsing works as expected

AI generated by Dependabot Go Module Dependency Checker</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes [Dependabot] Update github.com/spf13/cobra from v1.9.1 to v1.10.1 #3436

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[Copilot]

Pull Request Overview

This PR updates the spf13/cobra dependency from v1.9.1 to v1.10.1 and adds a new agentic workflow "Typist - Go Type Analysis" to the documentation status page. The dependency update affects both go.mod and go.sum files with corresponding hash changes.

Reviewed Changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated 1 comment.

File	Description
go.mod	Updates spf13/cobra dependency from v1.9.1 to v1.10.1
go.sum	Updates checksums for spf13/cobra v1.10.1 and spf13/pflag v1.0.9
docs/src/content/docs/status.mdx	Adds new "Typist - Go Type Analysis" workflow entry to status table
docs/src/content/docs/reference/frontmatter-full.md	Contains an unintended change to the deprecated field example

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The field name in the example should be 'timeout-minutes' not 'timeout_minutes'. According to the documentation on line 673, this field is deprecated and should use 'timeout-minutes' instead. However, since this is documenting the deprecated field, it should remain as 'timeout_minutes' to show the old syntax. The change appears to be unintentional - reverting from 'timeout-minutes' to 'timeout_minutes'.

[github-actions]

🔍 Nitpick Review Complete

I've reviewed PR #3445 (Cobra dependency update from v1.9.1 to v1.10.1) and found 1 minor documentation issue.

What I Reviewed

• ✅ go.mod / go.sum: Dependency updates look clean and correct
• ✅ status.mdx: Auto-generated workflow status table update is proper
• ⚠️ frontmatter-full.md: Found one documentation typo

The Nitpick

Documentation inconsistency: In frontmatter-full.md, the example uses timeout_minutes (with underscore) when it should be timeout-minutes (with hyphen) to match GitHub Actions conventions. See inline comment for details.

Positive Highlights

✅ Clean dependency management: The Cobra update is well-structured with proper transitive dependency tracking
✅ Good PR description: Clear explanation of what changed and why, including version highlights
✅ Testing notes included: PR description documents testing approach
✅ Auto-generated files: Workflow status table properly regenerated

This is a solid dependency update PR! The only issue is a minor typo in documentation that should be corrected to avoid confusion.

AI generated by PR Nitpick Reviewer 🔍 for #3445

[github-actions]

Nitpick: Documentation inconsistency - the example shows timeout_minutes: 10 but the field name should be timeout-minutes (with a hyphen) to match GitHub Actions YAML conventions and the description above it.

Why it matters: This documentation example could confuse users since GitHub Actions fields use hyphens, not underscores. The comment above correctly states "Use 'timeout-minutes' instead" but the example contradicts this.

Suggested fix: Change to timeout-minutes: 10

AI generated by PR Nitpick Reviewer 🔍 for #3445