zsh: sort the commands to keep a determinist output

[bmwiedemann]

Make the rclone package build reproducible

no

For background information see https://github.com/bmwiedemann/theunreproduciblepackage/tree/master/hash and https://reproducible-builds.org/

• I have read the contribution guidelines.
• I have added tests for all changes in this PR if appropriate.
• I have added documentation for the changes if appropriate.
• All commit messages are in house style.
• I'm done, this Pull Request is ready for review :-)

Based on spf13/cobra#801

Tested By: Bernhard M. Wiedemann

The alternative fix would be to update spf13/cobra - there this codepath has been rewritten.

[ncw]

I can't take patches to the vendor directory it will upset go modules no end :-(

Can you follow the procedure here please to pull the update from upstream: https://github.com/ncw/rclone/blob/master/CONTRIBUTING.md#updating-a-dependency

That will keep go modules happy.

If the cobra release isn't tagged yet then you'll need to add @master on the end, though I'd prefer a tagged version if possible.

Can you check in the changes plus the changes to go.mod and go.sums in in a single commit vendor: updated spf13/cobra to ...

Thanks

[bmwiedemann]

Already solved by commit d61ba7e