fix: update secretes & os extensions

[alina-d-m]

Pull Request Submission Checklist

• Follows CONTRIBUTING guidelines
• Commit messages
  are release-note ready, emphasizing
  what was changed, not how.
• Includes detailed description of changes
• Contains risk assessment (Low | Medium | High)
• Highlights breaking API changes (if applicable)
• Links to automated tests covering new functionality
• Includes manual testing instructions (if necessary)
• Updates relevant GitBook documentation (PR link: ___)
• Includes product update to be announced in the next stable release notes

What does this PR do?

Updates the secrets & os extensions that use the latest GAF version snyk/go-application-framework#573 which includes the updated test-api-shim client.

Where should the reviewer start?

Related PRs in the extensions:

• chore: bump gaf version [PS-528] cli-extension-os-flows#220
• feat: compute project page link [PS-528] cli-extension-secrets#56

How should this be manually tested?

Build the cli locally and run successful secrets & os tests with snyk secrets test & snyk test --reachability

What's the product update that needs to be communicated to CLI users?

None, secrets test is only released to preview and gated by a FF and the update doesn't influence the behaviour of the os test.

What are the relevant tickets?

https://snyksec.atlassian.net/browse/PS-528

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[CatalinSnyk]

@alina-d-m Sorry for the trouble, but please rebase your GAF branch. We did some changes to the whoami workflow and some of the acceptance tests are failing now as a result. I just pushed a fix for it in GAF main.

[snyk-pr-review-bot]

PR Reviewer Guide 🔍

🧪 PR contains tests

🔒 No security concerns identified

⚡ No major issues detected

📚 Repository Context Analyzed This review considered 4 relevant code sections from 3 files (average relevance: 0.84) scripts/upgrade-snyk-go-dependencies.go (lines 1-135) package.json (lines 1-223) package-lock.json (2 segments, lines 2969-3227)