chore(deps): update module github.com/spf13/cobra to v1.4.0

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
github.com/spf13/cobra	require	minor	v1.2.1 -> v1.4.0

---

Release Notes

spf13/cobra

v1.4.0

Compare Source

Winter 2022 Release ❄️

Another season, another release!

Goodbye viper! 🐍 🚀

The core Cobra library no longer requires Viper and all of its indirect dependencies. This means that Cobra's dependency tree has been drastically thinned! The Viper dependency was included because of the cobra CLI generation tool. This tool has migrated to spf13/cobra-cli.

It's pretty unlikely you were importing and using the bootstrapping CLI tool as part of your application (after all, it's just a tool to get going with core cobra).

But if you were, replace occurrences of

"github.com/spf13/cobra/cobra"

with

"github.com/spf13/cobra-cli"

And in your go.mod, you'll want to also include this dependency:

github.com/spf13/cobra-cli v1.3.0

Again, the maintainers do not anticipate this being a breaking change to users of the core cobra library, so minimal work should be required for users to integrate with this new release. Moreover, this means the dependency tree for your application using Cobra should no longer require dependencies that were inherited from Viper. Huzzah! 🥳

If you'd like to read more

• issue: https://github.com/spf13/cobra/issues/1597
• PR: https://github.com/spf13/cobra/pull/1604

Documentation 📝

• Update Go Doc link and badge in README: https://github.com/spf13/cobra/pull/1593
• Fix to install command, now targets @latest: https://github.com/spf13/cobra/pull/1576
• Added MAINTAINERS file: https://github.com/spf13/cobra/pull/1545

Other 💭

• Bumped license year to 2022 in golden files: https://github.com/spf13/cobra/pull/1575
• Added Pixie to projects: https://github.com/spf13/cobra/pull/1581
• Updated labeler for new labeling scheme: https://github.com/spf13/cobra/pull/1613 & syntax fix: https://github.com/spf13/cobra/pull/1624

Shoutout to our awesome contributors helping to make this cobra release possible!!
@​spf13 @​marckhouzam @​johnSchnake @​jpmcb @​liggitt @​umarcor @​hiljusti @​marians @​shyim @​htroisi

v1.3.0

Compare Source

v1.3.0 - The Fall 2021 release 🍁

Completion fixes & enhancements 💇🏼

In v1.2.0, we introduced a new model for completions. Thanks to everyone for trying it, giving feedback, and providing numerous fixes! Continue to work with the new model as the old one (as noted in code comments) will be deprecated in a coming release.

• DisableFlagParsing now triggers custom completions for flag names #​1161
• Fixed unbound variables in bash completions causing edge case errors #​1321
• help completion formatting improvements & fixes #​1444
• All completions now follow the help example: short desc are now capitalized and removes extra spacing from long description #​1455
• Typo fixes in bash & zsh completions #​1459
• Fixed mixed tab/spaces indentation in completion scripts. Now just 4 spaces #​1473
• Support for different bash completion options. Bash completions v2 supports descriptions and requires descriptions to be removed for menu-complete, menu-complete-backward and insert-completions. These descriptions are now purposefully removed in support of this model. #​1509
• Fix for invalid shell completions when using ~/.cobra.yaml. Log message Using config file: ~/.cobra.yaml now printed to stderr #​1510
• Removes unnecessary trailing spaces from completion command descriptions #​1520
• Option to hide default completion command #​1541
• Remove __complete command for programs without subcommands #​1563

Generator changes ⚙️

Thanks to @​spf13 for providing a number of changes to the Cobra generator tool, streamlining it for new users!

• The Cobra generator now won't automatically include Viper and cleans up a number of unused imports when not using Viper.
• The Cobra generator's default license is now none
• The Cobra generator now works with Go modules
• Documentation to reflect these changes

New Features ⭐

• License can be specified by their SPDX identifiers #​1159
• MatchAll allows combining several PositionalArgs to work in concert. This now allows for enabling composing PositionalArgs #​896

Bug Fixes 🐛

• Fixed multiple error message from cobra init boilerplates #​1463 #​1552 #​1557

Testing 👀

• Now testing golang 1.16.x and 1.17.x in CI #​1425
• Fix for running diff test to ignore CR for windows #​949
• Added helper functions and reduced code reproduction in args_test #​1426
• Now using official golangci-lint github action #​1477

Security 🔏

• Added GitHub dependabot #​1427
• Now using Viper v1.10.0
  • There is a known CVE in an indirect dependency from viper: https://github.com/spf13/cobra/issues/1538. This will be patched in a future release

Documentation 📝

• Multiple projects added to the projects_using_cobra.md file: #​1377 #​1501 #​1454
• Removed ToC from main readme file as it is now automagically displayed by GitHub #​1429
• Documentation correct for when the --author flag is specified #​1009
• shell_completions.md has an easier to use snippet for copying and pasting shell completions #​1372

Other 💭

• Bump version of cpuguy83/go-md2man to v2.0.1 #​1460
• Removed lesser typo from the GPL-2.0 license #​880
• Fixed spelling errors #​1514

Thank you to all our amazing contributors ⭐🐍🚀

---

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.