Cobra no longer depends on Viper as of https://github.com/spf13/cobra/releases/tag/v1.4.0. That means that the imports are far less and the cli binaries are ever so slightly smaller. There are also a bunch of other nice changes between 1.1.1 and 1.4.0. This PR updates the dependency so we can avoid pulling in unnecessary stuff as part of the go.sum file.
Cobra no longer depends on Viper as of https://github.com/spf13/cobra/releases/tag/v1.4.0. That means that the imports are far less and the cli binaries are ever so slightly smaller. There are also a bunch of other nice changes between 1.1.1 and 1.4.0. This PR updates the dependency so we can avoid pulling in unnecessary stuff as part of the
go.sum
file.It also updates golang.org/x/crypto to silence security warning that doesn't impact us. Pkg.go.dev has started showing a link to https://deps.dev/go/github.com%2Fpsanford%2Fwormhole-william/v1.0.6, (https://deps.dev/go/github.com%2Fpsanford%2Fwormhole-william/v1.0.7-0.20220524221715-83b835953150 is the state on current master) which incorrectly shows a security warning that doesn't impact us. That doesn't look good, so let's just bump the package to avoid the warning.
I also bumped the minimum Go version in![image](https://user-images.githubusercontent.com/25466657/171809264-60ca9ddc-5d78-4d2c-a818-a7c0a2a8e667.png)
go.mod
because Visual Studio Code was complaining that unsigned shifts require Go 1.13 or later.