Bump github.com/spf13/cobra from 1.2.1 to 1.3.0

[dependabot[bot]]

Bumps github.com/spf13/cobra from 1.2.1 to 1.3.0.

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.3.0 - The Fall 2021 release 🍁

Completion fixes & enhancements 💇🏼

In v1.2.0, we introduced a new model for completions. Thanks to everyone for trying it, giving feedback, and providing numerous fixes! Continue to work with the new model as the old one (as noted in code comments) will be deprecated in a coming release.

• DisableFlagParsing now triggers custom completions for flag names #1161
• Fixed unbound variables in bash completions causing edge case errors #1321
• help completion formatting improvements & fixes #1444
• All completions now follow the help example: short desc are now capitalized and removes extra spacing from long description #1455
• Typo fixes in bash & zsh completions #1459
• Fixed mixed tab/spaces indentation in completion scripts. Now just 4 spaces #1473
• Support for different bash completion options. Bash completions v2 supports descriptions and requires descriptions to be removed for menu-complete, menu-complete-backward and insert-completions. These descriptions are now purposefully removed in support of this model. #1509
• Fix for invalid shell completions when using ~/.cobra.yaml. Log message Using config file: ~/.cobra.yaml now printed to stderr #1510
• Removes unnecessary trailing spaces from completion command descriptions #1520
• Option to hid default completion command #1541
• Remove __complete command for programs without subcommands #1563

Generator changes ⚙️

Thanks to @​spf13 for providing a number of changes to the Cobra generator tool, streamlining it for new users!

• The Cobra generator now won't automatically include Viper and cleans up a number of unused imports when not using Viper.
• The Cobra generator's default license is now none
• The Cobra generator now works with Go modules
• Documentation to reflect these changes

New Features ⭐

• License can be specified by their SPDX identifiers #1159
• MatchAll allows combining several PositionalArgs to work in concert. This now allows for enabling composing PositionalArgs #896

Bug Fixes 🐛

• Fixed multiple error message from cobra init boilerplates #1463 #1552 #1557

Testing 👀

• Now testing golang 1.16.x and 1.17.x in CI #1425
• Fix for running diff test to ignore CR for windows #949
• Added helper functions and reduced code reproduction in args_test #1426
• Now using official golangci-lint github action #1477

Security 🔏

• Added GitHub dependabot #1427
• Now using Viper v1.10.0
  • There is a known CVE in an indirect dependency from viper: spf13/cobra#1538. This will be patched in a future release

Documentation 📝

• Multiple projects added to the projects_using_cobra.md file: #1377 #1501 #1454
• Removed ToC from main readme file as it is now automagically displayed by GitHub #1429
• Documentation correct for when the --author flag is specified #1009
• shell_completions.md has an easier to use snippet for copying and pasting shell completions #1372

... (truncated)

Commits

• 178edbb Bump github.com/spf13/viper from 1.9.0 to 1.10.0 (#1561)
• 9054739 Remove __complete cmd for program without subcmds (#1563)
• 19c9c74 Always include the os package import when generating the root command (#1557)
• 01e05b8 Bump github.com/spf13/viper from 1.8.1 to 1.9.0 (#1554)
• 36bff0a fix root.go.golden (#1552)
• 1854bb5 Fix some typos (mostly found by codespell) (#1514)
• ff2c55e chore(ci): use golangci-lint-action (#1477)
• 1beb476 fix: Duplicate error message from cobra init boilerplates (#1463)
• 6f84ef4 Provide option to hide default 'completion' cmd (#1541)
• ee75a2b Remove trailing spaces from bash completion command description (#1520)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sarahcpage]

Bumping dependency manually - closing.

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.