deps: bump the go-dependencies group across 1 directory with 2 updates

[dependabot]

Bumps the go-dependencies group with 2 updates in the / directory: github.com/basecamp/cli and github.com/yuin/goldmark.

Updates github.com/basecamp/cli from 0.1.1 to 0.2.1

Commits

• 77e1eb6 Initialize Cobra lazy flags (help, version) before walking
• f601610 Add ARG entries and alias paths to surface walker
• f6b4563 deps: bump github.com/zalando/go-keyring in the go-dependencies group (#19)
• a5b14ed ci: harden GitHub Actions workflows (#18)
• a1765c6 Switch CODEOWNERS from sip to cli team (#16)
• 111a50e ci: bump the github-actions group with 4 updates (#13)
• eb050dc Add direct-push alerting and sensitive-change gate callers (#12)
• 828cca2 Security hardening Phase 3: env gate, scorecard, seed templates (#11)
• 42ee1b0 Privilege-separate AI labeler workflows (#10)
• a936893 Harden workflows against script injection (#9)
• Additional commits viewable in compare view

Updates github.com/yuin/goldmark from 1.7.16 to 1.8.2

Release notes

Sourced from github.com/yuin/goldmark's releases.

v1.8.2

fix: setext headings positions

v1.8.1

fix: block positions

v1.8.0

• feat: add position information to all nodes
  • add position information to all nodes, including inline nodes and link reference definition nodes.
  • Now link reference definition nodes are represented as a new node type.
  • Link and image nodes have a new field Reference which is a pointer to the reference link if this link is a reference link. This field is nil for non-reference links.

v1.7.17 release

Full Changelog: yuin/goldmark@v1.7.16...v1.7.17

Commits

• 379bf24 fix: setext headings positions
• e8f2337 fix: block positions
• dfa1ae1 feat: add position information to all nodes
• cb46bbc fix: prevent XSS by escaping dangerous URLs in links and images
• d8b123c refactor: simplify codes
• db34c99 Merge pull request #535 from Sebbito/master
• 5a2a2bf Merge pull request #545 from maxatome/fix-table-panic
• 9aca462 fix(table): if table cell attribute is a string, a panic occurs
• ea86b36 Fix doc error in markdown.go
• See full diff in compare view

[cubic-dev-ai]

No issues found across 2 files

[robzolkos]

@dependabot rebase

[dependabot]

Looks like this PR is already up-to-date with master! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[robzolkos]

@dependabot rebase

[Copilot]

Pull request overview

This PR updates two Go dependencies for the fizzy-cli project:

• github.com/basecamp/cli from 0.1.1 to 0.2.1
• github.com/yuin/goldmark from 1.7.16 to 1.8.2

The basecamp/cli update adds support for command aliases and ARG entries in its surface walker, which results in many new CLI command aliases being exposed (like ls for list, rm for delete, view for show). The SURFACE.txt snapshot file is regenerated to reflect these new entries. Test files are updated to ensure CLI UX configuration is applied before taking command tree snapshots.

Changes:

• Update basecamp/cli dependency to v0.2.1, which adds command aliases and ARG surface entries
• Update goldmark to v1.8.2 with fixes for block/setext heading positions
• Regenerate SURFACE.txt snapshot with new command aliases and ARG entries
• Add configureCLIUX() calls to test files to ensure proper CLI initialization before snapshots

Reviewed changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
SURFACE.txt	Regenerated snapshot with new command aliases (ls, rm, view) and ARG entries from basecamp/cli v0.2.1
go.mod	Bumps basecamp/cli to v0.2.1 and goldmark to v1.8.2
go.sum	Updates dependency checksums for the two major version changes and transitive dependencies
internal/commands/surface_test.go	Adds configureCLIUX() call before snapshot to ensure CLI UX is configured, improves comments
internal/commands/gen_surface_test.go	Adds configureCLIUX() call to snapshot generation test

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.