From b529bcc67480165d89943507e1d4f1eefd5ebc0f Mon Sep 17 00:00:00 2001
From: LeadGoEngineer <leadgoengineer@quantcli.local>
Date: Sun, 10 May 2026 18:40:23 -0400
Subject: [PATCH] chore: bump go directive to 1.25.10 + tidy (clears stdlib
 vulns)

Updates the go directive from 1.21.3 (long-EOL) to 1.25.10 (latest 1.25.x
patch) and runs `go mod tidy`, which promotes cobra from an // indirect
marker to a direct requirement (it is imported by ./cmd/*.go).

govulncheck ./... reports 0 callable vulnerabilities after the bump.

Refs QUA-13.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
---
 go.mod | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/go.mod b/go.mod
index 1aac6be..7eec5e9 100644
--- a/go.mod
+++ b/go.mod
@@ -1,9 +1,10 @@
 module github.com/quantcli/liftoff-export-cli
 
-go 1.21.3
+go 1.25.10
+
+require github.com/spf13/cobra v1.10.2
 
 require (
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
-	github.com/spf13/cobra v1.10.2 // indirect
 	github.com/spf13/pflag v1.0.9 // indirect
 )