build(deps): consolidate open Dependabot dependency updates

[Copilot]

Consolidates 10 open Dependabot PRs (#1312, #1314, #1316, #1317, #1318, #1322, #1323, #1328, #1330, #1331) into a single update. PR titles from Dependabot did not match actual diff content; versions below reflect the actual PR diffs.

Go dependencies

• github.com/spf13/cobra: v1.9.1 → v1.10.2 (go.mod, test/e2e/plugin/go.mod)
• github.com/spf13/pflag: v1.0.7 → v1.0.10 (go.mod)
• golang.org/x/term: v0.37.0 → v0.40.0 (go.mod)
• github.com/onsi/ginkgo/v2: v2.25.2 → v2.28.1 (test/e2e/go.mod)
• github.com/onsi/gomega: v1.38.2 → v1.39.0 (test/e2e/go.mod)

GitHub Actions

• actions/setup-go: v5.5.0 → v6.2.0 (build, codeql, release-github)
• actions/cache: v4.2.4 → v5.0.3
• codecov/codecov-action: v5.5.0 → v5.5.2
• github/codeql-action: v3.29.11 → v4.32.3 (codeql, scorecard)
• actions/stale: v9.1.0 → v10.2.0

All actions remain pinned by commit SHA. No advisory vulnerabilities found in any updated dependency.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Consolidate open Dependabot dependency updates</issue_title>
<issue_description>## Summary

There are currently 10 open Dependabot PRs that should be reviewed and merged to keep dependencies up to date.

Open Dependabot PRs

Go Dependencies

• build(deps): Bump github.com/onsi/ginkgo/v2 from 2.25.2 to 2.27.1 in /test/e2e #1331 - Bump github.com/onsi/ginkgo/v2 from 2.25.2 to 2.27.1 in /test/e2e
• build(deps): Bump golang.org/x/term from 0.34.0 to 0.36.0 #1328 - Bump golang.org/x/term from 0.34.0 to 0.36.0
• build(deps): Bump github.com/spf13/pflag from 1.0.7 to 1.0.10 #1318 - Bump github.com/spf13/pflag from 1.0.7 to 1.0.10
• build(deps): Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 in /test/e2e/plugin #1317 - Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 in /test/e2e/plugin
• build(deps): Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 #1316 - Bump github.com/spf13/cobra from 1.9.1 to 1.10.1

GitHub Actions

• build(deps): Bump github/codeql-action from 3.29.11 to 4.31.0 #1330 - Bump github/codeql-action from 3.29.11 to 4.31.0
• build(deps): Bump actions/stale from 9.1.0 to 10.1.0 #1323 - Bump actions/stale from 9.1.0 to 10.1.0
• build(deps): Bump actions/cache from 4.2.4 to 4.3.0 #1322 - Bump actions/cache from 4.2.4 to 4.3.0
• build(deps): Bump actions/setup-go from 5.5.0 to 6.0.0 #1314 - Bump actions/setup-go from 5.5.0 to 6.0.0
• build(deps): Bump codecov/codecov-action from 5.5.0 to 5.5.1 #1312 - Bump codecov/codecov-action from 5.5.0 to 5.5.1

Suggested Approach

1. Review each PR for breaking changes
2. Merge non-breaking updates first (patch/minor bumps)
3. Test and merge major version bumps individually</issue_description>

<agent_instructions>The dependabot PRs may have incorrect PR title against the content. Use the PR content as the source of truth.</agent_instructions>

Comments on the Issue (you are @copilot in this section)

@shizhMSFT Note that the title of those dependabot PR does not match the content. Require a human dev to resolve this issue.

• Fixes Consolidate open Dependabot dependency updates #1339

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 79.22%. Comparing base (2a55855) to head (2152ffa).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1341   +/-   ##
=======================================
  Coverage   79.22%   79.22%           
=======================================
  Files          68       68           
  Lines        3066     3066           
=======================================
  Hits         2429     2429           
  Misses        433      433           
  Partials      204      204           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[shizhMSFT]

LGTM

[shizhMSFT]

Commits must have verified signatures.

Copilot does not sign the commits 😢