chore: bump GAF for TOON scanner summaries

[robertolopezlopez]

Pull Request Submission Checklist

• Follows CONTRIBUTING guidelines
• Commit messages are release-note ready
• Includes detailed description of changes
• Contains risk assessment (Low | Medium | High)
• Highlights breaking API changes (if applicable)
• Links to automated tests covering new functionality
• Includes manual testing instructions (if necessary)
• Updates relevant GitBook documentation (PR link: ___)
• Includes product update to be announced in the next stable release notes

What does this PR do?

• Pins github.com/snyk/go-application-framework to the latest feat/CLI-1860 pseudo-version in cliv2 and cliv2-private.

Depends on snyk/go-application-framework#767 and #7267

Where should the reviewer start?

cliv2/go.mod and cliv2-private/go.mod — dependency-only change.

How should this be manually tested?

After building the CLI against this branch, run a scan with --toon (and optionally --toon-file) and confirm output includes scanner summaries and context fields per the updated GAF TOON schema.

What's the product update that needs to be communicated to CLI users?

None in this PR (dependency bump only). TOON output shape changes ship via GAF; user-facing notes belong with the GAF release and any follow-up CLI wiring.

Risk assessment

Low — go.mod / go.sum only. TOON-related pkg/core tests pass locally.

What are the relevant tickets?

CLI-1860

Test plan

• go test ./cliv2/pkg/core/... -run TOON
• CI green on this PR

Made with Cursor

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[snyk-pr-review-bot]

PR Reviewer Guide 🔍

🧪 PR contains tests

🔒 No security concerns identified

⚡ No major issues detected

📚 Repository Context Analyzed This review considered 5 relevant code sections from 4 files (average relevance: 0.98) scripts/upgrade-snyk-go-dependencies.go (lines 1-149) package.json (lines 1-238) CLAUDE.md (2 segments, lines 1-65) package-lock.json (lines 19745-19957)

🤖 Repository instructions applied (from AGENTS.md)

[github-actions]

	Fails
🚫	"func: TOON scanner summaries" is not using a valid commit message format. For commit guidelines, see: CONTRIBUTING.

Generated by 🚫 dangerJS against 459e2a2

[octavian-snyk]

Good to go once GAF #767 is merged and the version is updated. There's no other changes this PR introduced.

[robertolopezlopez]

Superseded: GAF pin bump folded into #7274, which now targets chore/CLI-1859-gaf-toon directly.