chore(deps): bump github.com/yarlson/pin from 0.9.1 to 0.10.0

[dependabot]

Bumps github.com/yarlson/pin from 0.9.1 to 0.10.0.

Release notes

Sourced from github.com/yarlson/pin's releases.

v0.10.0

Breaking changes

• Minimum supported Go version is now Go 1.19. This enables modern typed atomics used by the race-safe runtime state.
• pin.ForceInteractive is no longer an exported mutable package variable. Use pin.SetForceInteractive(true) / pin.SetForceInteractive(false) to control forced interactive rendering, and pin.ForceInteractive() to read the current value.

Migration example:

// Before
pin.ForceInteractive = true
defer func() { pin.ForceInteractive = false }()
// After
pin.SetForceInteractive(true)
defer pin.SetForceInteractive(false)

Reliability fixes

• Serialized spinner lifecycle state so concurrent Start, Stop, Fail, and returned cancel functions cannot leak goroutines, leave stale stop signals, or stop newer runs.
• Made non-terminal Stop and Fail fully clean up their run without requiring callers to also call the returned cancel function.
• Added serialized writer access and fixed Fail so it respects WithWriter instead of writing terminal control bytes to process stdout.
• Made Message safe to call concurrently with UpdateMessage.
• Made custom spinner frames defensive: nil/empty frame slices keep defaults, and non-empty slices are copied.
• Made WithWriter(nil) a no-op.
• Fixed right-position rendering to use the configured spinner color.

Docs and tests

• Updated README and example prompt docs for Go 1.19, the new force-interactive API, and current Start(context.Context) usage.
• Added race and lifecycle regression tests covering concurrent starts/stops, old cancel functions, non-terminal cleanup, writer routing, and custom frame edge cases.

Commits

• b876089 fix spinner lifecycle reliability
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)