diff --git a/flake.nix b/flake.nix
index 895afce..ab84e53 100644
--- a/flake.nix
+++ b/flake.nix
@@ -38,7 +38,7 @@
         # directory's tests. docs/demo holds the demo's fake meshStack, which is no part of the CLI.
         excludedPackages = [ "docs/demo" ];
 
-        vendorHash = "sha256-BWGrfEfxYXvXbwiKBWGuvOkuNn+dSxvPGKKAQtw89JM=";
+        vendorHash = "sha256-SJmfKhELO8eEyiHag5AyqpyzQvArAig2Osy7kV0RC5w=";
 
         # .goreleaser.yml and the Dockerfile set the same ldflag, and all three have to
         # agree. The linker ignores an -X whose path does not resolve and warns about
diff --git a/go.mod b/go.mod
index 383fa11..0a23206 100644
--- a/go.mod
+++ b/go.mod
@@ -27,7 +27,7 @@ require (
 	github.com/charmbracelet/x/term v0.2.2
 	github.com/gofrs/flock v0.13.1
 	github.com/spf13/cobra v1.10.2
-	github.com/spf13/pflag v1.0.10
+	github.com/spf13/pflag v1.1.0
 	github.com/stretchr/testify v1.12.1
 )
 
diff --git a/go.sum b/go.sum
index 06a37c6..202c84e 100644
--- a/go.sum
+++ b/go.sum
@@ -618,8 +618,8 @@ github.com/spf13/jwalterweatherman v1.1.0 h1:ue6voC5bR5F8YxI5S67j9i582FU4Qvo2bmq
 github.com/spf13/jwalterweatherman v1.1.0/go.mod h1:aNWZUN0dPAAO/Ljvb5BEdw96iTZ0EXowPYD95IqWIGo=
 github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/spf13/pflag v1.0.9/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
-github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=
-github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
+github.com/spf13/pflag v1.1.0 h1:6W6MbVUrnMb8PEhjkqwsVLY7ryuzRfFHF4mQd7L94ag=
+github.com/spf13/pflag v1.1.0/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/spf13/viper v1.12.0 h1:CZ7eSOd3kZoaYDLbXnmzgQI5RlciuXBMA+18HwHRfZQ=
 github.com/spf13/viper v1.12.0/go.mod h1:b6COn30jlNxbm/V2IqWiNWkJ+vZNiMNksliPCiuKtSI=
 github.com/ssgreg/nlreturn/v2 v2.2.1 h1:X4XDI7jstt3ySqGU86YGAURbxw3oTDPK9sPEi6YEwQ0=