Update Bomly SDK to v0.13.0

[bomly-guy]

Summary

• Update github.com/bomly-dev/bomly-cli to v0.13.0 from the public module.
• Remove the local SDK replacement.
• Adapt package fixtures and typed ecosystem handling for the embedded sdk.Coordinates model.

Validation

• go mod tidy
• make test
• make build
• git diff --check

Summary by CodeRabbit

• Chores
  • Upgraded bomly-cli dependency to v0.13.0 (previously v0.0.0)
  • Updated Go toolchain version to 1.26.3
  • Updated transitive dependencies including golang.org/x/sys (v0.45.0 → v0.46.0)
  • Updated test structure to match implementation changes

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: d59fa93d-04f4-4596-9c86-557d57415536

📥 Commits

Reviewing files that changed from the base of the PR and between 3b2d2d5 and a72f92d.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (3)

• go.mod
• main.go
• main_test.go

---

📝 Walkthrough

Walkthrough

This PR upgrades the bomly-cli dependency to v0.13.0 and adapts the plugin to work with the new SDK structure. The ecosystem field normalization now explicitly casts the typed ecosystem value to string, and package construction uses the new nested Coordinates struct with typed field support.

Changes

Bomly CLI SDK Update

Layer / File(s)	Summary
Dependency upgrade to bomly-cli v0.13.0 go.mod	bomly-cli is upgraded from v0.0.0 to v0.13.0, and golang.org/x/sys indirect dependency is bumped to v0.46.0.
Ecosystem normalization and Coordinates struct integration main.go, main_test.go	resolveProduct casts pkg.Ecosystem to string before trimming and lowercasing for candidate matching. Test setup migrates to the new Coordinates nested struct for constructing sdk.Package with typed fields.

Sequence Diagram

sequenceDiagram
  participant resolveProduct as resolveProduct<br/>(main.go)
  participant pkg as pkg.Ecosystem<br/>(typed field)
  participant normalized as Normalized<br/>string value
  participant switcher as Candidate<br/>matcher
  resolveProduct->>pkg: access Ecosystem field
  pkg->>normalized: cast to string, trim, lowercase
  normalized->>switcher: match against known ecosystems

Loading

🎯 2 (Simple) | ⏱️ ~10 minutes

🐰 A version bump comes hopping by,

With Coordinates nested up high,

Ecosystems now typed with care,

The SDK adapts everywhere! 🌟

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/update-sdk-v0.13.0

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}