Fix format string errors after golang.org/x/term upgrade to 0.39.0

[Copilot]

The dependency upgrade exposed format string vulnerabilities where error messages were passed directly as format strings to print functions, triggering Go's non-constant format string checker.

Changes

• internal/print/print.go: Changed Debug() to use Sprint() instead of Sprintf() when format string has no variadic arguments
• internal/editor/editor.go: Added "%s" format specifier to 9 error print calls
• internal/cmd/auth/login.go: Added "%s" format specifier to 6 error/info print calls
• internal/cmd/issue/*.go: Added "%s" format specifier to 13 error print calls across create.go, edit.go, and note.go

Example

// Before - vulnerable to format string injection
print.Error(err.Error())

// After - safe with explicit format specifier
print.Error("%s", err.Error())

Security

No vulnerabilities found in golang.org/x/term v0.39.0 via GitHub Advisory Database.

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.