chore: bump gaf for postInvokeHooks

[basti-snyk]

Pull Request Submission Checklist

• Follows CONTRIBUTING guidelines
• Commit messages
  are release-note ready, emphasizing
  what was changed, not how.
• Includes detailed description of changes
• Contains risk assessment (Low | Medium | High)
• Highlights breaking API changes (if applicable)
• Links to automated tests covering new functionality
• Includes manual testing instructions (if necessary)
• Updates relevant GitBook documentation (PR link: ___)
• Includes product update to be announced in the next stable release notes

What does this PR do?

Where should the reviewer start?

How should this be manually tested?

What's the product update that needs to be communicated to CLI users?

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[CatalinSnyk]

issue: I think the changes under the test directory are not expected for this PR.

updated

[CatalinSnyk]

Please squash & rebase the commits 😄

[snyk-pr-review-bot]

PR Reviewer Guide 🔍

🧪 No relevant tests

🔒 No security concerns identified

⚡ Recommended focus areas for review Missing Risk Assessment 🟡 [minor] The PR bumps the core 'go-application-framework' to 'v0.16.0' but leaves the mandatory risk assessment and change description sections in the PR template empty. According to the Architecture section in 'CLAUDE.md', GAF is the backbone for configuration, networking, and workflow execution. Introducing 'postInvokeHooks' without documenting their integration or impact on the CLI's existing analytics and teardown logic (managed in 'cliv2/') creates an operational blind spot regarding deployment safety. github.com/snyk/go-application-framework v0.16.0

📚 Repository Context Analyzed This review considered 5 relevant code sections from 3 files (average relevance: 0.94) scripts/upgrade-snyk-go-dependencies.go (lines 1-149) CLAUDE.md (2 segments, lines 229-315) package-lock.json (2 segments, lines 19745-19957)

🤖 Repository instructions applied (from AGENTS.md)