chore(deps): update flanksource go dependencies

[flanksource-ci-runner]

This PR contains the following updates:

Package	Type	Update	Change
github.com/flanksource/clicky	require	patch	v1.21.1 → v1.21.45
github.com/flanksource/commons	require	minor	v1.47.2 → v1.53.1
github.com/flanksource/gomplate/v3	indirect	patch	v3.24.81 → v3.24.84
github.com/flanksource/gomplate/v3	indirect	patch	v3.24.74 → v3.24.84
github.com/flanksource/is-healthy	indirect	patch	v1.0.87 → v1.0.88
github.com/flanksource/is-healthy	indirect	patch	v1.0.86 → v1.0.88

---

Release Notes

flanksource/clicky (github.com/flanksource/clicky)

v1.21.45

Compare Source

✨ Features

• mcp: Cobra commands for MCP server (#​149) (785d4ab)

🔧 Maintenance

• release: pin sub-modules to v1.21.44 [skip ci] (b2caeee)

v1.21.44

Compare Source

✨ Features

• mcp: Cobra commands for MCP server (#​149) (785d4ab)

🔧 Maintenance

• release: pin sub-modules to v1.21.44 [skip ci] (b2caeee)

v1.21.43

Compare Source

🔧 Maintenance

• deps: update flanksource go dependencies (9c5e524)
• release: pin sub-modules to v1.21.43 [skip ci] (e04e741)

v1.21.42

Compare Source

🔧 Maintenance

• deps: update flanksource go dependencies (ed8e864)
• release: pin sub-modules to v1.21.42 [skip ci] (c159a32)

v1.21.41

Compare Source

🐛 Bug Fixes

• genkit upgrade (6723926)

🔧 Maintenance

• deps: update flanksource go dependencies (2da5fd4)
• release: pin sub-modules to v1.21.41 [skip ci] (f597a7c)

v1.21.40

Compare Source

🔧 Maintenance

• go mod tidy on examples/entity (8429206)
• release: pin sub-modules to v1.21.40 [skip ci] (e98d7ab)

v1.21.39

Compare Source

🐛 Bug Fixes

• ci: add least-privilege permissions to the openapi workflow job (#​148) (a683b5d)

🔧 Maintenance

• release: pin sub-modules to v1.21.39 [skip ci] (51970a4)

v1.21.38

Compare Source

🐛 Bug Fixes

• deps: update Excelize to v2.11.0 (bf03705)

🔧 Maintenance

• deps: tidy Go modules (9021341)
• release: pin sub-modules to v1.21.38 [skip ci] (456c327)

v1.21.37

Compare Source

⚠ BREAKING CHANGES

• api: Paged clicky-json responses no longer wrap rows in the data/page envelope.

♻️ Code Refactoring

• aichat: centralize model and tool metadata (333eb42)

✨ Features

• add oxlint custom rules linting for clicky-ui webapp (b4ffa0f)
• add support for hidden flags in CLI and schema generation (d0923c6)
• preserve schema field order in markdown formatter output (a2df8bd)
• update model catalog to latest provider tiers (d91b616)
• aichat: Add default permission and tool metadata support with canonical mode names (fc0f74b)
• api: Add streaming table exports and export metadata (2a89421)
• api: support semantic columns and structured table values (42cff19)
• entity: add MCPToolHints for tool metadata and annotations (12df84f)
• mcp: add MCP tool annotations and clicky meta support (6645797)
• rpc: expose swagger command executor (0ffa6cf)

🐛 Bug Fixes

• Replace fmt.Printf with clicky logger and fix timing middleware edge case (06f4cf6)
• rpc: Fix route deduplication for wildcard parameter name differences (6f21fad)
• task: fix data races and render lifecycle for task output (d6b1715)
• task: release runFunc when a task reaches a terminal state (7b82d96)

📚 Documentation

• docs: delegate agent workflow guidance to shared instructions (a598fbe)
• skills: add clicky development guides (f8e7087)

📦 Build System

• aichat: pin captain to f441c76 for unreleased agent API (a8c61ab)

🔧 Maintenance

• add UI and linting dependencies to webapp (8ce55f7)
• update Go module dependencies to latest versions (e910a25)
• release: pin sub-modules to v1.21.37 [skip ci] (d5f340c)

v1.21.36

Compare Source

📦 Build System

• deps: bump the go_modules group across 4 directories with 1 update (780f381)

🔧 Maintenance

• release: pin sub-modules to v1.21.36 [skip ci] (0101296)

v1.21.35

Compare Source

✅ Tests

• skip PDF formatter integration test (3f66763)

🐛 Bug Fixes

• deps: patch security vulnerabilities (9535cca)

🔧 Maintenance

• release: pin sub-modules to v1.21.35 [skip ci] (9bd97b7)

v1.21.34

Compare Source

🔧 Maintenance

• remove dependabot configuration (622e2e9)
• release: pin sub-modules to v1.21.34 [skip ci] (aa49584)

v1.21.33

Compare Source

♻️ Code Refactoring

• Refactor cache and store layer with abstract cache.Store interface (b766cd3)
• aichat: depend on captain pkg/api runtime contract over pkg/ai (21ce9d1)

✨ Features

• agent: add captain agent-framework engine for claude-agent and codex models (10d1a6e)

🐛 Bug Fixes

• Fix and improve markdown parsing and entity metadata handling (fd070b0)

📦 Build System

• aichat: require captain v0.0.9 for the pkg/api runtime contract (25a484b)
• examples: bump indirect captain to v0.0.9 (05d1a4e)

🔧 Maintenance

• release: pin sub-modules to v1.21.33 [skip ci] (250ebf9)

v1.21.32

Compare Source

⚠ BREAKING CHANGES

• prompt: PromptSelect, PromptMultiSelect, and PromptText now delegate to context-aware internal functions; behavior is unchanged for callers without a Scope.

✨ Features

• exec: add bidirectional stdio pipes for long-lived processes (e93b8ca)
• prompt: add context-aware prompt routing and interactive sink support (07e5ab6)

🐛 Bug Fixes

• ci,prompt,exec: tidy go.mod and address review findings (c1a9660)
• ci: tidy example submodule go.mod files (fa5980c)

🔧 Maintenance

• release: pin sub-modules to v1.21.32 [skip ci] (216e838)

v1.21.31

Compare Source

👷 CI/CD

• release: rename goreleaser folder field to directory (29bb8d6)

v1.21.30

Compare Source

🐛 Bug Fixes

• aichat: pin clicky require to v1.21.29 so go get works (95378c7)

v1.21.29

Compare Source

🐛 Bug Fixes

• aichat: pin clicky require to v1.21.29 so go get works (95378c7)

v1.21.28

Compare Source

🐛 Bug Fixes

• aichat: preserve dynamic tool names across chat turns (156744d)

v1.21.27

Compare Source

✨ Features

• aichat: add runtime model registry (58410db)

v1.21.26

Compare Source

✨ Features

• formatters: add Objects/ExecutionRoots payload fields to ClickyNode (84f4845)

v1.21.25

Compare Source

✅ Tests

• batch: uncomment TestBatch_ErrorIdentification (1baedde)
• formatters: cover map[string]any input for markdown paths (2dd611a), closes flanksource/clicky#38

🐛 Bug Fixes

• batch: detect item timeout by elapsed time, not context state (391e6f5)
• formatters: handle map input in ToPrettyData (c21fd39)

v1.21.24

Compare Source

✨ Features

• aichat: add newer Anthropic models (56ed4f0)

🐛 Bug Fixes

• aichat: set Anthropic max tokens (d6f4892)

v1.21.23

Compare Source

✨ Features

• exec: add process supervision with resource limits and port detection (e8972b6), closes #​123
• webapp: Wire ChatWidget to operations client for tool parity (b542518)

v1.21.22

Compare Source

🐛 Bug Fixes

• Improve in-memory timeseries store write performance (#​110) (bf79215)

v1.21.21

Compare Source

🔧 Maintenance

• add Apache 2.0 license (1ef624b)

v1.21.20

Compare Source

⚠ BREAKING CHANGES

• api: NewTableFrom now returns a table with headers for empty slices instead of an empty table. TryTypedValue now returns a TypedValue with a header-only table for empty TableProvider slices instead of nil.

✅ Tests

• task: add testdata YAML files for task testing (990f51d)
• task: isolate batch tests from global task manager (ba6a373)

✨ Features

• aichat: Add AI chat backend with tool approval and conversation persistence (ebabb9b)
• aichat: Add token usage tracking and cost calculation for chat turns (3cf6bee)
• api: emit table schema for empty TableProvider slices (b3157fd)

v1.21.19

Compare Source

✨ Features

• sse: add RunsSSEHandler for streaming run listings with deduplication (f4bb6ca)

v1.21.18

Compare Source

✨ Features

• cache: add generic cache-browser API with valkey impl (#​114) (8e20a9a)

v1.21.17

Compare Source

⚠ BREAKING CHANGES

• docs: --output-dir now writes one markdown file per controller directly into the directory instead of scaffolding a provider-based docs site. The --provider and --base-path flags are removed. Generated files no longer include YAML frontmatter.

♻️ Code Refactoring

• docs: simplify docs generation to write flat markdown files instead of scaffolding provider-based sites (ef73ee7)

✨ Features

• docs: add docs generation command with CLI reference and UI catalog (cabe31f)
• task: pluggable LiveRenderer for custom live/final rendering (3be5046)

🐛 Bug Fixes

• api: prevent blank lines in tree labels and large description lists from causing excessive padding (24e9666)

v1.21.16

Compare Source

✨ Features

• api,rpc: Add CollapseANSI flag and multi-operand action path handling (633d28b)

v1.21.15

Compare Source

⚠ BREAKING CHANGES

• entity: runEntityOp now extracts paged results via PageRows() interface method before formatting, changing how paged responses are serialized in RPC responses.

✨ Features

• entity: add pagination support for entity list operations (6903915)
• rpc,entity: add context-aware filter lookup support for request-scoped state (442a560)

🐛 Bug Fixes

• entity,rpc: address PR review comments and lint e2e go.sum failures (28bd967)

📦 Build System

• makefile: add go mod tidy to fmt target for all modules (eb82367)

v1.21.14

Compare Source

⚠ BREAKING CHANGES

• entity,command,rpc: None - all changes are additive with backward compatibility maintained through fallback to non-context variants.
• task: RunFilter.matches() renamed to RunFilter.Matches(); runMetaFromSnapshot() renamed to RunMetaFromSnapshot()
• api,openapi,lint: annotateEntityOperationCommand now requires an additional optionalID boolean parameter.

♻️ Code Refactoring

• timeseries: replace oipa references with generic app prefix (d0cb68e)

✨ Features

• api,openapi,lint: Add optional ID support for entity actions and expand formatting helpers (706ab62)
• entity,command,rpc: add context-aware data functions for request-scoped state (394a69c)
• lint: add render builder validation and helper-backed type detection (dd00e26)
• metrics: add timeseries metrics store with in-memory and valkey backends (786c3a5)
• task: Add OnBeforeGC hook and RunsRaw for GC lifecycle control (4505a9f)
• task: Add task registry with run listing, filtering, and drill-down APIs (3045cfc)

🐛 Bug Fixes

• examples: tag standalone demos with //go:build ignore (11bbd07)
• rpc: serve ExecutionResponse envelope for structured wire formats (f01a56a)
• task: WaitFor returns result after in-closure terminal SetStatus (d058287)

👷 CI/CD

• workflows: consolidate CI/CD workflows into gavel and dist (6c9d5d5)
• workflows: run gavel lint as raw step to avoid --show-passed injection (a58f5c4)
• workflows: split gavel into separate test and lint jobs with node setup (ce3c9c6)

📚 Documentation

• cache: clarify SQLite driver selection rationale in comments (8744c01)

📦 Build System

• cache: Replace go-sqlite3 with modernc.org/sqlite for CGO-free builds (7d4e343)
• webapp: Add placeholder index.html for go:embed resolution in CI (c4eee78)

🔧 Maintenance

• update docs (df28a6c)
• examples: tidy go.mod after tagging demos as build-ignore (5e91e2f)

v1.21.13

Compare Source

♻️ Code Refactoring

• exec: Add thread-safe concurrent access to Process state (235aac0)

🔧 Maintenance

• embed: commit task-ui bundle + build it in release CI (3d3b234)

v1.21.12

Compare Source

✨ Features

• flags: support comma-delimited shorthand in flag tags (e498bb0)

🔧 Maintenance

• bump gomplate and is-healthy for kubernetes v0.36.1 (ac2b3d1)

v1.21.11

Compare Source

✨ Features

• api: add Admonition and Keyed types for structured content rendering (7a04589)
• api: Add PrettyShort interface for compact cell rendering and Link JSON payload support (7702184)
• entity,flags,rpc: Add filter lifting, HTTP request population, and UI parameter roles (0023d43)
• formatters: Add ClickyDocument and ClickyText for direct Textable serialization (db93e8d)

🐛 Bug Fixes

• task: enforce group concurrency at dequeue time instead of task body (006f3b4)

v1.21.10

Compare Source

♻️ Code Refactoring

• api,mcp,rpc: extract helper functions and improve code organization (1f17265)

✨ Features

• api,flags: add unified diff rendering and grouped flag help output (afc89b1)
• api: add stack trace parsing and rendering with source resolution (074bef2)
• entity: add hidden _id column to wrapped entities (e0ba5da)
• entity: add WithOptionalID for actions with flag-supplied targets (85849dc)
• examples: Add syntax highlighting and stack trace rendering support (0ef7feb)
• mcp: Add fluent Builder API and discover-tools MCP tool (2f9a4da)
• mcp: add SSE transport, tools command, and multi-client install support (693f311)
• rpc,cobra: Support rich error rendering and configurable converter paths (98a40f9)

🐛 Bug Fixes

• task: treat StatusWarning as terminal state to freeze endTime (8634866)

📚 Documentation

• readme: simplify and restructure README for clarity and brevity (3ef7aba)

📦 Build System

• makefile: add git commit and build date to binary via ldflags (d9a3536)

🔧 Maintenance

• deps: clean up unused dependencies in go.sum (93dfe02)
• deps: update dependencies to latest versions (63987c5)
• deps: update dependencies to latest versions (4999a86)
• deps: update Go dependencies in examples module (73dd9f9)

v1.21.9

Compare Source

♻️ Code Refactoring

• api,mcp,rpc: extract helper functions and improve code organization (f85ce24)
• api: simplify switch statement in parseJavaFrame (fc8746a)

✨ Features

• api,flags: add unified diff rendering and grouped flag help output (06e98ad)
• api: add stack trace parsing and rendering with source resolution (a76d8ec)
• api: Add structured HTML rendering for stack traces with syntax highlighting (3e6e880)
• entity: add hidden _id column to wrapped entities (43aca2c)
• examples: Add syntax highlighting and stack trace rendering support (cd1558a)
• formatters: add StackTrace rendering support to HTML formatters (6beea3b)
• mcp: Add fluent Builder API and discover-tools MCP tool (9cb5cb9)
• mcp: add SSE transport, tools command, and multi-client install support (9345367)

📦 Build System

• makefile: add git commit and build date to binary via ldflags (04f17df)

🔧 Maintenance

• deps: clean up unused dependencies in go.sum (6b74c36)

v1.21.8

Compare Source

⚠ BREAKING CHANGES

• Entity type signature changed from Entity[T, ListOpts] to Entity[T, ListOpts, R]. Action and BulkAction are now factory functions returning interface types; update action definitions to use Action(), ActionWithFlags(), BulkAction(), BulkFilterAction(), or BulkActionWithFilter().

• chore(gitignore): ignore entity webapp dist directory

Add examples/enitity/webapp/dist/ to gitignore to prevent build artifacts from being tracked in version control.

• feat(entity): Add explicit HTTP method override for entity operations

Add optional Method field to EntityOperation and ActionInfo to allow explicit HTTP method specification for generated RPC/OpenAPI routes. This enables actions to override the default inferred HTTP method (e.g., using GET for a records action instead of the inferred POST).

The Method field is propagated through the command annotation system and checked during HTTP method inference in the RPC converter, allowing fine-grained control over operation semantics.

Includes test coverage for entity actions with explicit GET method using nested entity paths.

• feat(task): Add stderr gating to prevent corruption during interactive render

Introduce IsInteractiveRenderActive() to check if the task renderer owns the TTY, and GatedStderr() writer that silently drops writes when interactive rendering is active. This allows callers that emit to stderr (e.g., loggers, debug prints) to avoid corrupting the renderer's in-place frame without requiring explicit coordination.

The gating is stateless and rechecks ownership per write, enabling writers captured before rendering starts to still gate correctly when the renderer later acquires the TTY.

• feat(api): add stack trace parsing and rendering with source resolution

Introduce comprehensive stack trace support with language-agnostic parsing, styled rendering, and extensible source resolution. Adds StackTrace, StackFrame types and ParseJavaStackTrace parser to api package, with public convenience wrappers in clicky root. Includes support for frame filtering, context lines, and max frame truncation.

Also adds MultiFilter type for comma-separated flag values with include/exclude semantics, and fixes field value assignment to support type conversion in flags package.

Updates cache debug output to use task.GatedStderr() instead of os.Stderr to prevent log lines from breaking interactive renderer frame accounting. Fixes recursive struct handling in OpenAPI schema generation by tracking visited types.

Refs: stack trace rendering, source context, Java exception parsing

• docs(api): replace example package names with generic examples

Update documentation and test examples to use generic package names (com.example.admin) instead of specific internal package names (com.adminserver). This makes the codebase more suitable for public documentation and examples without exposing internal naming conventions.

✨ Features

• add entity response types, task stderr gating, and stack trace support (#​101) (0a2d157)

v1.21.7

Compare Source

✨ Features

• support windows (bffc0d9)

v1.21.6

Compare Source

⚠ BREAKING CHANGES

• formatters: FormatWithOptions now delegates to FormatWithContext internally; custom FormatManager implementations should override FormatWithContext instead.
• api,ui,example: stackWindowOpts now uses From and To time.Time fields instead of UpdatedSince and Window duration fields. Content-Type header for clicky-json format changed from application/clicky+json to application/json+clicky.

Refs: entity demo tests, example app routing, API response handling

• formatters: The Content-Type header for clicky JSON responses is now application/json+clicky instead of application/clicky+json. Clients should update their expectations, though the legacy format is still accepted in Accept headers.

✨ Features

• api,rpc,entity: Add Link types and entity operation annotations for OpenAPI (3bf7d81)
• api,ui,example: add time range filtering and entity detail page navigation (0b78123)
• api: add LabelBadge type for two-part pill badges (8874efb)
• entity-example: add link and linkcommand examples page with deep-linking support (d6d89b6)
• entity: Add filter lookup support for dynamic filter metadata and completions (168e9b2)
• formatters: add format callbacks and link/command support (b19923a)
• formatters: standardize clicky JSON content type to application/json+clicky (a899d50)
• prompt: Add interactive prompt APIs with select, multi-select, and text input (ad6a55d)
• task,examples: Add interactive prompt support and task terminal ownership management (5218f72)
• task,lint,log: add output capture and log serialization for clean task rendering (6dc5e67)
• task: improve task rendering with priority-based ordering and collapsing (aaa5043)

🐛 Bug Fixes

• address PR #​99 test failures and CodeRabbit review (db4f748)

🔧 Maintenance

• examples: remove legacy example files and update dependencies (190395f)

v1.21.5

Compare Source

✨ Features

• exec: add atomic process tree termination with WithProcessGroup and KillTree (0537211)
• formatters,entity,rpc: add clicky-json format and typed flags support for entities (e541744)

🐛 Bug Fixes

• cobra_command: track args field separately from flag lookup to support dual flag+args (bdc4049)

v1.21.4

Compare Source

✨ Features

• mcp: Cobra commands for MCP server (#​149) (785d4ab)

🔧 Maintenance

• release: pin sub-modules to v1.21.44 [skip ci] (b2caeee)

v1.21.3

Compare Source

🐛 Bug Fixes

• ci: add least-privilege permissions to the openapi workflow job (#​148) (a683b5d)

🔧 Maintenance

• release: pin sub-modules to v1.21.39 [skip ci] (51970a4)

v1.21.2

Compare Source

🐛 Bug Fixes

• aichat: pin clicky require to v1.21.29 so go get works (95378c7)

flanksource/commons (github.com/flanksource/commons)

v1.53.1

Compare Source

Bug Fixes

• duration: fix duration string formatting for multi-digit values (340276a)

v1.53.0

Compare Source

Features

• http,logging,har: add configurable request/response body limits and enhanced access logging (74c1d30)
• http: buffer request bodies for retry replay and add configurable trace levels (1999d10)

BREAKING CHANGES

• http,logging,har: NewLogger no longer accepts AccessLog config as a shortcut; use TraceConfig.AccessLog instead. The access log behavior has changed: error-only mode (AccessLogErrorsOnly) now surfaces failures at -v=0 without per-request spam.
• http: traceConfigForLevel is renamed to TraceConfigForLogLevel and has different behavior.

v1.52.0

Compare Source

Features

• http: add RetryStrategy callback and context-driven configuration (ac5f628)

BREAKING CHANGES

• http: Client.traceMW and related internals are now exposed for deduplication logic; existing code using Trace() or TraceToStdout() continues to work but may see different middleware stacking behavior.

Refs: HAR collection, context-driven configuration, improved retry control

v1.51.6

Compare Source

v1.51.5

Compare Source

v1.51.4

Compare Source

v1.51.3

Compare Source

v1.51.2

Compare Source

v1.51.1

Compare Source

v1.51.0

Compare Source

Features

• logger: Add SetOutput and GetOutput for dynamic log redirection (441e674)

v1.50.4

Compare Source

v1.50.3

Compare Source

v1.50.2

Compare Source

v1.50.1

Compare Source

Bug Fixes

• ci: add .exe suffix for Windows hx build (6b5bea6)

v1.50.0

Compare Source

Features

• http: add verbose logging and json-structured output support (52126bc)
• logger: add always mode and improve flag parsing for verbose loggers (c2fdc32)

v1.49.0

Compare Source

Features

• http: enhance http logging with context-aware access logs and formatters (f8ebb09)

v1.48.3

Compare Source

v1.48.2

Compare Source

v1.48.1

Compare Source

v1.48.0

Compare Source

Features

• har: add pretty printing with TableProvider and DetailProvider (e594f55)

v1.47.4

Compare Source

v1.47.3

Compare Source

flanksource/gomplate (github.com/flanksource/gomplate/v3)

v3.24.84

Compare Source

Performance Improvements

• cel: build static CEL env once and Extend per call (#​162) (9eb0380)

v3.24.83

Compare Source

Bug Fixes

• cel: build env options only on cache miss (f45189a)

v3.24.82

Compare Source

flanksource/is-healthy (github.com/flanksource/is-healthy)

v1.0.88

Compare Source

Features

• bump kubernetes to v0.36.1 (5d78356)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[flanksource-ci-runner]

ℹ️ Artifact update notice

File name: cmd/hx/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 36 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25.1 -> 1.26.1
github.com/aws/aws-sdk-go-v2/config	v1.32.9 -> v1.32.16
github.com/aws/aws-sdk-go-v2	v1.41.1 -> v1.41.6
github.com/aws/aws-sdk-go-v2/credentials	v1.19.9 -> v1.19.15
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.18.17 -> v1.18.22
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.4.17 -> v1.4.22
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.7.17 -> v2.7.22
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	v1.13.4 -> v1.13.8
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.13.17 -> v1.13.22
github.com/aws/aws-sdk-go-v2/service/signin	v1.0.5 -> v1.0.10
github.com/aws/aws-sdk-go-v2/service/sso	v1.30.10 -> v1.30.16
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.35.14 -> v1.35.20
github.com/aws/aws-sdk-go-v2/service/sts	v1.41.6 -> v1.42.0
github.com/aws/smithy-go	v1.24.0 -> v1.25.0
github.com/cert-manager/cert-manager	v1.19.4 -> v1.20.0
github.com/goccy/go-json	v0.10.5 -> v0.10.6
github.com/itchyny/gojq	v0.12.18 -> v0.12.19
github.com/itchyny/timefmt-go	v0.1.7 -> v0.1.8
github.com/lufia/plan9stats	v0.0.0-20250317134145-8bc96cf8fc35 -> v0.0.0-20251013123823-9fd1530e3ec3
github.com/ohler55/ojg	v1.28.0 -> v1.28.1
github.com/olekukonko/tablewriter	v1.1.3 -> v1.1.4
github.com/shoenig/go-m1cpu	v0.1.6 -> v0.1.7
github.com/tklauser/go-sysconf	v0.3.15 -> v0.3.16
github.com/tklauser/numcpus	v0.10.0 -> v0.11.0
go.yaml.in/yaml/v2	v2.4.3 -> v2.4.4
golang.org/x/exp	v0.0.0-20260218203240-3dfff04db8fa -> v0.0.0-20260312153236-7ab1446f8b90
golang.org/x/oauth2	v0.34.0 -> v0.36.0
google.golang.org/genproto/googleapis/api	v0.0.0-20260226221140-a57be14db171 -> v0.0.0-20260401024825-9d38bb4040a9
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260226221140-a57be14db171 -> v0.0.0-20260414002931-afd174a4e478
google.golang.org/protobuf	v1.36.11 -> v1.36.12-0.20260120151049-f2248ac996af
k8s.io/api	v0.35.2 -> v0.36.1
k8s.io/apiextensions-apiserver	v0.35.2 -> v0.36.1
k8s.io/apimachinery	v0.35.2 -> v0.36.1
k8s.io/client-go	v0.35.2 -> v0.36.1
k8s.io/klog/v2	v2.130.1 -> v2.140.0
k8s.io/kube-openapi	v0.0.0-20260304202019-5b3e3fdb0acf -> v0.0.0-20260317180543-43fb72c5454a
sigs.k8s.io/gateway-api	v1.5.0 -> v1.5.1

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 38 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25.1 -> 1.26.1
github.com/aws/aws-sdk-go-v2	v1.41.1 -> v1.41.6
github.com/aws/aws-sdk-go-v2/config	v1.32.9 -> v1.32.16
github.com/aws/aws-sdk-go-v2/credentials	v1.19.9 -> v1.19.15
github.com/aws/aws-sdk-go-v2/service/sts	v1.41.6 -> v1.42.0
golang.org/x/oauth2	v0.34.0 -> v0.36.0
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.18.17 -> v1.18.22
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.4.17 -> v1.4.22
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.7.17 -> v2.7.22
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	v1.13.4 -> v1.13.8
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.13.17 -> v1.13.22
github.com/aws/aws-sdk-go-v2/service/signin	v1.0.5 -> v1.0.10
github.com/aws/aws-sdk-go-v2/service/sso	v1.30.10 -> v1.30.16
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.35.14 -> v1.35.20
github.com/aws/smithy-go	v1.24.0 -> v1.25.0
github.com/cert-manager/cert-manager	v1.19.4 -> v1.20.0
github.com/goccy/go-json	v0.10.5 -> v0.10.6
github.com/golang/groupcache	v0.0.0-20210331224755-41bb18bfe9da -> v0.0.0-20241129210726-2c02b8208cf8
github.com/itchyny/gojq	v0.12.18 -> v0.12.19
github.com/itchyny/timefmt-go	v0.1.7 -> v0.1.8
github.com/ohler55/ojg	v1.28.0 -> v1.28.1
github.com/olekukonko/tablewriter	v1.1.3 -> v1.1.4
go.yaml.in/yaml/v2	v2.4.3 -> v2.4.4
google.golang.org/genproto/googleapis/api	v0.0.0-20260226221140-a57be14db171 -> v0.0.0-20260401024825-9d38bb4040a9
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260226221140-a57be14db171 -> v0.0.0-20260414002931-afd174a4e478
k8s.io/api	v0.35.2 -> v0.36.1
k8s.io/apiextensions-apiserver	v0.35.2 -> v0.36.1
k8s.io/apimachinery	v0.35.2 -> v0.36.1
k8s.io/client-go	v0.35.2 -> v0.36.1
k8s.io/klog/v2	v2.130.1 -> v2.140.0
k8s.io/kube-openapi	v0.0.0-20260304202019-5b3e3fdb0acf -> v0.0.0-20260317180543-43fb72c5454a
sigs.k8s.io/gateway-api	v1.5.0 -> v1.5.1
github.com/lufia/plan9stats	v0.0.0-20211012122336-39d0f177ccd0 -> v0.0.0-20251013123823-9fd1530e3ec3
github.com/power-devops/perfstat	v0.0.0-20210106213030-5aafc221ea8c -> v0.0.0-20240221224432-82ca36839d55
github.com/shoenig/go-m1cpu	v0.1.6 -> v0.1.7
github.com/tklauser/go-sysconf	v0.3.12 -> v0.3.16
github.com/tklauser/numcpus	v0.6.1 -> v0.11.0
golang.org/x/exp	v0.0.0-20260218203240-3dfff04db8fa -> v0.0.0-20260312153236-7ab1446f8b90
google.golang.org/protobuf	v1.36.11 -> v1.36.12-0.20260120151049-f2248ac996af

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang.org/​x/​oauth2@​v0.34.0 ⏵ v0.36.0	+1
	github.com/​aws/​aws-sdk-go-v2@​v1.41.1 ⏵ v1.41.6
	github.com/​flanksource/​commons@​v1.47.2 ⏵ v1.53.1	+1
	github.com/​flanksource/​clicky@​v1.21.1 ⏵ v1.21.45	-1
	github.com/​aws/​aws-sdk-go-v2/​config@​v1.32.9 ⏵ v1.32.16	+1
	github.com/​aws/​aws-sdk-go-v2/​credentials@​v1.19.9 ⏵ v1.19.15	+1
	github.com/​aws/​aws-sdk-go-v2/​service/​sts@​v1.41.6 ⏵ v1.42.0	+1

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: golang k8s.io/client-go is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: ? → golang/github.com/flanksource/clicky@v1.21.45 → golang/k8s.io/client-go@v0.36.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/k8s.io/client-go@v0.36.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[github-actions]

Gavel crashed before producing results

Exit code: 1
Error: gavel exited 1 before writing results

Last lines of gavel.log

go: downloading github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee go: downloading k8s.io/apiextensions-apiserver v0.36.1 go: downloading sigs.k8s.io/gateway-api v1.5.1 go: download...

Full gavel.log, JSON stub, and HTML stub are in the workflow artifact.

View full results