chore(deps): update flanksource go dependencies

[flanksource-ci-runner]

This PR contains the following updates:

Package	Type	Update	Change
github.com/flanksource/clicky	require	patch	v1.21.54 → v1.21.59
github.com/flanksource/commons	require	minor	v1.55.0 → v1.57.0
github.com/flanksource/commons-db	require	patch	v0.1.27 → v0.1.31
github.com/flanksource/deps	indirect	patch	v1.0.37 → v1.0.42
github.com/flanksource/duty	require	patch	v1.0.1359 → v1.0.1379
github.com/flanksource/gomplate/v3	require	patch	v3.24.86 → v3.24.89
github.com/flanksource/is-healthy	indirect	patch	v1.0.88 → v1.0.91

---

Release Notes

flanksource/clicky (github.com/flanksource/clicky)

v1.21.59

Compare Source

⚠ BREAKING CHANGES

• aichat: CobraToolProviderOptions.Permission callback is removed and
  replaced with Policy and Strategies fields. ToolSet() now requires a non-nil
  context to scope request values.
• entity: Remove automatic verb-based tool safety inference. Entity verbs (list/get/create/update/delete) no longer stamp ReadOnlyHint/DestructiveHint; consumers must supply explicit MCPToolHints for safety semantics.

♻️ Code Refactoring

• aichat: Move permissions to captain, carry whole operations (e141c35)
• markdown: split markdown rendering into focused modules (7167cad)

⚡ Performance Improvements

• task: cache completed external run snapshots (3e8ed60)

✅ Tests

• cmd: locate the example fixture without runtime.Caller (2088167)

✨ Features

• api: add markdown dialect support with options propagation (873c858)
• api: Add structured error responses with OpenTelemetry tracing (afef807)
• entity: Add comprehensive error responses and action lookup support (a0ab0a1)
• flags: add enum tag support for closed-set flag values (e4d0cc8)
• task: Add stop control to task groups without explicit controllers (59c3e20)

🐛 Bug Fixes

• mcp: honor XDG_CONFIG_HOME when locating the server registry (ed69784)
• rpc: keep a classified error's status on the legacy surface (43aea34)

📦 Build System

• aichat: pin captain v0.0.53 for the tool-strategy API (0987235)
• examples: refresh the entity demo's module pins (fef09a2)

🔧 Maintenance

• release: pin sub-modules to v1.21.58 [skip ci] (03124e1)

v1.21.58

Compare Source

⚠ BREAKING CHANGES

• aichat: CobraToolProviderOptions.Permission callback is removed and
  replaced with Policy and Strategies fields. ToolSet() now requires a non-nil
  context to scope request values.
• entity: Remove automatic verb-based tool safety inference. Entity verbs (list/get/create/update/delete) no longer stamp ReadOnlyHint/DestructiveHint; consumers must supply explicit MCPToolHints for safety semantics.

♻️ Code Refactoring

• aichat: Move permissions to captain, carry whole operations (e141c35)
• markdown: split markdown rendering into focused modules (7167cad)

⚡ Performance Improvements

• task: cache completed external run snapshots (3e8ed60)

✅ Tests

• cmd: locate the example fixture without runtime.Caller (2088167)

✨ Features

• api: add markdown dialect support with options propagation (873c858)
• api: Add structured error responses with OpenTelemetry tracing (afef807)
• entity: Add comprehensive error responses and action lookup support (a0ab0a1)
• flags: add enum tag support for closed-set flag values (e4d0cc8)
• task: Add stop control to task groups without explicit controllers (59c3e20)

🐛 Bug Fixes

• mcp: honor XDG_CONFIG_HOME when locating the server registry (ed69784)
• rpc: keep a classified error's status on the legacy surface (43aea34)

📦 Build System

• aichat: pin captain v0.0.53 for the tool-strategy API (0987235)
• examples: refresh the entity demo's module pins (fef09a2)

🔧 Maintenance

• release: pin sub-modules to v1.21.58 [skip ci] (03124e1)

v1.21.57

Compare Source

✨ Features

• api: add opt-in structured RPC error responses (56c665d)

🔧 Maintenance

• release: pin sub-modules to v1.21.57 [skip ci] (d264e03)

v1.21.56

Compare Source

⚠ BREAKING CHANGES

• exec: WithContext now properly cancels in-flight commands and prevents already-canceled contexts from starting. Process.Short() renamed to PrettyShort() and returns api.Textable. Removed legacy Task-based restart/wrapper functions (kept TaskAsTask/RunAsTask). Supervise must now set RestartPolicy=RestartNo when running under RunSupervisedAsTask.

♻️ Code Refactoring

• improve table rendering and process lifecycle management (1a86b05)
• refactor captain chat settings to use runtime profiles (8055722)
• refactor verb tool hints to use safety facts instead of permission defaults (e73028d)
• aichat: refactor tool permission API from ToolMode to ToolPolicy (1e305ab)
• api: refactor table cell handling for hidden columns and filtering (d901d6e)
• exec: split exec into focused modules with proper context cancellation (83522f5)

✅ Tests

• Remove tool permission test files (db72878)

✨ Features

• add server-side sorting support for entity lists and tables (99b4ad9)
• task: Add background task support to prevent wait deadlocks (6c266bb)

🔧 Maintenance

• update dependencies across multiple modules (131f98b)
• release: pin sub-modules to v1.21.56 [skip ci] (7ad379c)

v1.21.55

Compare Source

✨ Features

• add toon support (#​178) (301ba17)

🔧 Maintenance

• release: pin sub-modules to v1.21.55 [skip ci] (cfe0057)

flanksource/commons (github.com/flanksource/commons)

v1.57.0

Compare Source

Bug Fixes

• logger: preserve logger-specific JSON output mode (3a3deb9)
• Prevent logging and timeout regressions (3ee4af7)

Features

• har: support bounded collectors and selective entry details (c589ecd)

v1.56.0

Compare Source

Features

• http: add configurable connection establishment timeout (03b28f6)

flanksource/commons-db (github.com/flanksource/commons-db)

v0.1.31

Compare Source

What's Changed

• fix: Suppress enum drops in schemas by @​moshloop in #​60

Full Changelog: flanksource/commons-db@v0.1.30...v0.1.31

v0.1.30

Compare Source

What's Changed

• feat: Add inspection and scroll paging by @​moshloop in #​57

Full Changelog: flanksource/commons-db@v0.1.29...v0.1.30

v0.1.29

Compare Source

What's Changed

• Expand query profiles and providers by @​moshloop in #​56

Full Changelog: flanksource/commons-db@v0.1.28...v0.1.29

v0.1.28

Compare Source

What's Changed

• Pr/schema scoped migrations by @​moshloop in #​55

Full Changelog: flanksource/commons-db@v0.1.27...v0.1.28

flanksource/deps (github.com/flanksource/deps)

v1.0.42

Compare Source

Bug Fixes

• start: accept ready state before supervisor exit (ce24920)

v1.0.41

Compare Source

Bug Fixes

• config: resolve controller-gen release binaries (3f9ac32)

v1.0.40

Compare Source

Bug Fixes

• check installed binaries before remote version resolution (#​78) (20e9584)

v1.0.39

Compare Source

Bug Fixes

• config: normalize four-part ClickHouse versions (e099702)
• e2e: Exclude Windows-incompatible Elasticsearch and Rclone packages (fdb8256)
• installer: support cross-filesystem directory moves (44a725a)
• registry: Support four-component versions and platform-specific release assets (4a05e32)
• utils: normalize ClickHouse stable and LTS version suffixes (0ba1ee6)

Features

• deps: support Timoni and versioned 1Password CLI downloads (3fb53a9)
• installer: support filtered GitHub releases and assets (a2861bf)
• release: publish deps-start assets and register dcg package (55f0fc2)
• start: run services in background with health-gated readiness (6e97211)
• svc: add service management forwarding and on-demand deps-start installation (29c714e)

BREAKING CHANGES

• start: Starting now backgrounds the service by default; use --foreground for terminal-bound execution. Remove the WithDetach/Options.Detach API in favor of the new startup behavior and update controls.

v1.0.38

Compare Source

flanksource/duty (github.com/flanksource/duty)

v1.0.1379

Compare Source

Bug Fixes

• cost rollup from gcp proj to org (#​2090) (58586e6)

v1.0.1378

Compare Source

Performance Improvements

• context: cache Kubernetes env values by object (ad6eaa9)

v1.0.1377

Compare Source

v1.0.1376

Compare Source

Bug Fixes

• duplicate cost counting (#​2088) (717f9f4)

v1.0.1375

Compare Source

v1.0.1374

Compare Source

Performance Improvements

• cache immutable Kubernetes env values (#​2084) (b72e8b4)

v1.0.1373

Compare Source

v1.0.1372

Compare Source

v1.0.1371

Compare Source

v1.0.1370

Compare Source

Bug Fixes

• schema: enforce unique playbook webhook paths (#​2076) (9068324)

v1.0.1369

Compare Source

Reverts

• Revert "fix: grant PostgREST role switching on PostgreSQL 16+ (#​2071)" (#​2079) (dec9306)

v1.0.1368

Compare Source

v1.0.1367

Compare Source

Features

• models,views and schema for config cost (#​2068) (80bdaf8)

v1.0.1366

Compare Source

v1.0.1365

Compare Source

Bug Fixes

• grant PostgREST role switching on PostgreSQL 16+ (#​2071) (f5d54fb)

v1.0.1364

Compare Source

Bug Fixes

• correct config detail change count (#​2073) (94128d2)

v1.0.1363

Compare Source

v1.0.1362

Compare Source

v1.0.1361

Compare Source

v1.0.1360

Compare Source

flanksource/gomplate (github.com/flanksource/gomplate/v3)

v3.24.89

Compare Source

Bug Fixes

• nilsafe: preserve null for missing temporal values (2ba574c)

Code Refactoring

• genmonarch: Consolidate generated language definitions into one JSON artifact (c5123f8)

Features

• cel: add flexible cast helpers and normalize expression results (470b1b7)
• cel: preserve native values and cap regex programs (68d2759)
• lang: add generated conversion functions and pre-validation build hooks (a16dac4)
• monarch: add grammar-driven Monarch language bundle generation (1f828b3)
• playground: add embeddable expression playground API (4e9f969)
• web: add Monaco language tooling and interactive playground (acab448)
• web: add playground tooling and generated language definitions (5bacde9)

BREAKING CHANGES

• nilsafe: temporal comparisons with null now propagate null instead of returning epoch-based booleans.
• genmonarch: Remove per-language *.monarch.json and *.config.json artifacts; consumers must use languages.json or the generated definitions export

Claude-Session-Id: 36467eb-f368-4040-bc75-e28248497b4c

v3.24.88

Compare Source

v3.24.87

Compare Source

flanksource/is-healthy (github.com/flanksource/is-healthy)

v1.0.91

Compare Source

v1.0.90

Compare Source

Bug Fixes

• escalate stuck certificate issuance health (97979a2)
• respect active certificate issuance state (0609b0e)

v1.0.89

Compare Source

Bug Fixes

• deps: update golang.org/x/net to v0.55.0 (5effb5d)

Features

• cnpg support (2188b63)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[flanksource-ci-runner]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 18 additional dependencies were updated

Details:

Package	Change
github.com/onsi/ginkgo/v2	v2.29.0 -> v2.32.1
github.com/onsi/gomega	v1.40.0 -> v1.42.1
k8s.io/apimachinery	v0.36.1 -> v0.36.2
github.com/Masterminds/semver/v3	v3.4.0 -> v3.5.0
github.com/charmbracelet/lipgloss	v1.1.0 -> v1.1.1-0.20250404203927-76690c660834
github.com/fsnotify/fsnotify	v1.9.0 -> v1.10.1
github.com/go-git/go-git/v5	v5.19.1 -> v5.19.2
github.com/go-openapi/jsonpointer	v0.22.4 -> v0.22.5
github.com/go-openapi/swag/jsonname	v0.25.4 -> v0.25.5
github.com/google/cel-go	v0.28.1 -> v0.31.0
github.com/klauspost/compress	v1.18.5 -> v1.18.7
golang.org/x/exp	v0.0.0-20260410095643-746e56fc9e2f -> v0.0.0-20260527015227-08cc5374adb3
golang.org/x/mod	v0.36.0 -> v0.37.0
golang.org/x/sync	v0.21.0 -> v0.22.0
golang.org/x/text	v0.38.0 -> v0.40.0
golang.org/x/tools	v0.45.0 -> v0.47.0
gorm.io/gorm	v1.31.1 -> v1.31.2
k8s.io/streaming	v0.36.1 -> v0.36.2