chore(deps): update flanksource go dependencies

[flanksource-ci-runner]

This PR contains the following updates:

Package	Type	Update	Change
github.com/flanksource/clicky	indirect	patch	v1.21.48 → v1.21.57
github.com/flanksource/commons	require	minor	v1.53.1 → v1.57.0
github.com/flanksource/duty	require	patch	v1.0.1352 → v1.0.1373
github.com/flanksource/gomplate/v3	indirect	patch	v3.24.84 → v3.24.89
github.com/flanksource/is-healthy	indirect	patch	v1.0.88 → v1.0.91

---

Release Notes

flanksource/clicky (github.com/flanksource/clicky)

v1.21.57

Compare Source

⚠ BREAKING CHANGES

• exec: WithContext now properly cancels in-flight commands and prevents already-canceled contexts from starting. Process.Short() renamed to PrettyShort() and returns api.Textable. Removed legacy Task-based restart/wrapper functions (kept TaskAsTask/RunAsTask). Supervise must now set RestartPolicy=RestartNo when running under RunSupervisedAsTask.

♻️ Code Refactoring

• improve table rendering and process lifecycle management (1a86b05)
• refactor captain chat settings to use runtime profiles (8055722)
• refactor verb tool hints to use safety facts instead of permission defaults (e73028d)
• aichat: refactor tool permission API from ToolMode to ToolPolicy (1e305ab)
• api: refactor table cell handling for hidden columns and filtering (d901d6e)
• exec: split exec into focused modules with proper context cancellation (83522f5)

✅ Tests

• Remove tool permission test files (db72878)

✨ Features

• add server-side sorting support for entity lists and tables (99b4ad9)
• task: Add background task support to prevent wait deadlocks (6c266bb)

🔧 Maintenance

• update dependencies across multiple modules (131f98b)
• release: pin sub-modules to v1.21.56 [skip ci] (7ad379c)

v1.21.56

Compare Source

⚠ BREAKING CHANGES

• exec: WithContext now properly cancels in-flight commands and prevents already-canceled contexts from starting. Process.Short() renamed to PrettyShort() and returns api.Textable. Removed legacy Task-based restart/wrapper functions (kept TaskAsTask/RunAsTask). Supervise must now set RestartPolicy=RestartNo when running under RunSupervisedAsTask.

♻️ Code Refactoring

• improve table rendering and process lifecycle management (1a86b05)
• refactor captain chat settings to use runtime profiles (8055722)
• refactor verb tool hints to use safety facts instead of permission defaults (e73028d)
• aichat: refactor tool permission API from ToolMode to ToolPolicy (1e305ab)
• api: refactor table cell handling for hidden columns and filtering (d901d6e)
• exec: split exec into focused modules with proper context cancellation (83522f5)

✅ Tests

• Remove tool permission test files (db72878)

✨ Features

• add server-side sorting support for entity lists and tables (99b4ad9)
• task: Add background task support to prevent wait deadlocks (6c266bb)

🔧 Maintenance

• update dependencies across multiple modules (131f98b)
• release: pin sub-modules to v1.21.56 [skip ci] (7ad379c)

v1.21.55

Compare Source

✨ Features

• add toon support (#​178) (301ba17)

🔧 Maintenance

• release: pin sub-modules to v1.21.55 [skip ci] (cfe0057)

v1.21.54

Compare Source

⚠ BREAKING CHANGES

• api: unclassified HTTP failures now return a generic message instead of the underlying error text

Claude-Session-Id: 265660c-236f-494a-9095-0ba83f484b14

• api: commands marked local-only are no longer published as HTTP routes, and affected inferred routes may use corrected HTTP methods.

⚡ Performance Improvements

• rpc: compress eligible RPC responses (bc235ef)

✨ Features

• api: add dynamic entity families and paged export responses (d47d7b8)
• entity: add primary actions and bounded filter lookups (295e0ba)
• entity: support entity hierarchy paths and omit failed action data (32618fb)
• formatters: add complete tabular exports and compact rendered payloads (eca2ac1)

🐛 Bug Fixes

• fix terminal rendering and process output behavior (f62be17)
• api: Harden API, rendering, and terminal edge cases (3cd4ba5)

🔧 Maintenance

• release: pin sub-modules to v1.21.54 [skip ci] (e983395)

v1.21.53

Compare Source

⚠ BREAKING CHANGES

• DynamicFilter.Options and Selected now return errors; update implementations and callers accordingly.
• entity: schema-declared filters now use their bound filter key for requests instead of the property name.

Claude-Session-Id: 131441b-c773-478c-87f4-5f7174a16d4d

✨ Features

• Expand RPC schemas and task runtime controls (49957ea)
• api: Add ANSI text rendering and schema-driven column formatting (7c8a87a)
• entity: support filters without schema properties (de65632)

👷 CI/CD

• ci: provide GitHub token to Gavel workflows (052b907)

🔧 Maintenance

• release: pin sub-modules to v1.21.53 [skip ci] (f469e91)

v1.21.52

Compare Source

⚠ BREAKING CHANGES

• api: Change AddTiming to accept TimingMetric instead of separate name and duration arguments

• build(examples): Update Clicky dependency to v1.21.52

✨ Features

• api: support timing counters (#​172) (1d67dc6)

🔧 Maintenance

• release: pin sub-modules to v1.21.52 [skip ci] (43a37b8)

v1.21.51

Compare Source

✨ Features

• api: Support contextual entity actions and structured error responses (6fb040f)

🔧 Maintenance

• deps: Update entity example to clicky v1.21.51 (9aede06)
• deps: update Go module dependencies (f78abda)
• release: pin sub-modules to v1.21.51 [skip ci] (b4553fe)

v1.21.50

Compare Source

📦 Build System

• deps: bump the go_modules group across 2 directories with 1 update (34a8e24)

🔧 Maintenance

• release: pin sub-modules to v1.21.50 [skip ci] (6773025)

v1.21.49

Compare Source

🔧 Maintenance

• deps: update flanksource go dependencies (8bc3adc)
• release: pin sub-modules to v1.21.49 [skip ci] (394ddf5)

flanksource/commons (github.com/flanksource/commons)

v1.57.0

Compare Source

Bug Fixes

• logger: preserve logger-specific JSON output mode (3a3deb9)
• Prevent logging and timeout regressions (3ee4af7)

Features

• har: support bounded collectors and selective entry details (c589ecd)

v1.56.0

Compare Source

Features

• http: add configurable connection establishment timeout (03b28f6)

v1.55.0

Compare Source

Features

• har: add property-driven HAR capture levels and sensitive mode (fd1293b)
• help: add shared runtime configuration help (a09cb96)

v1.54.1

Compare Source

Bug Fixes

• pin gavel (84ca9f9)

v1.54.0

Compare Source

Bug Fixes

• deps: update Excelize to v2.11.0 (bda2a73)
• http: redact credentials in request logs (CodeQL clear-text logging) (#​328) (2bd9574)
• lint,test: use reflect.Pointer and remove TLS test races (516bc6d)
• security: mark HTTP trace redaction helpers as CodeQL barriers (#​329) (6105b11)
• security: remediate high severity insights (a599996)

Features

• add configurable redaction of custom body keys and query parameters (51910b8)

flanksource/duty (github.com/flanksource/duty)

v1.0.1373

Compare Source

v1.0.1372

Compare Source

v1.0.1371

Compare Source

v1.0.1370

Compare Source

Bug Fixes

• schema: enforce unique playbook webhook paths (#​2076) (9068324)

v1.0.1369

Compare Source

Reverts

• Revert "fix: grant PostgREST role switching on PostgreSQL 16+ (#​2071)" (#​2079) (dec9306)

v1.0.1368

Compare Source

v1.0.1367

Compare Source

Features

• models,views and schema for config cost (#​2068) (80bdaf8)

v1.0.1366

Compare Source

v1.0.1365

Compare Source

Bug Fixes

• grant PostgREST role switching on PostgreSQL 16+ (#​2071) (f5d54fb)

v1.0.1364

Compare Source

Bug Fixes

• correct config detail change count (#​2073) (94128d2)

v1.0.1363

Compare Source

v1.0.1362

Compare Source

v1.0.1361

Compare Source

v1.0.1360

Compare Source

v1.0.1359

Compare Source

Features

• external user alias mapping (#​2060) (a44a907)

v1.0.1358

Compare Source

v1.0.1357

Compare Source

v1.0.1356

Compare Source

v1.0.1355

Compare Source

v1.0.1354

Compare Source

Bug Fixes

• update grammar to support / in resource selector label search (#​2058) (af36b7d)

v1.0.1353

Compare Source

flanksource/gomplate (github.com/flanksource/gomplate/v3)

v3.24.89

Compare Source

Bug Fixes

• nilsafe: preserve null for missing temporal values (2ba574c)

Code Refactoring

• genmonarch: Consolidate generated language definitions into one JSON artifact (c5123f8)

Features

• cel: add flexible cast helpers and normalize expression results (470b1b7)
• cel: preserve native values and cap regex programs (68d2759)
• lang: add generated conversion functions and pre-validation build hooks (a16dac4)
• monarch: add grammar-driven Monarch language bundle generation (1f828b3)
• playground: add embeddable expression playground API (4e9f969)
• web: add Monaco language tooling and interactive playground (acab448)
• web: add playground tooling and generated language definitions (5bacde9)

BREAKING CHANGES

• nilsafe: temporal comparisons with null now propagate null instead of returning epoch-based booleans.
• genmonarch: Remove per-language *.monarch.json and *.config.json artifacts; consumers must use languages.json or the generated definitions export

Claude-Session-Id: 36467eb-f368-4040-bc75-e28248497b4c

v3.24.88

Compare Source

v3.24.87

Compare Source

v3.24.86

Compare Source

Bug Fixes

• pin dependencies (796e67d)

v3.24.85

Compare Source

Bug Fixes

• bump actions/upload-artifact to v4 in scorecard workflow (#​168) (a707d59)
• ci: replace disabled semantic release action (f8d783c)
• conv: correct bounds check in ToInt to prevent unsafe integer conversion (#​166) (808f419)
• resolve high-severity CodeQL findings (#​165) (62d3b94), closes hi#severity
• resolve remaining CodeQL code-scanning alerts (#​167) (83d82e2)
• upgrade Scorecard action for Sigstore compatibility (#​169) (5d0587e)

Features

• cel: add opt-in native evaluation tracking (a4a7fc6)

flanksource/is-healthy (github.com/flanksource/is-healthy)

v1.0.91

Compare Source

v1.0.90

Compare Source

Bug Fixes

• escalate stuck certificate issuance health (97979a2)
• respect active certificate issuance state (0609b0e)

v1.0.89

Compare Source

Bug Fixes

• deps: update golang.org/x/net to v0.55.0 (5effb5d)

Features

• cnpg support (2188b63)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[flanksource-ci-runner]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 11 additional dependencies were updated

Details:

Package	Change
github.com/Masterminds/semver/v3	v3.4.0 -> v3.5.0
github.com/charmbracelet/lipgloss	v1.1.0 -> v1.1.1-0.20250404203927-76690c660834
github.com/fsnotify/fsnotify	v1.9.0 -> v1.10.1
github.com/google/cel-go	v0.28.1 -> v0.31.0
github.com/yuin/goldmark	v1.7.16 -> v1.7.17
golang.org/x/exp	v0.0.0-20260410095643-746e56fc9e2f -> v0.0.0-20260527015227-08cc5374adb3
golang.org/x/sync	v0.21.0 -> v0.22.0
golang.org/x/text	v0.38.0 -> v0.40.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260608224507-4308a22a1bab -> v0.0.0-20260622175928-b703f567277d
k8s.io/streaming	v0.36.1 -> v0.36.2
k8s.io/apimachinery	v0.36.1 -> v0.36.2