chore(deps): update flanksource go dependencies

[flanksource-ci-runner]

This PR contains the following updates:

Package	Type	Update	Change
github.com/flanksource/clicky	indirect	patch	v1.21.55 → v1.21.63
github.com/flanksource/commons	require	minor	v1.56.0 → v1.59.0
github.com/flanksource/commons	indirect	minor	v1.56.0 → v1.59.0
github.com/flanksource/duty	require	patch	v1.0.1366 → v1.0.1383
github.com/flanksource/incident-commander/plugin/api	require	patch	v0.0.5 → v0.0.6
github.com/flanksource/incident-commander/plugin/sdk	require	patch	v0.0.6 → v0.0.7
github.com/flanksource/is-healthy	indirect	patch	v1.0.90 → v1.0.92

---

Release Notes

flanksource/clicky (github.com/flanksource/clicky)

v1.21.63

Compare Source

✨ Features

• add per-value row counts to entity lookup responses (899977d)

🐛 Bug Fixes

• Reject negative counts in lookup filter validation (551d7aa)

📦 Build System

• ci: Add submodule pinning to release workflow (cd803ff)

🔧 Maintenance

• release: pin sub-modules to v1.21.62 [skip ci] (9d9b9e3)

v1.21.62

Compare Source

✨ Features

• add per-value row counts to entity lookup responses (899977d)

🐛 Bug Fixes

• Reject negative counts in lookup filter validation (551d7aa)

📦 Build System

• ci: Add submodule pinning to release workflow (cd803ff)

🔧 Maintenance

• release: pin sub-modules to v1.21.62 [skip ci] (9d9b9e3)

v1.21.61

Compare Source

♻️ Code Refactoring

• entity: keep operation listeners passive (0e796c3)

✨ Features

• entity: observe operations through additive listeners (05a5e56)

📚 Documentation

• entity: clarify borrowed listener results (3d02975)

📦 Build System

• examples: align entity demo with aichat's Clicky pin (b84024e)

🔧 Maintenance

• release: pin sub-modules to v1.21.61 [skip ci] (fd00ce9)

v1.21.60

Compare Source

⚠ BREAKING CHANGES

• exec: OutputSnapshot now includes StdoutOffset and StderrOffset fields; ProcessDetails.Annotations renamed to Metadata with any-type support; SupervisedTaskOptions.Annotations renamed to Metadata.

✨ Features

• exec: Add process output capture limits and snapshot annotations (8730efd)
• exec: Track absolute stream positions for output continuity across restarts (cbff964)

🔧 Maintenance

• release: pin sub-modules to v1.21.60 [skip ci] (17beb03)

v1.21.59

Compare Source

⚠ BREAKING CHANGES

• task: Scheduler Add and Remove now require a context and return errors.

Claude-Session-Id: 1eadaa8-699a-44c2-8b63-f550033a6ffa

• flags: Unannotated @​file and @​url values are now passed through literally.
• task: remove the OnBeforeGC callback in favor of the Store interface

♻️ Code Refactoring

• scheduler: refactor schedule persistence and remove unused runner registry (b1f3cd7)

✨ Features

• implement cancellation drain and work progress tracking (b33eae6)
• api: add opt-in file expansion and bounded process capture (ccc5a7d)
• exec: Improve process tree termination and force-stop supervised processes (d4bb829), closes #​123
• task: add durable run persistence and schedule orchestration (2b24ad6)
• task: add scheduling, durable run persistence, and bounded process capture (f63cce4)

🐛 Bug Fixes

• prevent duplicate args and improve file access security (e5cb68b)
• aichat: preserve tool diagnostics and positional arguments (0ae7e27)
• task: fix scheduler group completion and deferred fire tracking (a6146af)
• task: Harden scheduler persistence and lifecycle handling (18d4601)

👷 CI/CD

• ci: Pin Gavel workflow action to v0.0.54 (290f1e1)

🔧 Maintenance

• update generated and lock files (93d7925)
• release: pin sub-modules to v1.21.59 [skip ci] (e6d1876)

security

• flags: Gate file and URL expansion behind explicit field opt-ins (738bac6)

v1.21.58

Compare Source

⚠ BREAKING CHANGES

• aichat: CobraToolProviderOptions.Permission callback is removed and
  replaced with Policy and Strategies fields. ToolSet() now requires a non-nil
  context to scope request values.
• entity: Remove automatic verb-based tool safety inference. Entity verbs (list/get/create/update/delete) no longer stamp ReadOnlyHint/DestructiveHint; consumers must supply explicit MCPToolHints for safety semantics.

♻️ Code Refactoring

• aichat: Move permissions to captain, carry whole operations (e141c35)
• markdown: split markdown rendering into focused modules (7167cad)

⚡ Performance Improvements

• task: cache completed external run snapshots (3e8ed60)

✅ Tests

• cmd: locate the example fixture without runtime.Caller (2088167)

✨ Features

• api: add markdown dialect support with options propagation (873c858)
• api: Add structured error responses with OpenTelemetry tracing (afef807)
• entity: Add comprehensive error responses and action lookup support (a0ab0a1)
• flags: add enum tag support for closed-set flag values (e4d0cc8)
• task: Add stop control to task groups without explicit controllers (59c3e20)

🐛 Bug Fixes

• mcp: honor XDG_CONFIG_HOME when locating the server registry (ed69784)
• rpc: keep a classified error's status on the legacy surface (43aea34)

📦 Build System

• aichat: pin captain v0.0.53 for the tool-strategy API (0987235)
• examples: refresh the entity demo's module pins (fef09a2)

🔧 Maintenance

• release: pin sub-modules to v1.21.58 [skip ci] (03124e1)

v1.21.57

Compare Source

✨ Features

• api: add opt-in structured RPC error responses (56c665d)

🔧 Maintenance

• release: pin sub-modules to v1.21.57 [skip ci] (d264e03)

v1.21.56

Compare Source

⚠ BREAKING CHANGES

• exec: WithContext now properly cancels in-flight commands and prevents already-canceled contexts from starting. Process.Short() renamed to PrettyShort() and returns api.Textable. Removed legacy Task-based restart/wrapper functions (kept TaskAsTask/RunAsTask). Supervise must now set RestartPolicy=RestartNo when running under RunSupervisedAsTask.

♻️ Code Refactoring

• improve table rendering and process lifecycle management (1a86b05)
• refactor captain chat settings to use runtime profiles (8055722)
• refactor verb tool hints to use safety facts instead of permission defaults (e73028d)
• aichat: refactor tool permission API from ToolMode to ToolPolicy (1e305ab)
• api: refactor table cell handling for hidden columns and filtering (d901d6e)
• exec: split exec into focused modules with proper context cancellation (83522f5)

✅ Tests

• Remove tool permission test files (db72878)

✨ Features

• add server-side sorting support for entity lists and tables (99b4ad9)
• task: Add background task support to prevent wait deadlocks (6c266bb)

🔧 Maintenance

• update dependencies across multiple modules (131f98b)
• release: pin sub-modules to v1.21.56 [skip ci] (7ad379c)

flanksource/commons (github.com/flanksource/commons)

v1.59.0

Compare Source

Features

• http: add defensive HTTP client with network destination restrictions (4500ffa)
• http: Increase HAR max body size to 4 MiB and enhance body truncation handling (8227ba8)
• properties: Add type metadata tracking and new property accessors (3baf579)

BREAKING CHANGES

• http: Configuration property renamed from http.har.maxBodySize to http.har.response.body.length; default increased from 65536 to 4194304 bytes

Claude-Session-Id: 01a046f-4293-7391-b920-187a7083ba68

v1.58.0

Compare Source

Features

• properties: expose typed defaults and value metadata (51f41fc)

v1.57.0

Compare Source

Bug Fixes

• logger: preserve logger-specific JSON output mode (3a3deb9)
• Prevent logging and timeout regressions (3ee4af7)

Features

• har: support bounded collectors and selective entry details (c589ecd)

flanksource/duty (github.com/flanksource/duty)

v1.0.1383

Compare Source

v1.0.1382

Compare Source

v1.0.1381

Compare Source

Bug Fixes

• duplicate config cost (#​2091) (cabcb20)

v1.0.1380

Compare Source

Performance Improvements

• context: invalidate cached Kubernetes env values with K8S Watch API (#​2086) (881ae5a)

v1.0.1379

Compare Source

Bug Fixes

• cost rollup from gcp proj to org (#​2090) (58586e6)

v1.0.1378

Compare Source

Performance Improvements

• context: cache Kubernetes env values by object (ad6eaa9)

v1.0.1377

Compare Source

v1.0.1376

Compare Source

Bug Fixes

• duplicate cost counting (#​2088) (717f9f4)

v1.0.1375

Compare Source

v1.0.1374

Compare Source

Performance Improvements

• cache immutable Kubernetes env values (#​2084) (b72e8b4)

v1.0.1373

Compare Source

v1.0.1372

Compare Source

v1.0.1371

Compare Source

v1.0.1370

Compare Source

Bug Fixes

• schema: enforce unique playbook webhook paths (#​2076) (9068324)

v1.0.1369

Compare Source

Reverts

• Revert "fix: grant PostgREST role switching on PostgreSQL 16+ (#​2071)" (#​2079) (dec9306)

v1.0.1368

Compare Source

v1.0.1367

Compare Source

Features

• models,views and schema for config cost (#​2068) (80bdaf8)

flanksource/incident-commander (github.com/flanksource/incident-commander/plugin/api)

v0.0.6

Compare Source

Bug Fixes

• upx install path (6c15d44)

flanksource/is-healthy (github.com/flanksource/is-healthy)

v1.0.92

Compare Source

v1.0.91

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[flanksource-ci-runner]

ℹ️ Artifact update notice

File name: kubernetes-logs/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 5 additional dependencies were updated

Details:

Package	Change
github.com/Masterminds/semver/v3	v3.4.0 -> v3.5.0
github.com/charmbracelet/lipgloss	v1.1.0 -> v1.1.1-0.20250404203927-76690c660834
golang.org/x/exp	v0.0.0-20260410095643-746e56fc9e2f -> v0.0.0-20260527015227-08cc5374adb3
golang.org/x/sync	v0.21.0 -> v0.22.0
golang.org/x/text	v0.38.0 -> v0.40.0

File name: sql-server/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 5 additional dependencies were updated

Details:

Package	Change
github.com/onsi/ginkgo/v2	v2.28.3 -> v2.32.1
github.com/onsi/gomega	v1.40.0 -> v1.42.1
github.com/Masterminds/semver/v3	v3.4.0 -> v3.5.0
github.com/prometheus/common	v0.67.5 -> v0.68.1
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260427160629-7cedc36a6bc4 -> v0.0.0-20260622175928-b703f567277d

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 490192f8-2430-46b9-8bbd-eadde77a4482

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}