Skip to content

chore(deps): update flanksource go dependencies - #46

Open
flanksource-ci-runner[bot] wants to merge 1 commit into
mainfrom
renovate-flanksource/flanksource-go-dependencies
Open

chore(deps): update flanksource go dependencies#46
flanksource-ci-runner[bot] wants to merge 1 commit into
mainfrom
renovate-flanksource/flanksource-go-dependencies

Conversation

@flanksource-ci-runner

@flanksource-ci-runner flanksource-ci-runner Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
github.com/flanksource/captain require patch v0.0.29v0.0.60
github.com/flanksource/clicky require patch v1.21.57v1.21.61
github.com/flanksource/clicky require patch v1.21.55v1.21.61
github.com/flanksource/clicky/aichat require patch v1.21.55v1.21.61
github.com/flanksource/clicky/valkey require patch v1.21.55v1.21.61
github.com/flanksource/commons require minor v1.57.0v1.59.0
github.com/flanksource/commons require minor v1.56.0v1.59.0
github.com/flanksource/commons-db require patch v0.1.27v0.1.31
github.com/flanksource/deps require patch v1.0.39v1.0.42
github.com/flanksource/gomplate/v3 indirect patch v3.24.84v3.24.89
github.com/flanksource/is-healthy require patch v1.0.90v1.0.92
github.com/flanksource/is-healthy indirect patch v1.0.88v1.0.92

Release Notes

flanksource/captain (github.com/flanksource/captain)

v0.0.60

Compare Source

v0.0.59

Compare Source

v0.0.58

Compare Source

v0.0.57

Compare Source

v0.0.56

Compare Source

v0.0.55

Compare Source

v0.0.54

Compare Source

v0.0.53

Compare Source

v0.0.52

Compare Source

v0.0.51

Compare Source

v0.0.50

Compare Source

v0.0.49

Compare Source

v0.0.48

Compare Source

v0.0.47

Compare Source

v0.0.46

Compare Source

v0.0.45

Compare Source

Changelog

  • b079372 fix(ai): disable GPT-5.6 reasoning with function tools

v0.0.44

Compare Source

Changelog

v0.0.43

Compare Source

Changelog

v0.0.42

Compare Source

Changelog

  • 139ac63 feat(migrations): add schema-scoped migration support

v0.0.41

Compare Source

Changelog

  • 5cc3a61 chore(docs): Update docs build config and dependencies with pnpm workspace rules
  • 8073909 feat(api): Add durable token authentication and TLS for remote Captain access
  • dd911e8 feat(api): declare per-backend permission capabilities
  • 4c329dc feat(cli): add captain permissions matrix
  • 51a3cd8 feat(sandbox): Add managed git-agent deployment and HTTPS sandbox support
  • 67e246d feat(sandbox): Add redacted agent login mirroring to sandbox destinations
  • dbdb4d8 fix(agent): Enforce budget timeout on agent runner invocations
  • 65c407f fix(api): describe the permissions block in the generated schema
  • 0ea0579 fix(cli): Support buffered providers in workflow streaming
  • 043dcd0 fix: Prevent directory traversal attacks in credentials and token paths
  • 256b36b refactor(aichat): refactor rename runtime_settings to runtime_profile
  • e552f59 refactor(api): refactor tool catalog to use ToolPolicy instead of ToolMode
  • 1143c4f refactor(api): resolve tool authority from strategies over typed operations
  • 4c9b574 refactor(api,fe): Refactor method calls to use receiver methods instead of field access
  • 1eaa65c refactor(commit): skip git-ignored paths in commit attribution
  • 2f4a96c refactor(test): refactor gitagent e2e test to use configurable session database
  • 9c4484f refactor: unify tool permission vocabulary and layering
  • e316949 refactor: use ai.ResolveModelSelectors for catalog id resolution
  • b60aae2 test(test): Wait for agent task completion in e2e test

v0.0.40

Compare Source

Changelog

  • 7906f69 perf(database): reduce transcript ingest write amplification

v0.0.39

Compare Source

Changelog

  • 7a88159 feat: capture Claude CLI session cost estimates (#​77)

v0.0.38

Compare Source

Changelog

  • 1712d6c fix(cost): align public accounting view contracts
  • fc866f8 fix(cost): preserve model-call accounting consistency

v0.0.37

Compare Source

Changelog

  • be74402 fix(aichat): unify streaming and persistence outcomes (#​74)

v0.0.36

Compare Source

Changelog

v0.0.35

Compare Source

Changelog

v0.0.34

Compare Source

Changelog

  • 88baac1 fix(codex): emit complete correlated tool results (#​66)

v0.0.33

Compare Source

Changelog

  • 9abc95c fix(api): remove dead routes and prevent SPA fallthrough (#​73)

v0.0.32

Compare Source

Changelog

v0.0.31

Compare Source

Changelog

  • d158690 fix: preserve approvals submitted before prompt runs wait (#​71)

v0.0.30

Compare Source

Changelog

flanksource/clicky (github.com/flanksource/clicky)

v1.21.61

Compare Source

⚠ BREAKING CHANGES
  • exec: OutputSnapshot now includes StdoutOffset and StderrOffset fields; ProcessDetails.Annotations renamed to Metadata with any-type support; SupervisedTaskOptions.Annotations renamed to Metadata.
✨ Features
  • exec: Add process output capture limits and snapshot annotations (8730efd)
  • exec: Track absolute stream positions for output continuity across restarts (cbff964)
🔧 Maintenance
  • release: pin sub-modules to v1.21.60 [skip ci] (17beb03)

v1.21.60

Compare Source

⚠ BREAKING CHANGES
  • exec: OutputSnapshot now includes StdoutOffset and StderrOffset fields; ProcessDetails.Annotations renamed to Metadata with any-type support; SupervisedTaskOptions.Annotations renamed to Metadata.
✨ Features
  • exec: Add process output capture limits and snapshot annotations (8730efd)
  • exec: Track absolute stream positions for output continuity across restarts (cbff964)
🔧 Maintenance
  • release: pin sub-modules to v1.21.60 [skip ci] (17beb03)

v1.21.59

Compare Source

⚠ BREAKING CHANGES
  • task: Scheduler Add and Remove now require a context and return errors.

Claude-Session-Id: 1eadaa8-699a-44c2-8b63-f550033a6ffa

  • flags: Unannotated @​file and @​url values are now passed through literally.
  • task: remove the OnBeforeGC callback in favor of the Store interface
♻️ Code Refactoring
  • scheduler: refactor schedule persistence and remove unused runner registry (b1f3cd7)
✨ Features
  • implement cancellation drain and work progress tracking (b33eae6)
  • api: add opt-in file expansion and bounded process capture (ccc5a7d)
  • exec: Improve process tree termination and force-stop supervised processes (d4bb829), closes #​123
  • task: add durable run persistence and schedule orchestration (2b24ad6)
  • task: add scheduling, durable run persistence, and bounded process capture (f63cce4)
🐛 Bug Fixes
  • prevent duplicate args and improve file access security (e5cb68b)
  • aichat: preserve tool diagnostics and positional arguments (0ae7e27)
  • task: fix scheduler group completion and deferred fire tracking (a6146af)
  • task: Harden scheduler persistence and lifecycle handling (18d4601)
👷 CI/CD
  • ci: Pin Gavel workflow action to v0.0.54 (290f1e1)
🔧 Maintenance
  • update generated and lock files (93d7925)
  • release: pin sub-modules to v1.21.59 [skip ci] (e6d1876)
security
  • flags: Gate file and URL expansion behind explicit field opt-ins (738bac6)

v1.21.58

Compare Source

⚠ BREAKING CHANGES
  • aichat: CobraToolProviderOptions.Permission callback is removed and
    replaced with Policy and Strategies fields. ToolSet() now requires a non-nil
    context to scope request values.
  • entity: Remove automatic verb-based tool safety inference. Entity verbs (list/get/create/update/delete) no longer stamp ReadOnlyHint/DestructiveHint; consumers must supply explicit MCPToolHints for safety semantics.
♻️ Code Refactoring
  • aichat: Move permissions to captain, carry whole operations (e141c35)
  • markdown: split markdown rendering into focused modules (7167cad)
⚡ Performance Improvements
  • task: cache completed external run snapshots (3e8ed60)
✅ Tests
  • cmd: locate the example fixture without runtime.Caller (2088167)
✨ Features
  • api: add markdown dialect support with options propagation (873c858)
  • api: Add structured error responses with OpenTelemetry tracing (afef807)
  • entity: Add comprehensive error responses and action lookup support (a0ab0a1)
  • flags: add enum tag support for closed-set flag values (e4d0cc8)
  • task: Add stop control to task groups without explicit controllers (59c3e20)
🐛 Bug Fixes
  • mcp: honor XDG_CONFIG_HOME when locating the server registry (ed69784)
  • rpc: keep a classified error's status on the legacy surface (43aea34)
📦 Build System
  • aichat: pin captain v0.0.53 for the tool-strategy API (0987235)
  • examples: refresh the entity demo's module pins (fef09a2)
🔧 Maintenance
  • release: pin sub-modules to v1.21.58 [skip ci] (03124e1)
flanksource/commons (github.com/flanksource/commons)

v1.59.0

Compare Source

Features
  • http: add defensive HTTP client with network destination restrictions (4500ffa)
  • http: Increase HAR max body size to 4 MiB and enhance body truncation handling (8227ba8)
  • properties: Add type metadata tracking and new property accessors (3baf579)
BREAKING CHANGES
  • http: Configuration property renamed from http.har.maxBodySize to http.har.response.body.length; default increased from 65536 to 4194304 bytes

Claude-Session-Id: 01a046f-4293-7391-b920-187a7083ba68

v1.58.0

Compare Source

Features
  • properties: expose typed defaults and value metadata (51f41fc)
flanksource/commons-db (github.com/flanksource/commons-db)

v0.1.31

Compare Source

What's Changed

Full Changelog: v0.1.30...v0.1.31

v0.1.30

Compare Source

What's Changed

Full Changelog: v0.1.29...v0.1.30

v0.1.29

Compare Source

What's Changed

Full Changelog: v0.1.28...v0.1.29

v0.1.28

Compare Source

What's Changed

Full Changelog: v0.1.27...v0.1.28

flanksource/deps (github.com/flanksource/deps)

v1.0.42

Compare Source

Bug Fixes
  • start: accept ready state before supervisor exit (ce24920)

v1.0.41

Compare Source

Bug Fixes
  • config: resolve controller-gen release binaries (3f9ac32)

v1.0.40

Compare Source

Bug Fixes
  • check installed binaries before remote version resolution (#​78) (20e9584)
flanksource/gomplate (github.com/flanksource/gomplate/v3)

v3.24.89

Compare Source

Bug Fixes
  • nilsafe: preserve null for missing temporal values (2ba574c)
Code Refactoring
  • genmonarch: Consolidate generated language definitions into one JSON artifact (c5123f8)
Features
  • cel: add flexible cast helpers and normalize expression results (470b1b7)
  • cel: preserve native values and cap regex programs (68d2759)
  • lang: add generated conversion functions and pre-validation build hooks (a16dac4)
  • monarch: add grammar-driven Monarch language bundle generation (1f828b3)
  • playground: add embeddable expression playground API (4e9f969)
  • web: add Monaco language tooling and interactive playground (acab448)
  • web: add playground tooling and generated language definitions (5bacde9)
BREAKING CHANGES
  • nilsafe: temporal comparisons with null now propagate null instead of returning epoch-based booleans.
  • genmonarch: Remove per-language *.monarch.json and *.config.json artifacts; consumers must use languages.json or the generated definitions export

Claude-Session-Id: 36467eb-f368-4040-bc75-e28248497b4c

v3.24.88

Compare Source

v3.24.87

Compare Source

v3.24.86

Compare Source

Bug Fixes

v3.24.85

Compare Source

Bug Fixes
  • bump actions/upload-artifact to v4 in scorecard workflow (#​168) (a707d59)
  • ci: replace disabled semantic release action (f8d783c)
  • conv: correct bounds check in ToInt to prevent unsafe integer conversion (#​166) (808f419)
  • resolve high-severity CodeQL findings (#​165) (62d3b94), closes hi#severity
  • resolve remaining CodeQL code-scanning alerts (#​167) (83d82e2)
  • upgrade Scorecard action for Sigstore compatibility (#​169) (5d0587e)
Features
  • cel: add opt-in native evaluation tracking (a4a7fc6)
flanksource/is-healthy (github.com/flanksource/is-healthy)

v1.0.92

Compare Source

v1.0.91

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@flanksource-ci-runner
flanksource-ci-runner Bot force-pushed the renovate-flanksource/flanksource-go-dependencies branch 4 times, most recently from 59c2642 to 3782624 Compare July 27, 2026 15:29
@flanksource-ci-runner

flanksource-ci-runner Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: cmd/query/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 71 additional dependencies were updated

Details:

Package Change
github.com/onsi/ginkgo/v2 v2.28.1 -> v2.32.1
github.com/onsi/gomega v1.39.1 -> v1.42.1
k8s.io/apimachinery v0.36.1 -> v0.36.2
cloud.google.com/go/iam v1.5.3 -> v1.7.0
cloud.google.com/go/longrunning v0.8.0 -> v0.9.0
cloud.google.com/go/storage v1.59.2 -> v1.62.3
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.1 -> v1.22.0
github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0 -> v1.7.2
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.54.0 -> v0.55.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.54.0 -> v0.55.0
github.com/Masterminds/semver/v3 v3.4.0 -> v3.5.0
github.com/ProtonMail/go-crypto v1.1.6 -> v1.3.0
github.com/agext/levenshtein v1.2.1 -> v1.2.3
github.com/aws/aws-sdk-go-v2 v1.41.6 -> v1.42.0
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.8 -> v1.7.13
github.com/aws/aws-sdk-go-v2/config v1.32.16 -> v1.32.25
github.com/aws/aws-sdk-go-v2/credentials v1.19.15 -> v1.19.24
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.22 -> v1.18.29
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.22 -> v1.4.29
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.22 -> v2.7.29
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.23 -> v1.4.30
github.com/aws/aws-sdk-go-v2/service/eks v1.74.2 -> v1.84.6
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.8 -> v1.13.12
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.13 -> v1.9.18
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.22 -> v1.13.29
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.21 -> v1.19.25
github.com/aws/aws-sdk-go-v2/service/kms v1.41.2 -> v1.50.3
github.com/aws/aws-sdk-go-v2/service/s3 v1.97.3 -> v1.102.2
github.com/aws/aws-sdk-go-v2/service/signin v1.0.10 -> v1.2.0
github.com/aws/aws-sdk-go-v2/service/sso v1.30.16 -> v1.31.3
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.20 -> v1.36.6
github.com/aws/aws-sdk-go-v2/service/sts v1.42.0 -> v1.43.3
github.com/aws/smithy-go v1.25.0 -> v1.27.1
github.com/bmatcuk/doublestar/v4 v4.9.1 -> v4.10.0
github.com/charmbracelet/lipgloss v1.1.0 -> v1.1.1-0.20250404203927-76690c660834
github.com/eko/gocache/lib/v4 v4.2.2 -> v4.2.3
github.com/eko/gocache/store/go_cache/v4 v4.2.2 -> v4.2.5
github.com/exaring/otelpgx v0.9.3 -> v0.11.1
github.com/fsnotify/fsnotify v1.9.0 -> v1.10.1
github.com/geoffgarside/ber v1.1.0 -> v1.2.0
github.com/go-git/go-git/v5 v5.19.1 -> v5.19.2
github.com/go-openapi/inflect v0.19.0 -> v0.21.5
github.com/go-openapi/jsonpointer v0.22.4 -> v0.22.5
github.com/go-openapi/swag v0.23.1 -> v0.25.4
github.com/google/cel-go v0.27.0 -> v0.31.0
github.com/hashicorp/hcl/v2 v2.13.0 -> v2.24.0
github.com/jackc/pgerrcode v0.0.0-20240316143900-6e2875d9b438 -> v0.0.0-20250907135507-afb5586c32a6
github.com/jackc/pgx/v5 v5.10.0 -> v5.10.0
github.com/kevinburke/ssh_config v1.2.0 -> v1.4.0
github.com/klauspost/compress v1.18.3 -> v1.18.7
github.com/labstack/echo/v4 v4.14.0 -> v4.15.2
github.com/labstack/gommon v0.4.2 -> v0.5.0
github.com/lib/pq v1.10.9 -> v1.12.3
github.com/mattn/go-isatty v0.0.20 -> v0.0.22
github.com/mitchellh/go-wordwrap v0.0.0-20150314170334-ad45545899c7 -> v1.0.1
github.com/pierrec/lz4/v4 v4.1.25 -> v4.1.26
github.com/pkg/sftp v1.13.6 -> v1.13.10
github.com/prometheus/common v0.67.5 -> v0.68.1
github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 -> v6.0.3
github.com/skeema/knownhosts v1.3.1 -> v1.3.2
github.com/spf13/cast v1.7.1 -> v1.10.0
github.com/zclconf/go-cty v1.14.4 -> v1.18.1
github.com/zclconf/go-cty-yaml v1.1.0 -> v1.2.0
gocloud.dev v0.43.0 -> v0.46.0
golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f -> v0.0.0-20260527015227-08cc5374adb3
golang.org/x/mod v0.36.0 -> v0.37.0
golang.org/x/sync v0.21.0 -> v0.22.0
golang.org/x/text v0.38.0 -> v0.40.0
golang.org/x/tools v0.45.0 -> v0.47.0
k8s.io/streaming v0.36.1 -> v0.36.2
modernc.org/libc v1.72.3 -> v1.74.1

@flanksource-ci-runner
flanksource-ci-runner Bot force-pushed the renovate-flanksource/flanksource-go-dependencies branch 12 times, most recently from d7c7173 to 8d03bd7 Compare August 3, 2026 15:35
@flanksource-ci-runner
flanksource-ci-runner Bot force-pushed the renovate-flanksource/flanksource-go-dependencies branch 11 times, most recently from 0f797d1 to 57d4379 Compare August 10, 2026 14:00
@flanksource-ci-runner
flanksource-ci-runner Bot force-pushed the renovate-flanksource/flanksource-go-dependencies branch from 57d4379 to be51eef Compare August 11, 2026 05:45
@flanksource-ci-runner
flanksource-ci-runner Bot force-pushed the renovate-flanksource/flanksource-go-dependencies branch 11 times, most recently from f6f99e7 to 7777c4c Compare August 26, 2026 06:34
@github-actions

github-actions Bot commented Aug 26, 2026

Copy link
Copy Markdown

Gavel summary

Source Pass Fail Skip Duration
(unknown) 0 0 1 -

Totals: 0 passed · 0 failed · 1 skipped · -

View full results

@github-actions

github-actions Bot commented Aug 26, 2026

Copy link
Copy Markdown

Gavel summary

Source Pass Fail Skip Duration
e2e 121 0 0 502ms

Totals: 121 passed · 0 failed · 0 skipped · 502ms

View full results

@github-actions

github-actions Bot commented Aug 26, 2026

Copy link
Copy Markdown

Gavel results

Gavel exited with code 1.

View full results

@flanksource-ci-runner
flanksource-ci-runner Bot force-pushed the renovate-flanksource/flanksource-go-dependencies branch 5 times, most recently from 2002024 to 285d77f Compare September 1, 2026 21:29
@flanksource-ci-runner
flanksource-ci-runner Bot force-pushed the renovate-flanksource/flanksource-go-dependencies branch 4 times, most recently from 336747c to 31183d7 Compare September 4, 2026 04:36
@socket-security

socket-security Bot commented Sep 4, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: golang modernc.org/libc is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: cmd/query/go.modgolang/modernc.org/sqlite@v1.55.0golang/modernc.org/libc@v1.74.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/modernc.org/libc@v1.74.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: golang modernc.org/libc is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: cmd/query/go.modgolang/modernc.org/sqlite@v1.55.0golang/modernc.org/libc@v1.74.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/modernc.org/libc@v1.74.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@flanksource-ci-runner
flanksource-ci-runner Bot force-pushed the renovate-flanksource/flanksource-go-dependencies branch 5 times, most recently from 0a3a79a to 95f79da Compare September 8, 2026 13:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants