chore(deps): update flanksource go dependencies

[flanksource-ci-runner]

This PR contains the following updates:

Package	Type	Update	Change
github.com/flanksource/commons	indirect	minor	v1.53.1 → v1.57.0
github.com/flanksource/gomplate/v3	indirect	patch	v3.24.84 → v3.24.89
github.com/flanksource/is-healthy	indirect	patch	v1.0.88 → v1.0.91

---

Release Notes

flanksource/commons (github.com/flanksource/commons)

v1.57.0

Compare Source

Bug Fixes

• logger: preserve logger-specific JSON output mode (3a3deb9)
• Prevent logging and timeout regressions (3ee4af7)

Features

• har: support bounded collectors and selective entry details (c589ecd)

v1.56.0

Compare Source

Features

• http: add configurable connection establishment timeout (03b28f6)

v1.55.0

Compare Source

Features

• har: add property-driven HAR capture levels and sensitive mode (fd1293b)
• help: add shared runtime configuration help (a09cb96)

v1.54.1

Compare Source

Bug Fixes

• pin gavel (84ca9f9)

v1.54.0

Compare Source

Bug Fixes

• deps: update Excelize to v2.11.0 (bda2a73)
• http: redact credentials in request logs (CodeQL clear-text logging) (#​328) (2bd9574)
• lint,test: use reflect.Pointer and remove TLS test races (516bc6d)
• security: mark HTTP trace redaction helpers as CodeQL barriers (#​329) (6105b11)
• security: remediate high severity insights (a599996)

Features

• add configurable redaction of custom body keys and query parameters (51910b8)

flanksource/gomplate (github.com/flanksource/gomplate/v3)

v3.24.89

Compare Source

Bug Fixes

• nilsafe: preserve null for missing temporal values (2ba574c)

Code Refactoring

• genmonarch: Consolidate generated language definitions into one JSON artifact (c5123f8)

Features

• cel: add flexible cast helpers and normalize expression results (470b1b7)
• cel: preserve native values and cap regex programs (68d2759)
• lang: add generated conversion functions and pre-validation build hooks (a16dac4)
• monarch: add grammar-driven Monarch language bundle generation (1f828b3)
• playground: add embeddable expression playground API (4e9f969)
• web: add Monaco language tooling and interactive playground (acab448)
• web: add playground tooling and generated language definitions (5bacde9)

BREAKING CHANGES

• nilsafe: temporal comparisons with null now propagate null instead of returning epoch-based booleans.
• genmonarch: Remove per-language *.monarch.json and *.config.json artifacts; consumers must use languages.json or the generated definitions export

Claude-Session-Id: 36467eb-f368-4040-bc75-e28248497b4c

v3.24.88

Compare Source

v3.24.87

Compare Source

v3.24.86

Compare Source

Bug Fixes

• pin dependencies (796e67d)

v3.24.85

Compare Source

Bug Fixes

• bump actions/upload-artifact to v4 in scorecard workflow (#​168) (a707d59)
• ci: replace disabled semantic release action (f8d783c)
• conv: correct bounds check in ToInt to prevent unsafe integer conversion (#​166) (808f419)
• resolve high-severity CodeQL findings (#​165) (62d3b94), closes hi#severity
• resolve remaining CodeQL code-scanning alerts (#​167) (83d82e2)
• upgrade Scorecard action for Sigstore compatibility (#​169) (5d0587e)

Features

• cel: add opt-in native evaluation tracking (a4a7fc6)

flanksource/is-healthy (github.com/flanksource/is-healthy)

v1.0.91

Compare Source

v1.0.90

Compare Source

Bug Fixes

• escalate stuck certificate issuance health (97979a2)
• respect active certificate issuance state (0609b0e)

v1.0.89

Compare Source

Bug Fixes

• deps: update golang.org/x/net to v0.55.0 (5effb5d)

Features

• cnpg support (2188b63)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[flanksource-ci-runner]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 19 additional dependencies were updated

Details:

Package	Change
github.com/cert-manager/cert-manager	v1.19.4 -> v1.20.0
github.com/golang/groupcache	v0.0.0-20210331224755-41bb18bfe9da -> v0.0.0-20241129210726-2c02b8208cf8
github.com/google/cel-go	v0.27.0 -> v0.31.0
github.com/itchyny/gojq	v0.12.18 -> v0.12.19
github.com/itchyny/timefmt-go	v0.1.7 -> v0.1.8
github.com/ohler55/ojg	v1.28.0 -> v1.28.1
go.opentelemetry.io/otel	v1.41.0 -> v1.44.0
go.opentelemetry.io/otel/trace	v1.41.0 -> v1.44.0
go.yaml.in/yaml/v2	v2.4.3 -> v2.4.4
golang.org/x/exp	v0.0.0-20260218203240-3dfff04db8fa -> v0.0.0-20260410095643-746e56fc9e2f
golang.org/x/net	v0.55.0 -> v0.56.0
golang.org/x/oauth2	v0.34.0 -> v0.36.0
golang.org/x/sync	v0.20.0 -> v0.21.0
golang.org/x/sys	v0.45.0 -> v0.46.0
golang.org/x/text	v0.37.0 -> v0.38.0
google.golang.org/genproto/googleapis/api	v0.0.0-20260226221140-a57be14db171 -> v0.0.0-20260526163538-3dc84a4a5aaa
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260226221140-a57be14db171 -> v0.0.0-20260622175928-b703f567277d
k8s.io/apimachinery	v0.36.1 -> v0.36.2
sigs.k8s.io/gateway-api	v1.5.0 -> v1.5.1