chore(deps): update flanksource go dependencies

[flanksource-ci-runner]

This PR contains the following updates:

Package	Type	Update	Change
github.com/flanksource/clicky	require	patch	v1.21.48 → v1.21.53
github.com/flanksource/commons	require	minor	v1.53.1 → v1.54.1
github.com/flanksource/gomplate/v3	indirect	patch	v3.24.84 → v3.24.86

---

Release Notes

flanksource/clicky (github.com/flanksource/clicky)

v1.21.53

Compare Source

⚠ BREAKING CHANGES

• api: Change AddTiming to accept TimingMetric instead of separate name and duration arguments

• build(examples): Update Clicky dependency to v1.21.52

✨ Features

• api: support timing counters (#​172) (1d67dc6)

🔧 Maintenance

• release: pin sub-modules to v1.21.52 [skip ci] (43a37b8)

v1.21.52

Compare Source

⚠ BREAKING CHANGES

• api: Change AddTiming to accept TimingMetric instead of separate name and duration arguments

• build(examples): Update Clicky dependency to v1.21.52

✨ Features

• api: support timing counters (#​172) (1d67dc6)

🔧 Maintenance

• release: pin sub-modules to v1.21.52 [skip ci] (43a37b8)

v1.21.51

Compare Source

✨ Features

• api: Support contextual entity actions and structured error responses (6fb040f)

🔧 Maintenance

• deps: Update entity example to clicky v1.21.51 (9aede06)
• deps: update Go module dependencies (f78abda)
• release: pin sub-modules to v1.21.51 [skip ci] (b4553fe)

v1.21.50

Compare Source

📦 Build System

• deps: bump the go_modules group across 2 directories with 1 update (34a8e24)

🔧 Maintenance

• release: pin sub-modules to v1.21.50 [skip ci] (6773025)

v1.21.49

Compare Source

🔧 Maintenance

• deps: update flanksource go dependencies (8bc3adc)
• release: pin sub-modules to v1.21.49 [skip ci] (394ddf5)

flanksource/commons (github.com/flanksource/commons)

v1.54.1

Compare Source

Bug Fixes

• pin gavel (84ca9f9)

v1.54.0

Compare Source

Bug Fixes

• deps: update Excelize to v2.11.0 (bda2a73)
• http: redact credentials in request logs (CodeQL clear-text logging) (#​328) (2bd9574)
• lint,test: use reflect.Pointer and remove TLS test races (516bc6d)
• security: mark HTTP trace redaction helpers as CodeQL barriers (#​329) (6105b11)
• security: remediate high severity insights (a599996)

Features

• add configurable redaction of custom body keys and query parameters (51910b8)

flanksource/gomplate (github.com/flanksource/gomplate/v3)

v3.24.86

Compare Source

Bug Fixes

• pin dependencies (796e67d)

v3.24.85

Compare Source

Bug Fixes

• bump actions/upload-artifact to v4 in scorecard workflow (#​168) (a707d59)
• ci: replace disabled semantic release action (f8d783c)
• conv: correct bounds check in ToInt to prevent unsafe integer conversion (#​166) (808f419)
• resolve high-severity CodeQL findings (#​165) (62d3b94), closes hi#severity
• resolve remaining CodeQL code-scanning alerts (#​167) (83d82e2)
• upgrade Scorecard action for Sigstore compatibility (#​169) (5d0587e)

Features

• cel: add opt-in native evaluation tracking (a4a7fc6)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[flanksource-ci-runner]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 9 additional dependencies were updated

Details:

Package	Change
github.com/yuin/goldmark	v1.7.16 -> v1.7.17
go.opentelemetry.io/otel	v1.43.0 -> v1.44.0
go.opentelemetry.io/otel/exporters/stdout/stdouttrace	v1.42.0 -> v1.44.0
go.opentelemetry.io/otel/metric	v1.43.0 -> v1.44.0
go.opentelemetry.io/otel/sdk	v1.43.0 -> v1.44.0
go.opentelemetry.io/otel/trace	v1.43.0 -> v1.44.0
golang.org/x/exp	v0.0.0-20260312153236-7ab1446f8b90 -> v0.0.0-20260410095643-746e56fc9e2f
google.golang.org/genproto/googleapis/api	v0.0.0-20260401024825-9d38bb4040a9 -> v0.0.0-20260526163538-3dc84a4a5aaa
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260414002931-afd174a4e478 -> v0.0.0-20260622175928-b703f567277d