chore(release): prepare for v0.9.8

goreleaser's gitea_urls.api still pointed at the AWS in-cluster service (gitea-http.gitea.svc.cluster.local), which does not resolve from the Frostmoln runner. Use https://git.unbound.se/api/v1. Also drop RELEASE_TOKEN_FILE=/runner-secrets/release-token (the AWS runner mount); the Frostmoln runner exports RELEASE_TOKEN_FILE itself.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu
Reviewed-on: #997

.gitea/workflows/ci.yaml

@@ -61,11 +61,15 @@ jobs:
         with:
           version: '~> v2'
           args: check
-      - name: Test release build
+      - name: Install goreleaser
         uses: goreleaser/goreleaser-action@v7
         with:
           version: '~> v2'
-          args: release --snapshot --clean
+          install-only: true
+      # Without the runner's GOCACHEPROG (gobuildcache): goreleaser's parallel
+      # go builds contend for its per-entry locks and time out.
+      - name: Test release build
+        run: env -u GOCACHEPROG goreleaser release --snapshot --clean
 
   build:
     needs: [check, vulnerabilities, check-release]

.gitea/workflows/goreleaser.yaml

@@ -5,9 +5,6 @@ on:
     tags:
       - 'v*'
 
-env:
-  RELEASE_TOKEN_FILE: /runner-secrets/release-token
-
 jobs:
   release:
     runs-on: ubuntu-latest
@@ -24,10 +21,11 @@ jobs:
       - name: Install goreleaser
         uses: goreleaser/goreleaser-action@v7
         with:
-          version: 'v2.18.2'
+          version: 'v2.18.3'
           install-only: true
       - name: Release
         run: |
           GITEA_TOKEN=$(cat "${RELEASE_TOKEN_FILE}")
           export GITEA_TOKEN
-          goreleaser release --clean
+          # Without GOCACHEPROG: parallel builds contend for gobuildcache's locks.
+          env -u GOCACHEPROG goreleaser release --clean

.goreleaser.yml

@@ -2,7 +2,7 @@ project_name: unbound-schemas
 version: 2
 
 gitea_urls:
-  api: http://gitea-http.gitea.svc.cluster.local:3000/api/v1
+  api: https://git.unbound.se/api/v1
   download: https://gitea.unbound.se
 
 env:

.version

@@ -1,3 +1,3 @@
 {
-  "version": "v0.9.7"
+  "version": "v0.9.8"
 }

CHANGELOG.md

@@ -2,7 +2,161 @@
 
 All notable changes to this project will be documented in this file.
 
-## [0.9.7] - 2026-05-11
+## [0.9.8] - 2026-10-13
+
+### 🐛 Bug Fixes
+
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.2.0 (#835)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.3.0 (#836)
+- *(deps)* Update module github.com/auth0/go-jwt-middleware/v3 to v3.2.0 (#837)
+- *(k8s)* Point OTEL endpoint to k8s-monitoring-alloy service (#839)
+- Raise Node heap cap to 512MB and bump pod memory limit (#838)
+- *(k8s)* Raise schemas CPU request from 20m to 100m (#840)
+- *(k8s)* Add scaleUp/scaleDown stabilization to schemas HPA (#844)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.3.1 (#845)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.0 (#846)
+- *(deps)* Update module golang.org/x/crypto to v0.52.0 (#848)
+- *(deps)* Update eventsourced (#849)
+- *(deps)* Update module gitlab.com/unboundsoftware/eventsourced/pg to v1.20.0 (#850)
+- Bump eventsourced/pg to v2.0.2 and harden startup error logging (#851)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.1 (#852)
+- *(deps)* Update module go.opentelemetry.io/contrib/bridges/otelslog to v0.19.0 (#854)
+- *(deps)* Update opentelemetry-go monorepo (#853)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.2 (#856)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.3 (#857)
+- *(deps)* Update module golang.org/x/sync to v0.21.0 (#858)
+- *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.34 (#860)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.4 (#862)
+- *(deps)* Update module golang.org/x/crypto to v0.53.0 (#863)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.5 (#865)
+- *(deps)* Update module github.com/99designs/gqlgen to v0.17.91 (#864)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.6 (#866)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.5.0 (#869)
+- *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.35 (#871)
+- *(deps)* Update module github.com/99designs/gqlgen to v0.17.92 (#873)
+- *(deps)* Update module github.com/99designs/gqlgen to v0.17.93 (#876)
+- *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.36 (#877)
+- *(deps)* Update module github.com/pressly/goose/v3 to v3.27.2 (#878)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.5.1 (#879)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.6.0 (#880)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.7.0 (#881)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.8.0 (#882)
+- *(deps)* Update module golang.org/x/sync to v0.22.0 (#883)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.9.0 (#884)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.9.1 (#885)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.9.2 (#886)
+- *(deps)* Update module golang.org/x/crypto to v0.54.0 (#888)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.10.0 (#890)
+- *(deps)* Update module github.com/99designs/gqlgen to v0.17.94 (#889)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.11.0 (#892)
+- *(deps)* Update module github.com/alecthomas/kong to v1.16.0 (#894)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.12.0 (#895)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.12.1 (#896)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.13.0 (#899)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.13.1 (#900)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.13.2 (#901)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.14.0 (#903)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.14.1 (#904)
+- *(deps)* Update module github.com/pressly/goose/v3 to v3.27.3 (#905)
+- *(deps)* Update module github.com/auth0/go-jwt-middleware/v3 to v3.3.0 (#907)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.14.2 (#908)
+- *(deps)* Update opentelemetry-go monorepo (#909)
+- *(deps)* Update module go.opentelemetry.io/contrib/bridges/otelslog to v0.20.0 (#911)
+- *(deps)* Update module github.com/alecthomas/kong to v1.16.1 (#914)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.15.0 (#915)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.15.1 (#917)
+- *(deps)* Update module golang.org/x/crypto to v0.55.0 (#918)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.16.0 (#919)
+- *(deps)* Update module github.com/stretchr/testify to v1.12.0 (#920)
+- *(deps)* Update module github.com/stretchr/testify to v1.12.1 (#923)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.17.0 (#925)
+- *(deps)* Update opentelemetry-go monorepo (#929)
+- *(deps)* Update module go.opentelemetry.io/contrib/bridges/otelslog to v0.20.1 (#930)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.18.0 (#932)
+- *(deps)* Update module golang.org/x/crypto to v0.56.0 [security] (#934)
+- *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.37 (#935)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.19.0 (#936)
+- *(deps)* Update module github.com/pressly/goose/v3 to v3.28.0 (#938)
+- *(deps)* Update module github.com/99designs/gqlgen to v0.17.95 (#937)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.20.0 (#939)
+- *(deps)* Update module golang.org/x/sync to v0.23.0 (#940)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.20.2 (#943)
+- *(deps)* Update module golang.org/x/crypto to v0.57.0 (#945)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.20.3 (#947)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.21.0 (#957)
+- *(deps)* Update module codeberg.org/messaging/go-messaging-amqp to v0.0.6 (#959)
+- *(deps)* Update module codeberg.org/eventsourced/pg/v2 to v2.2.0 (#961)
+- *(deps)* Update module codeberg.org/eventsourced/pg/v2 to v2.2.1 (#963)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.21.1 (#964)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.22.0 (#970)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.22.1 (#972)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.23.0 (#974)
+- *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.58 (#976)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.24.0 (#977)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.25.0 (#982)
+- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.26.0 (#984)
+- *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.59 (#988)
+- *(deps)* Update module codeberg.org/eventsourced/pg/v2 to v2.3.0 (#991)
+- *(deps)* Update opentelemetry-go monorepo (#990)
+- *(monitoring)* Use otel.SetLoggerProvider (#998)
+- *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.60 (#995)
+- *(deps)* Update module go.opentelemetry.io/contrib/bridges/otelslog to v0.21.0 (#993)
+- Release to the Gitea API on its public URL (#997)
+- *(deps)* Update module golang.org/x/crypto to v0.58.0 (#1010)
+- *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.61 (#1007)
+
+### 🚜 Refactor
+
+- Migrate eventsourced to codeberg and go-messaging-amqp (#949)
+
+### ⚡ Performance
+
+- *(graph)* Cache merged SDL and SchemaUpdate per ref (#841)
+- *(graph)* Warm schema cache on startup to kill cold-start spikes (#843)
+
+### ⚙️ Miscellaneous Tasks
+
+- *(deps)* Update golang:1.26.3 docker digest to 54d3246 (#842)
+- *(deps)* Update node.js to v24.16.0 (#847)
+- *(deps)* Update golang docker tag to v1.26.4 (#855)
+- *(deps)* Update node.js to fb71d01 (#859)
+- *(deps)* Update golang:1.26.4 docker digest to 62df9f3 (#861)
+- *(deps)* Update node.js to 21f403a (#867)
+- *(deps)* Update actions/checkout action to v7 (#868)
+- *(deps)* Update node.js to v24.17.0 (#870)
+- *(deps)* Update golang:1.26.4 docker digest to f83d235 (#872)
+- *(deps)* Update pre-commit hook alessandrojcm/commitlint-pre-commit-hook to v9.26.0 (#874)
+- *(deps)* Update node.js to v24.18.0 (#875)
+- *(deps)* Update golang docker tag to v1.26.5 (#887)
+- *(deps)* Update golang:1.26.5 docker digest to adde241 (#891)
+- *(deps)* Update actions/setup-go action to v7 (#897)
+- *(deps)* Update actions/setup-node action to v7 (#893)
+- *(deps)* Update actions/setup-python action to v7 (#902)
+- *(deps)* Update node.js to v24.18.1 (#906)
+- *(deps)* Update node.js to v24.19.0 (#910)
+- *(deps)* Update golang:1.26.5 docker digest to 046e320 (#912)
+- *(deps)* Update golang:1.26.5 docker digest to e8ab809 (#913)
+- *(deps)* Update golang docker tag to v1.26.6 (#916)
+- *(deps)* Update golang docker tag to v1.26.7 (#921)
+- *(deps)* Update golang docker tag to v1.27.0 (#922)
+- *(deps)* Update pre-commit hook golangci/golangci-lint to v2.13.1 (#924)
+- *(deps)* Update golang:1.27.0 docker digest to 47526c1 (#926)
+- *(deps)* Update node.js to v24.20.0 (#927)
+- *(deps)* Update node.js to e67514e (#928)
+- *(deps)* Update pre-commit hook golangci/golangci-lint to v2.13.2 (#931)
+- *(deps)* Update golang docker tag to v1.27.1 (#933)
+- *(deps)* Update node.js to v24.21.0 (#941)
+- *(deps)* Update node.js to 4b2d7ee (#951)
+- *(deps)* Update node.js to ebfe2f9 (#953)
+- *(deps)* Update golang:1.27.1 docker digest to 2c9f73f (#955)
+- *(deps)* Update dependency goreleaser/goreleaser to v2.18.2 (#965)
+- *(deps)* Update pre-commit hook alessandrojcm/commitlint-pre-commit-hook to v9.27.0 (#968)
+- *(deps)* Update pre-commit hook golangci/golangci-lint to v2.14.0 (#980)
+- *(k8s)* Take the image reference from build-tools (#986)
+- *(deps)* Update golang:1.27.1 docker digest to 45639bc (#996)
+- *(deps)* Update golang docker tag to v1.27.2 (#1004)
+
+## [0.9.7] - 2026-05-14
 
 ### 🐛 Bug Fixes
 

Dockerfile

@@ -1,4 +1,4 @@
-FROM amd64/golang:1.27.1@sha256:2c9f73fbc9fe381c63ba57bcbab4ea1c9135604011985a0891bc5fe5d1febfca as modules
+FROM amd64/golang:1.27.2@sha256:9e036bef9c3cd035cae4aeff523b3997c3c8aa993b13d112a71ea90143e87e48 as modules
 WORKDIR /build
 ADD go.* /build
 RUN go mod download

go.mod

@@ -19,7 +19,7 @@ require (
 	github.com/pressly/goose/v3 v3.28.0
 	github.com/rs/cors v1.11.1
 	github.com/stretchr/testify v1.12.1
-	github.com/vektah/gqlparser/v2 v2.5.59
+	github.com/vektah/gqlparser/v2 v2.5.62
 	github.com/wundergraph/graphql-go-tools/v2 v2.26.0
 	go.opentelemetry.io/contrib/bridges/otelslog v0.21.0
 	go.opentelemetry.io/otel v1.47.0
@@ -30,8 +30,8 @@ require (
 	go.opentelemetry.io/otel/sdk/log v1.47.0
 	go.opentelemetry.io/otel/sdk/metric v1.47.0
 	go.opentelemetry.io/otel/trace v1.47.0
-	golang.org/x/crypto v0.57.0
+	golang.org/x/crypto v0.58.0
-	golang.org/x/sync v0.23.0
+	golang.org/x/sync v0.24.0
 	gopkg.in/yaml.v3 v3.0.1
 )
 
@@ -87,10 +87,10 @@ require (
 	go.yaml.in/yaml/v2 v2.4.2 // indirect
 	go.yaml.in/yaml/v3 v3.0.5 // indirect
 	golang.org/x/mod v0.41.0 // indirect
-	golang.org/x/net v0.59.0 // indirect
+	golang.org/x/net v0.60.0 // indirect
-	golang.org/x/sys v0.48.0 // indirect
+	golang.org/x/sys v0.49.0 // indirect
-	golang.org/x/text v0.42.0 // indirect
+	golang.org/x/text v0.43.0 // indirect
-	golang.org/x/tools v0.49.0 // indirect
+	golang.org/x/tools v0.51.0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20260928230214-8a89bd6388cc // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20260928230214-8a89bd6388cc // indirect
 	google.golang.org/grpc v1.83.2 // indirect

go.sum

@@ -217,8 +217,8 @@ github.com/urfave/cli/v3 v3.11.0 h1:P/euJp99kb9p0tlVY+iYTLYYTAQlfl0hR2gUO1Img1Q=
 github.com/urfave/cli/v3 v3.11.0/go.mod h1:ysVLtOEmg2tOy6PknnYVhDoouyC/6N42TMeoMzskhso=
 github.com/valyala/fastjson v1.6.7 h1:ZE4tRy0CIkh+qDc5McjatheGX2czdn8slQjomexVpBM=
 github.com/valyala/fastjson v1.6.7/go.mod h1:CLCAqky6SMuOcxStkYQvblddUtoRxhYMGLrsQns1aXY=
-github.com/vektah/gqlparser/v2 v2.5.59 h1:7BfPIupBJ2yIKxD91/zv30d6chKQkerS4ylKmVy8r4g=
+github.com/vektah/gqlparser/v2 v2.5.62 h1:GJP/emj1wIWKs0U3SHcAgzknWgylTqQ1qH2gNL+wSWc=
-github.com/vektah/gqlparser/v2 v2.5.59/go.mod h1:JNK+plRwKdXLsF/qPFPe5tE0z4s1WeroD9S5LR8um/Q=
+github.com/vektah/gqlparser/v2 v2.5.62/go.mod h1:JNK+plRwKdXLsF/qPFPe5tE0z4s1WeroD9S5LR8um/Q=
 github.com/wundergraph/astjson v1.1.0 h1:xORDosrZ87zQFJwNGe/HIHXqzpdHOFmqWgykCLVL040=
 github.com/wundergraph/astjson v1.1.0/go.mod h1:h12D/dxxnedtLzsKyBLK7/Oe4TAoGpRVC9nDpDrZSWw=
 github.com/wundergraph/go-arena v1.3.0 h1:n0ng5a1vbd8YGq1u3rMr0vPU5f6AZ1BXIiUhL1UIok8=
@@ -267,31 +267,31 @@ go.yaml.in/yaml/v3 v3.0.5 h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw=
 go.yaml.in/yaml/v3 v3.0.5/go.mod h1:HVTZu1O7/Vkt2N+BFy8Zza+lnLsABggaTM2ZpNIGuKg=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20190426145343-a29dc8fdc734/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
-golang.org/x/crypto v0.57.0 h1:3ZVCjf8Ggz7zneR/EHRVx68Ctf+2pmIMP2UFhh9cC6M=
+golang.org/x/crypto v0.58.0 h1:COkYLr4k7nDI4r6QtMML2AfzeIswWHAJthLS6K/M/54=
-golang.org/x/crypto v0.57.0/go.mod h1:Fdz0i5U6CoizGwLda9DttjSk6qlZo25zYNtR+ycvuZA=
+golang.org/x/crypto v0.58.0/go.mod h1:Xh+kl5A+M0gMiWDytH2Hhr5Z7WbNCpv/eB/EFgfSk+w=
 golang.org/x/mod v0.41.0 h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c=
 golang.org/x/mod v0.41.0/go.mod h1:Ek9pY8RKWXwsWvd3rQiHYtMqkjSUV+s1Rj7j4H5Ur6o=
 golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.59.0 h1:5zfYln+w5XCxwrnMMJPufRgNoXEaGxl0wo5GqPXyues=
+golang.org/x/net v0.60.0 h1:79p50tfZlm0J9YfoDsSi639qSXNGVwEzOPLCxM2FsYU=
-golang.org/x/net v0.59.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg=
+golang.org/x/net v0.60.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.23.0 h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk=
+golang.org/x/sync v0.24.0 h1:iqiDrGoDgyuvAKrhLQthUEzU/R378N78gXbBjxed7oA=
-golang.org/x/sync v0.23.0/go.mod h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0=
+golang.org/x/sync v0.24.0/go.mod h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0=
 golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190222072716-a9d3bda3a223/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo=
+golang.org/x/sys v0.49.0 h1:XbzkgYJHdqh/8m2Uu0W/dQv8nktxx4BFHp1M0gROTXA=
-golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
+golang.org/x/sys v0.49.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
-golang.org/x/text v0.42.0 h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI=
+golang.org/x/text v0.43.0 h1:1QivrlhwAsnMOcqgOdl9my7s9OyZl8O5/UGUTJVXoWc=
-golang.org/x/text v0.42.0/go.mod h1:ojzP1Z+2QtioaF8DTtO8K5q7JWVVYwZKenzujK0Zd0E=
+golang.org/x/text v0.43.0/go.mod h1:hbSIYA/amXcRXTFSZqh8tWHEoqRvvbKPJ2uz/KU+a+s=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
-golang.org/x/tools v0.49.0 h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI=
+golang.org/x/tools v0.51.0 h1:k4Xc/1Om9jwkBJBo4NVLMSARBoWtK10mx+W5BnXCeAI=
-golang.org/x/tools v0.49.0/go.mod h1:SJNXV9DBKT0UbdttsQjbfJlAE/q+y36++zo3uL3N0Oo=
+golang.org/x/tools v0.51.0/go.mod h1:9eEncMayCV6zRMGhR5eZEC2iBx98qWcF1HZ9Z7wJOoA=
 gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=
 gonum.org/v1/gonum v0.17.0/go.mod h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E=
 google.golang.org/genproto/googleapis/api v0.0.0-20260928230214-8a89bd6388cc h1:rZHRz0ogq4Pid1IKtA/ivHi8XONVF5tqUQXA2TtgpkE=