fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.62

chore(deps): update golang docker tag to v1.27.2 (#1004 )
fix: release to the Gitea API on its public URL (#997 )
2026-10-11 18:30:57 +00:00 · 2026-10-08 22:12:39 +00:00 · 2026-10-07 21:51:04 +00:00 · 2026-10-07 21:50:21 +00:00 · 2026-10-07 21:30:25 +00:00 · 2026-10-07 20:35:47 +00:00
10 changed files with 78 additions and 77 deletions
@@ -61,11 +61,15 @@ jobs:
        with:
          version: '~> v2'
          args: check
-      - name: Test release build
+      - name: Install goreleaser
        uses: goreleaser/goreleaser-action@v7
        with:
          version: '~> v2'
-          args: release --snapshot --clean
+          install-only: true
+      # Without the runner's GOCACHEPROG (gobuildcache): goreleaser's parallel
+      # go builds contend for its per-entry locks and time out.
+      - name: Test release build
+        run: env -u GOCACHEPROG goreleaser release --snapshot --clean

  build:
    needs: [check, vulnerabilities, check-release]
@@ -5,9 +5,6 @@ on:
    tags:
      - 'v*'

-env:
-  RELEASE_TOKEN_FILE: /runner-secrets/release-token
-
 jobs:
  release:
    runs-on: ubuntu-latest
@@ -30,4 +27,5 @@ jobs:
        run: |
          GITEA_TOKEN=$(cat "${RELEASE_TOKEN_FILE}")
          export GITEA_TOKEN
-          goreleaser release --clean
+          # Without GOCACHEPROG: parallel builds contend for gobuildcache's locks.
+          env -u GOCACHEPROG goreleaser release --clean
@@ -2,7 +2,7 @@ project_name: unbound-schemas
 version: 2

 gitea_urls:
-  api: http://gitea-http.gitea.svc.cluster.local:3000/api/v1
+  api: https://git.unbound.se/api/v1
  download: https://gitea.unbound.se

 env:
@@ -30,7 +30,7 @@ repos:
  - id: go-test
  - id: gofumpt
 - repo: https://github.com/golangci/golangci-lint
-  rev: v2.13.2
+  rev: v2.14.0
  hooks:
  - id: golangci-lint-full
 - repo: https://github.com/gitleaks/gitleaks
@@ -1,4 +1,4 @@
-FROM amd64/golang:1.27.1@sha256:2c9f73fbc9fe381c63ba57bcbab4ea1c9135604011985a0891bc5fe5d1febfca as modules
+FROM amd64/golang:1.27.2@sha256:9e036bef9c3cd035cae4aeff523b3997c3c8aa993b13d112a71ea90143e87e48 as modules
 WORKDIR /build
 ADD go.* /build
 RUN go mod download
@@ -5,7 +5,7 @@ go 1.26.0
 require (
 	codeberg.org/eventsourced/amqp v1.10.1
 	codeberg.org/eventsourced/eventsourced v1.24.0
-	codeberg.org/eventsourced/pg/v2 v2.2.1
+	codeberg.org/eventsourced/pg/v2 v2.3.0
 	codeberg.org/messaging/go-messaging-amqp v0.0.6
 	codeberg.org/messaging/messaging v0.0.5
 	github.com/99designs/gqlgen v0.17.95
@@ -19,18 +19,17 @@ require (
 	github.com/pressly/goose/v3 v3.28.0
 	github.com/rs/cors v1.11.1
 	github.com/stretchr/testify v1.12.1
-	github.com/vektah/gqlparser/v2 v2.5.58
-	github.com/wundergraph/graphql-go-tools/v2 v2.23.0
-	go.opentelemetry.io/contrib/bridges/otelslog v0.20.1
-	go.opentelemetry.io/otel v1.46.0
-	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.46.0
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.46.0
-	go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.22.0
-	go.opentelemetry.io/otel/log v0.22.0
-	go.opentelemetry.io/otel/sdk v1.46.0
-	go.opentelemetry.io/otel/sdk/log v0.22.0
-	go.opentelemetry.io/otel/sdk/metric v1.46.0
-	go.opentelemetry.io/otel/trace v1.46.0
+	github.com/vektah/gqlparser/v2 v2.5.62
+	github.com/wundergraph/graphql-go-tools/v2 v2.26.0
+	go.opentelemetry.io/contrib/bridges/otelslog v0.21.0
+	go.opentelemetry.io/otel v1.47.0
+	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.47.0
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.47.0
+	go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.23.0
+	go.opentelemetry.io/otel/sdk v1.47.0
+	go.opentelemetry.io/otel/sdk/log v1.47.0
+	go.opentelemetry.io/otel/sdk/metric v1.47.0
+	go.opentelemetry.io/otel/trace v1.47.0
 	golang.org/x/crypto v0.57.0
 	golang.org/x/sync v0.23.0
 	gopkg.in/yaml.v3 v3.0.1
@@ -80,19 +79,20 @@ require (
 	github.com/wundergraph/astjson v1.1.0 // indirect
 	github.com/wundergraph/go-arena v1.3.0 // indirect
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0 // indirect
-	go.opentelemetry.io/otel/metric v1.46.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.47.0 // indirect
+	go.opentelemetry.io/otel/log v1.47.0 // indirect
+	go.opentelemetry.io/otel/metric v1.47.0 // indirect
 	go.opentelemetry.io/proto/otlp v1.11.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.2 // indirect
 	go.yaml.in/yaml/v3 v3.0.5 // indirect
 	golang.org/x/mod v0.41.0 // indirect
-	golang.org/x/net v0.58.0 // indirect
+	golang.org/x/net v0.59.0 // indirect
 	golang.org/x/sys v0.48.0 // indirect
 	golang.org/x/text v0.42.0 // indirect
 	golang.org/x/tools v0.49.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20260831171406-18b4a7587f8a // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20260928230214-8a89bd6388cc // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20260928230214-8a89bd6388cc // indirect
 	google.golang.org/grpc v1.83.2 // indirect
 	google.golang.org/protobuf v1.36.12 // indirect
 )
@@ -2,8 +2,8 @@ codeberg.org/eventsourced/amqp v1.10.1 h1:nGSG+lKbq8ibr7p8WBqSfH12uROQb+UXKg6BFn
 codeberg.org/eventsourced/amqp v1.10.1/go.mod h1:qQLe1a9T56hrPc/lxtoXWTqU3fnsgulQ1j4luQLNpcg=
 codeberg.org/eventsourced/eventsourced v1.24.0 h1:yNB+74JNB/NHo7D8ZR/yQcTVDYrWnjFf0xUKLgViqRc=
 codeberg.org/eventsourced/eventsourced v1.24.0/go.mod h1:uy0HxejDdNFpI+Yp7VOEvjfEUFJQX1VkCZ4e4JyDp7Q=
-codeberg.org/eventsourced/pg/v2 v2.2.1 h1:WAZg40cX+lxwy3/NvJpxjG3am9mpQucywMmi9IcdOF4=
-codeberg.org/eventsourced/pg/v2 v2.2.1/go.mod h1:qPxl3382m7lbhbrEaxwSZ9PrAPoODj2+TqnV3tIKWzU=
+codeberg.org/eventsourced/pg/v2 v2.3.0 h1:g6kZ9DASeFrC8C+bDcXzbYD8409KHzWmyLOI5sCdNWI=
+codeberg.org/eventsourced/pg/v2 v2.3.0/go.mod h1:qPxl3382m7lbhbrEaxwSZ9PrAPoODj2+TqnV3tIKWzU=
 codeberg.org/messaging/go-messaging-amqp v0.0.6 h1:TAPcIspjjg44MNXwbcscW+ol1kIX49lnX2N3dsh0e0s=
 codeberg.org/messaging/go-messaging-amqp v0.0.6/go.mod h1:R4Hg1w964P7OP7vQ9AsXdd4KjgN/YlQ/9+XzXKpEVp4=
 codeberg.org/messaging/messaging v0.0.5 h1:/ueH90F4RNPUeeJIwdG9oVhDW7+XjCzwOYq8xc0kfQk=
@@ -217,44 +217,44 @@ github.com/urfave/cli/v3 v3.11.0 h1:P/euJp99kb9p0tlVY+iYTLYYTAQlfl0hR2gUO1Img1Q=
 github.com/urfave/cli/v3 v3.11.0/go.mod h1:ysVLtOEmg2tOy6PknnYVhDoouyC/6N42TMeoMzskhso=
 github.com/valyala/fastjson v1.6.7 h1:ZE4tRy0CIkh+qDc5McjatheGX2czdn8slQjomexVpBM=
 github.com/valyala/fastjson v1.6.7/go.mod h1:CLCAqky6SMuOcxStkYQvblddUtoRxhYMGLrsQns1aXY=
-github.com/vektah/gqlparser/v2 v2.5.58 h1:yHxQ3EjU2OGuDMh6noxxmZova1HkBM3CbdGtL+rvjOc=
-github.com/vektah/gqlparser/v2 v2.5.58/go.mod h1:9O4Ox6Ngd3Y12bMD3w6i3CRQXh8W1oC1q0m6olCymDM=
+github.com/vektah/gqlparser/v2 v2.5.62 h1:GJP/emj1wIWKs0U3SHcAgzknWgylTqQ1qH2gNL+wSWc=
+github.com/vektah/gqlparser/v2 v2.5.62/go.mod h1:JNK+plRwKdXLsF/qPFPe5tE0z4s1WeroD9S5LR8um/Q=
 github.com/wundergraph/astjson v1.1.0 h1:xORDosrZ87zQFJwNGe/HIHXqzpdHOFmqWgykCLVL040=
 github.com/wundergraph/astjson v1.1.0/go.mod h1:h12D/dxxnedtLzsKyBLK7/Oe4TAoGpRVC9nDpDrZSWw=
 github.com/wundergraph/go-arena v1.3.0 h1:n0ng5a1vbd8YGq1u3rMr0vPU5f6AZ1BXIiUhL1UIok8=
 github.com/wundergraph/go-arena v1.3.0/go.mod h1:ROOysEHWJjLQ8FSfNxZCziagb7Qw2nXY3/vgKRh7eWw=
-github.com/wundergraph/graphql-go-tools/v2 v2.23.0 h1:JOgFf04rNkD/uwZ+Ob5IAD/NA2jwH268hsWGR1lUukE=
-github.com/wundergraph/graphql-go-tools/v2 v2.23.0/go.mod h1:w/eZQt3znffRePA0raMhTjhKSgbt0Fywf26/p/B1uOQ=
+github.com/wundergraph/graphql-go-tools/v2 v2.26.0 h1:LkBu77I+Mp7lAfHulnHgug7W+nGnR6OeRD/YnBSUxeU=
+github.com/wundergraph/graphql-go-tools/v2 v2.26.0/go.mod h1:2+FpG5/GRCFYw+fU8jmid4bF+362KtCio5Fo7fzNvhU=
 go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64=
 go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=
-go.opentelemetry.io/contrib/bridges/otelslog v0.20.1 h1:5sHc4ToTFjfSZCtGAAM6jPunICAmJX73htv372T4ipc=
-go.opentelemetry.io/contrib/bridges/otelslog v0.20.1/go.mod h1:oa6kgvyz/3GYW04dohd0++xJIH4xdQY8PAbpeCMaM8M=
-go.opentelemetry.io/otel v1.46.0 h1:FHt5/CDyVxi/8IM1CH7VE/rRgq3kLHa2mSTVMO8AWyc=
-go.opentelemetry.io/otel v1.46.0/go.mod h1:Gj3SEScelsNC45tp4nSxRYlS+f5iez7W8XPMCt905kE=
-go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.46.0 h1:AP23h/mFgb/lc7tdck1Kfn9qxsM8TAeNPCU5C3pzaps=
-go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.46.0/go.mod h1:K4EqCe1b4kGk5WR690ntg9LaBfsPoV32FwthbyoptuA=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0 h1:OFnwLJr+pF3iHrlGSzbxyuo6/6HyBlnlN1CWEJmBVcw=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0/go.mod h1:716wFneO0ov19A2beH5hjfh9AK5z/VWNAtDijp1Y0/g=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.46.0 h1:KrC1YrQeSt46ITMWAbgQx1M1eV1/1TKzttrBzymPmss=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.46.0/go.mod h1:zDSEzoEqsOrgBeGvH66KRgxh90VonFyJqBHA0Pk3+rM=
-go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.22.0 h1:kvMAiLEudKmk+CSG+iYbU8vTUGNNDaf/V09OO5lrTwI=
-go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.22.0/go.mod h1:L9Dlksri+MdT1cb2gIiA1cJJYW3Y92ipvDjNxYEyaDI=
-go.opentelemetry.io/otel/log v0.22.0 h1:5DBNnfvaJ6CVdkJ+Jle8Tzs50aSSv49TXGj9XRsEYw0=
-go.opentelemetry.io/otel/log v0.22.0/go.mod h1:gzOt/R67vF2GniAqWu8Qv0SXy89f71muHcrkz76PCdc=
-go.opentelemetry.io/otel/metric v1.46.0 h1:yBnkXvgV7AXFILZc5K6IZe/CBFF3OS7BJ8ov6/lj0K8=
-go.opentelemetry.io/otel/metric v1.46.0/go.mod h1:iPmdWqifKUdzziPkvvzIJXITl56fQx2mGM/DHLB3/2o=
-go.opentelemetry.io/otel/metric/x v0.68.0 h1:TA/cBT23D3MnxYPwHL7YFOdYGdx0A0v+s7Mzotpd1dU=
-go.opentelemetry.io/otel/metric/x v0.68.0/go.mod h1:agudOmvWhwUTjgibWDzxD2PoWYnpw5Ht5jISYOD2Hd4=
-go.opentelemetry.io/otel/sdk v1.46.0 h1:h5CNQQjEbuQXY/JfZtgt3i7HVFV3aHPO2OAwO2eTYPI=
-go.opentelemetry.io/otel/sdk v1.46.0/go.mod h1:GAERFXFt5SYCEB+YiKUbMBeza6UaDH7GmGOZEfh2gSM=
-go.opentelemetry.io/otel/sdk/log v0.22.0 h1:PRL+s6P63XT4E/bheEflopPUpVxuvANqZwtt89yhoGk=
-go.opentelemetry.io/otel/sdk/log v0.22.0/go.mod h1:JNp0sBELrjCTcu5W3GzABVypeU6vDJjBS+X0JISuz+g=
-go.opentelemetry.io/otel/sdk/log/logtest v0.22.0 h1:infPnfNrhCNgOUZRs3gWUg8vhoBUHihq02gwK05gzlg=
-go.opentelemetry.io/otel/sdk/log/logtest v0.22.0/go.mod h1:gkQZA3z15Bv3KU9vigBTi8dFechSozRP7v94X4VZv+s=
-go.opentelemetry.io/otel/sdk/metric v1.46.0 h1:0piZ26EG4RBfebb2jhDH6ERCYHoVWduc3kLgPCwSnSE=
-go.opentelemetry.io/otel/sdk/metric v1.46.0/go.mod h1:I1PbKrdVc8Qu8HYVDNtqVIwLwjNrhsV/uFuxfwg8mO4=
-go.opentelemetry.io/otel/trace v1.46.0 h1:OULy7ccdJnZtJ0UDYFOIGaCmiWzJ8Vi2G/Rsu60qs1c=
-go.opentelemetry.io/otel/trace v1.46.0/go.mod h1:J7GAXweO77XSFkB/rmAqk9D6ihszhFjLU+d9WuUxDLI=
+go.opentelemetry.io/contrib/bridges/otelslog v0.21.0 h1:/CdgE52i1OEPHhsGUqrggYNRaZy4v4YgVenGd52dRBI=
+go.opentelemetry.io/contrib/bridges/otelslog v0.21.0/go.mod h1:9pBdbVbuehIDzxN4accnzzxEUPT8Nq7grbZMo+J1VN4=
+go.opentelemetry.io/otel v1.47.0 h1:j7ALJ/zgkS7Z6aeJW09p8VC9804bC+PpeTfCD4XPnOM=
+go.opentelemetry.io/otel v1.47.0/go.mod h1:8wS9O2qfXrYrzp6hIF/HOYJJf/wIhFPhR2xLuP+iXQU=
+go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.47.0 h1:7kszRN4Ze5GeAkUnBjBSUIunVBMA+mZIG04auueqguM=
+go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.47.0/go.mod h1:CLzakYy8jOdkBfcveCWYkeKJxujcF4xPhh2Z7IfE98U=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.47.0 h1:julhjPeUH/q/7hinbSdDdqt5h7Zw9YWmRlWRhI0jd54=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.47.0/go.mod h1:Ao2mz688LH/tFf0yMAenidq6k2YNSx6SIY2q6jDACck=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.47.0 h1:aXZXsZ012wOgVkqaiQv+Z/d8V0xKjmg70F6m4CE94lc=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.47.0/go.mod h1:ziu1gUIJhAaxM3EV1e3Ralk5AAyL1UOYz3lJJ4VSI38=
+go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.23.0 h1:PW/E9Tw6ZykC88pey0MZY8hKOUeEw+hX6PU+oXA4A9o=
+go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.23.0/go.mod h1:hUw4VNfiOnQ/yzGgy6ZdWVnudXw7iRfImhd6FjXOnvI=
+go.opentelemetry.io/otel/log v1.47.0 h1:cOTS1CcLbSQeZKanGJ+0JpF/+t4PELi3O3bbl2lqCcI=
+go.opentelemetry.io/otel/log v1.47.0/go.mod h1:9byitSQ5pLC6PpqwGXjqdMKya6ZTswHRZh2vvXT33nw=
+go.opentelemetry.io/otel/metric v1.47.0 h1:4PptaldXx3Eat1XjMZ68pPJEs5wrhlemctZE9a3UdWY=
+go.opentelemetry.io/otel/metric v1.47.0/go.mod h1:ADGSXxRrXM6bjbvLo535EstVFlPpPYZm4LBKixjDHwU=
+go.opentelemetry.io/otel/metric/x v0.69.0 h1:DjRLr15H83v+hCW7JA9NoJvOkYTtmq5YoDRbe9deYpM=
+go.opentelemetry.io/otel/metric/x v0.69.0/go.mod h1:uVvsMPMFFyj/HUQfrUnH3JjnOQ1dwFDorgFLRBasM0k=
+go.opentelemetry.io/otel/sdk v1.47.0 h1:zWXEr4j2lFefG87TU6Yg8a7ngfohIKFZHKp0Hf5hC6I=
+go.opentelemetry.io/otel/sdk v1.47.0/go.mod h1:VUc24kiOeoGsxG8G9ULx3fWKvB7jMhnGE8Oi607lgR0=
+go.opentelemetry.io/otel/sdk/log v1.47.0 h1:W4N/ZfgpkRRnmARnqYoQ6BrWA0mrj8IzVDNLlpmUJZY=
+go.opentelemetry.io/otel/sdk/log v1.47.0/go.mod h1:Wu74Z2EmOKXi2FleSNAb0Hyau2G+r5kubSEMJw5aAMs=
+go.opentelemetry.io/otel/sdk/log/logtest v0.23.0 h1:j3pm42QCrKYYLLkI6OrV1QHFkUfDA6/4EP+Y1PzggLg=
+go.opentelemetry.io/otel/sdk/log/logtest v0.23.0/go.mod h1:zt0gEnuTZgDvqvczHwYswz93eqMaIr6upTTsdV/HUlU=
+go.opentelemetry.io/otel/sdk/metric v1.47.0 h1:lfISg2j93VT6yqdk9OfUaZmw/GfcZqCCV3jdXtsPnKw=
+go.opentelemetry.io/otel/sdk/metric v1.47.0/go.mod h1:ypLp+mW1Nt2x+Szt3b5/i1syodyts49lMOwxpDI3VGw=
+go.opentelemetry.io/otel/trace v1.47.0 h1:JOjX/Oci8K94QHddo+bbfya/Ai/nf6/dt9ZfrFNWSrM=
+go.opentelemetry.io/otel/trace v1.47.0/go.mod h1:jNaSLa2PZEYFG6fRjJABAu+bw4FS08uDmPg28lTghu0=
 go.opentelemetry.io/proto/otlp v1.11.0 h1:5rrYs0Ykyj50sdU/JU0x8etU+LubXWb+gED6TbEdMIk=
 go.opentelemetry.io/proto/otlp v1.11.0/go.mod h1:SmVizdCOAm3XBtG1g1NnOdhW6jtddT72hLMhv8VwA8E=
 go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
@@ -274,8 +274,8 @@ golang.org/x/mod v0.41.0/go.mod h1:Ek9pY8RKWXwsWvd3rQiHYtMqkjSUV+s1Rj7j4H5Ur6o=
 golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=
-golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU=
+golang.org/x/net v0.59.0 h1:5zfYln+w5XCxwrnMMJPufRgNoXEaGxl0wo5GqPXyues=
+golang.org/x/net v0.59.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.23.0 h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk=
 golang.org/x/sync v0.23.0/go.mod h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0=
@@ -294,10 +294,10 @@ golang.org/x/tools v0.49.0 h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI=
 golang.org/x/tools v0.49.0/go.mod h1:SJNXV9DBKT0UbdttsQjbfJlAE/q+y36++zo3uL3N0Oo=
 gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=
 gonum.org/v1/gonum v0.17.0/go.mod h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E=
-google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688 h1:ax2KzoSRIZU/M0cIxri3pKxy99vniH1PVxWC6si/eZI=
-google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688/go.mod h1:1RJ9BQGyNdZwkGc1eTqkErfRZ6RJyYPHZo73BZ1vQqI=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20260831171406-18b4a7587f8a h1:3Dnd1cDaZlB68lziofO+bJXpjOy8UfRv8Unt+yH8tQ4=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20260831171406-18b4a7587f8a/go.mod h1:DjtHYE8FKJLivXcBEjGwndXfIC23G0VpXiXKqG179uA=
+google.golang.org/genproto/googleapis/api v0.0.0-20260928230214-8a89bd6388cc h1:rZHRz0ogq4Pid1IKtA/ivHi8XONVF5tqUQXA2TtgpkE=
+google.golang.org/genproto/googleapis/api v0.0.0-20260928230214-8a89bd6388cc/go.mod h1:K/n0XLazCJHjD73YuMyNJsN38BPPy1kfFnKxUXaThFU=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260928230214-8a89bd6388cc h1:4bNTbnb44EqGVy9HaQxSY2jnafSUdgV3qHtedvNpDKg=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260928230214-8a89bd6388cc/go.mod h1:OaIUM3+LpYcK2GXM4FTmhWoIq371Owdr+Cc7/BsYHHc=
 google.golang.org/grpc v1.83.2 h1:EManeRomTObA0BU7I8vXgg/78uE5MJ9M8B39EX2WscU=
 google.golang.org/grpc v1.83.2/go.mod h1:YPI1hK3kDked6iHvgX3tR0y+nX/qpMFKhPgFsokw1S8=
 google.golang.org/protobuf v1.36.12 h1:pJOKDDOyeXErUroCihFAd5LQuwXBSpVnKGrj5o/fwxc=
@@ -63,7 +63,7 @@ spec:
          timeoutSeconds: 5
          failureThreshold: 3
        imagePullPolicy: IfNotPresent
-        image: oci.unbound.se/unboundsoftware/schemas:${COMMIT}
+        image: ${IMAGE}
        ports:
        - name: api
          containerPort: 8080
@@ -12,7 +12,6 @@ import (
 	"go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp"
 	"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp"
 	"go.opentelemetry.io/otel/exporters/stdout/stdoutlog"
-	"go.opentelemetry.io/otel/log/global"
 	"go.opentelemetry.io/otel/propagation"
 	"go.opentelemetry.io/otel/sdk/log"
 	"go.opentelemetry.io/otel/sdk/metric"
@@ -75,7 +74,7 @@ func SetupOTelSDK(ctx context.Context, enabled bool, serviceName, buildVersion,
 	processor := log.NewSimpleProcessor(logExporter)
 	logProvider := log.NewLoggerProvider(log.WithProcessor(processor))

-	global.SetLoggerProvider(logProvider)
+	otel.SetLoggerProvider(logProvider)
 	shutdownFuncs = append(shutdownFuncs, logProvider.Shutdown)

 	exp, err := otlpmetrichttp.New(ctx)
@@ -50,12 +50,12 @@ func MergeSDLs(SDLs ...string) (string, error) {

 	doc, report := astparser.ParseGraphqlDocumentString(strings.Join(rawDocs, "\n"))
 	if report.HasErrors() {
-		return "", fmt.Errorf("parse graphql document string: %w", report)
+		return "", fmt.Errorf("parse graphql document string: %w", &report)
 	}

 	astnormalization.NormalizeSubgraphSDL(&doc, &report)
 	if report.HasErrors() {
-		return "", fmt.Errorf("merge ast: %w", report)
+		return "", fmt.Errorf("merge ast: %w", &report)
 	}

 	if err := MergeAST(&doc); err != nil {
@@ -81,11 +81,11 @@ func validateSubgraphs(subgraphs []string) error {
 			return err
 		}
 		if report.HasErrors() {
-			return fmt.Errorf(parseDocumentError, report)
+			return fmt.Errorf(parseDocumentError, &report)
 		}
 		validator.Validate(&doc, &report)
 		if report.HasErrors() {
-			return fmt.Errorf("validate schema: %w", report)
+			return fmt.Errorf("validate schema: %w", &report)
 		}
 	}
 	return nil
@@ -96,11 +96,11 @@ func normalizeSubgraphs(subgraphs []string) error {
 	for i, subgraph := range subgraphs {
 		doc, report := astparser.ParseGraphqlDocumentString(subgraph)
 		if report.HasErrors() {
-			return fmt.Errorf(parseDocumentError, report)
+			return fmt.Errorf(parseDocumentError, &report)
 		}
 		subgraphNormalizer.NormalizeDefinition(&doc, &report)
 		if report.HasErrors() {
-			return fmt.Errorf("normalize schema: %w", report)
+			return fmt.Errorf("normalize schema: %w", &report)
 		}
 		out, err := astprinter.PrintString(&doc)
 		if err != nil {
@@ -160,7 +160,7 @@ func (m *normalizer) normalize(operation *ast.Document) error {
 	for _, walker := range m.walkers {
 		walker.Walk(operation, nil, &report)
 		if report.HasErrors() {
-			return fmt.Errorf("walk: %w", report)
+			return fmt.Errorf("walk: %w", &report)
 		}
 	}
Author	SHA1	Message	Date
renovate	5cb7ef19f1	fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.62 schemas / check (pull_request) Failing after 18m44s Details schemas / deploy-prod (pull_request) Skipped Details schemas / build (pull_request) Skipped Details renovate/stability-days Updates have met minimum release age requirement Details schemas / check-release (pull_request) Failing after 7m56s Details schemas / vulnerabilities (pull_request) Failing after 8m31s Details pre-commit / pre-commit (pull_request) Failing after 3m9s Details	2026-10-11 18:30:57 +00:00
renovate	280fd5d610	chore(deps): update golang docker tag to v1.27.2 (#1004 ) schemas / build (push) Successful in 7m33s Details schemas / deploy-prod (push) Failing after 23s Details schemas / check (push) Successful in 2m14s Details schemas / vulnerabilities (push) Successful in 2m26s Details schemas / check-release (push) Successful in 3m55s Details pre-commit / pre-commit (push) Successful in 4m9s Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 41s Details Unbound Release / Create Tag (push) Successful in 11s Details Unbound Release / Check Preconditions (push) Successful in 21s Details Unbound Release / Create Release (push) Skipped Details Release / release (push) Successful in 1m14s Details	2026-10-08 22:12:39 +00:00
argoyle	2e63eb00b3	fix: release to the Gitea API on its public URL (#997 ) schemas / vulnerabilities (push) Successful in 3m22s Details schemas / check-release (push) Successful in 3m49s Details schemas / check (push) Successful in 3m54s Details Unbound Release / Check Preconditions (push) Successful in 48s Details Unbound Release / Create Release (push) Skipped Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 46s Details pre-commit / pre-commit (push) Successful in 2m34s Details Unbound Release / Create Tag (push) Successful in 12s Details Release / release (push) Successful in 2m11s Details schemas / build (push) Successful in 15m1s Details schemas / deploy-prod (push) Failing after 32s Details goreleaser's gitea_urls.api still pointed at the AWS in-cluster service (gitea-http.gitea.svc.cluster.local), which does not resolve from the Frostmoln runner. Use https://git.unbound.se/api/v1. Also drop RELEASE_TOKEN_FILE=/runner-secrets/release-token (the AWS runner mount); the Frostmoln runner exports RELEASE_TOKEN_FILE itself. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu Reviewed-on: #997	2026-10-07 21:51:04 +00:00
renovate	db7980c556	fix(deps): update module go.opentelemetry.io/contrib/bridges/otelslog to v0.21.0 (#993 ) schemas / vulnerabilities (push) Successful in 3m8s Details schemas / check-release (push) Successful in 3m44s Details schemas / check (push) Successful in 4m27s Details Unbound Release / Check Preconditions (push) Successful in 54s Details Unbound Release / Create Release (push) Skipped Details pre-commit / pre-commit (push) Successful in 7m3s Details Unbound Release / Create Tag (push) Successful in 22s Details Release / release (push) Successful in 5m57s Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 1m8s Details schemas / build (push) Successful in 16m15s Details schemas / deploy-prod (push) Failing after 29s Details This PR contains the following updates: \| Package \| Change \| [Age](https://docs.renovatebot.com/merge-confidence/) \| [Confidence](https://docs.renovatebot.com/merge-confidence/) \| \|---\|---\|---\|---\| \| [go.opentelemetry.io/contrib/bridges/otelslog](https://github.com/open-telemetry/opentelemetry-go-contrib) \| `v0.20.1` → `v0.21.0` \| ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcontrib%2fbridges%2fotelslog/v0.21.0?slim=true) \| ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcontrib%2fbridges%2fotelslog/v0.20.1/v0.21.0?slim=true) \| --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-go-contrib (go.opentelemetry.io/contrib/bridges/otelslog)</summary> ### [`v0.21.0`](https://github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v0.21.0) #### 0.21.0 - 2021-06-18 ##### Fixed - Dockerfile based examples for `otelgin` and `otelmacaron`. ([#767](https://github.com/open-telemetry/opentelemetry-go-contrib/issues/767)) ##### Changed - Supported minimum version of Go bumped from 1.14 to 1.15. ([#787](https://github.com/open-telemetry/opentelemetry-go-contrib/issues/787)) - EKS Resource Detector now use the Kubernetes Go client to obtain the ConfigMap. ([#813](https://github.com/open-telemetry/opentelemetry-go-contrib/issues/813)) ##### Removed - Remove service name from `otelmongodb` configuration and span attributes. ([#763](https://github.com/open-telemetry/opentelemetry-go-contrib/issues/763)) </details> --- ### Configuration 📅 Schedule: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzMuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjEzMy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: https://git.unbound.se/unboundsoftware/schemas/pulls/993 Co-authored-by: Renovate Bot <renovate@unbound.se>	2026-10-07 21:50:21 +00:00
renovate	7f0a184805	fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.60 (#995 ) schemas / vulnerabilities (push) Successful in 2m53s Details schemas / check (push) Successful in 3m47s Details schemas / check-release (push) Successful in 4m10s Details Unbound Release / Check Preconditions (push) Successful in 1m20s Details Unbound Release / Create Release (push) Skipped Details Unbound Release / Create Tag (push) Successful in 37s Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 40s Details Release / release (push) Successful in 2m0s Details pre-commit / pre-commit (push) Successful in 5m1s Details schemas / build (push) Successful in 10m7s Details schemas / deploy-prod (push) Failing after 20s Details	2026-10-07 21:30:25 +00:00
renovate	f8894540d5	chore(deps): update golang:1.27.1 docker digest to 45639bc (#996 ) schemas / vulnerabilities (push) Successful in 2m24s Details schemas / check-release (push) Successful in 2m30s Details Unbound Release / Create Release (push) Skipped Details schemas / check (push) Successful in 2m36s Details Unbound Release / Check Preconditions (push) Successful in 15s Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 1m4s Details Unbound Release / Create Tag (push) Successful in 48s Details Release / release (push) Successful in 2m12s Details pre-commit / pre-commit (push) Successful in 2m23s Details schemas / build (push) Successful in 7m50s Details schemas / deploy-prod (push) Failing after 25s Details	2026-10-07 20:35:47 +00:00
argoyle	7d2773f6a1	fix(monitoring): use otel.SetLoggerProvider (#998 ) Unbound Release / Create Tag (push) Successful in 1m10s Details pre-commit / pre-commit (push) Successful in 8m13s Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 1m56s Details Release / release (push) Successful in 5m49s Details schemas / vulnerabilities (push) Successful in 3m35s Details schemas / check (push) Successful in 4m16s Details schemas / build (push) Skipped Details schemas / check-release (push) Failing after 4m4s Details schemas / deploy-prod (push) Skipped Details Unbound Release / Check Preconditions (push) Successful in 53s Details Unbound Release / Create Release (push) Skipped Details opentelemetry-go v1.47.0 (#990) deprecates `go.opentelemetry.io/otel/log/global`. staticcheck SA1019 in `golangci-lint-full` now fails pre-commit on every PR (e.g. #997). Swap `global.SetLoggerProvider` for `otel.SetLoggerProvider` and drop the import. `go mod tidy` marks `otel/log` indirect. Locally: `golangci-lint-full` passed, `go test ./...` passed. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu Reviewed-on: #998	2026-10-07 19:25:32 +00:00
renovate	c97722812f	fix(deps): update opentelemetry-go monorepo (#990 ) Unbound Release / Check Preconditions (push) Successful in 31s Details Unbound Release / Create Release (push) Skipped Details Unbound Release / Create Tag (push) Successful in 24s Details pre-commit / pre-commit (push) Skipped Unbound Release / Generate Changelog and Handle PR (push) Successful in 1m12s Details schemas / check (push) Successful in 1m23s Details schemas / vulnerabilities (push) Successful in 1m8s Details schemas / check-release (push) Successful in 1m0s Details Release / release (push) Successful in 13m30s Details schemas / build (push) Successful in 2m5s Details schemas / deploy-prod (push) Successful in 1m13s Details	2026-10-05 18:22:25 +00:00
renovate	df4e3c326f	fix(deps): update module codeberg.org/eventsourced/pg/v2 to v2.3.0 (#991 ) schemas / check (push) Successful in 1m59s Details pre-commit / pre-commit (push) Successful in 2m54s Details Unbound Release / Create Tag (push) Successful in 33s Details Unbound Release / Check Preconditions (push) Successful in 31s Details Unbound Release / Create Release (push) Skipped Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 57s Details schemas / build (push) Successful in 2m1s Details schemas / check-release (push) Successful in 59s Details schemas / vulnerabilities (push) Successful in 57s Details Release / release (push) Successful in 3m17s Details schemas / deploy-prod (push) Successful in 1m26s Details	2026-10-05 17:26:31 +00:00
renovate	4eb1a2b1f4	fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.59 (#988 ) schemas / check-release (push) Successful in 1m0s Details schemas / vulnerabilities (push) Successful in 55s Details Unbound Release / Create Tag (push) Successful in 24s Details Release / release (push) Failing after 1m22s Details Unbound Release / Check Preconditions (push) Successful in 21s Details schemas / check (push) Successful in 1m57s Details pre-commit / pre-commit (push) Successful in 2m52s Details Unbound Release / Create Release (push) Skipped Details Unbound Release / Generate Changelog and Handle PR (push) Failing after 59s Details schemas / build (push) Successful in 3m14s Details schemas / deploy-prod (push) Successful in 1m4s Details	2026-10-05 02:15:17 +00:00
argoyle	6beb46a657	chore(k8s): take the image reference from build-tools (#986 ) Unbound Release / Check Preconditions (push) Successful in 21s Details Unbound Release / Create Release (push) Skipped Details pre-commit / pre-commit (push) Skipped Unbound Release / Generate Changelog and Handle PR (push) Successful in 48s Details Unbound Release / Create Tag (push) Successful in 24s Details Release / release (push) Successful in 11m1s Details schemas / check (push) Successful in 1m33s Details schemas / vulnerabilities (push) Successful in 1m2s Details schemas / check-release (push) Successful in 58s Details schemas / build (push) Successful in 3m19s Details schemas / deploy-prod (push) Successful in 1m22s Details ## Summary `k8s/deploy.yaml` takes the image from build-tools: `image: ${IMAGE}` instead of the hard-coded `oci.unbound.se/unboundsoftware/schemas:${COMMIT}`. `deploy` substitutes `${IMAGE}` with `<registry>/<owner>/<name>:<tag>`, where the registry comes from the build-tools config and the tag is the value `${COMMIT}` gets today. The rendered reference is unchanged. Moving off `oci.unbound.se` later becomes one change in infra. Validated on shiny/time-service#864: merged and deployed to AWS staging and Frostmoln staging with the same image. Prerequisites, all merged: - unboundsoftware/infra#1808: registry in `BUILDTOOLS_FROSTMOLN_STAGING` - shiny/acctest#952: acctest pins build-tools to the Gitea registry 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://gitea.unbound.se/unboundsoftware/schemas/pulls/986	2026-10-02 22:40:05 +00:00
renovate	aaf58ce88f	fix(deps): update module github.com/wundergraph/graphql-go-tools/v2 to v2.26.0 (#984 ) Unbound Release / Check Preconditions (push) Successful in 22s Details Unbound Release / Create Release (push) Skipped Details Unbound Release / Create Tag (push) Successful in 24s Details Release / release (push) Successful in 1m17s Details schemas / check (push) Successful in 1m27s Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 53s Details schemas / vulnerabilities (push) Successful in 58s Details schemas / check-release (push) Successful in 56s Details pre-commit / pre-commit (push) Successful in 3m0s Details schemas / build (push) Successful in 5m9s Details schemas / deploy-prod (push) Successful in 1m5s Details	2026-10-01 22:16:19 +00:00
renovate	18f62452c2	fix(deps): update module github.com/wundergraph/graphql-go-tools/v2 to v2.25.0 (#982 ) schemas / check (push) Successful in 1m55s Details Release / release (push) Successful in 1m26s Details Unbound Release / Check Preconditions (push) Successful in 35s Details Unbound Release / Create Release (push) Skipped Details Unbound Release / Create Tag (push) Successful in 24s Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 46s Details schemas / vulnerabilities (push) Successful in 1m0s Details schemas / check-release (push) Successful in 1m4s Details schemas / build (push) Successful in 2m25s Details pre-commit / pre-commit (push) Successful in 2m49s Details schemas / deploy-prod (push) Successful in 1m16s Details	2026-09-28 08:31:59 +00:00
renovate	a262d9a757	chore(deps): update pre-commit hook golangci/golangci-lint to v2.14.0 (#980 ) Unbound Release / Create Release (push) Skipped Details Unbound Release / Check Preconditions (push) Successful in 26s Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 48s Details Release / release (push) Successful in 6m20s Details pre-commit / pre-commit (push) Skipped Unbound Release / Create Tag (push) Successful in 29s Details schemas / deploy-prod (push) Successful in 1m18s Details schemas / check (push) Successful in 1m42s Details schemas / vulnerabilities (push) Successful in 1m3s Details schemas / check-release (push) Successful in 1m8s Details schemas / build (push) Successful in 3m4s Details	2026-09-27 13:42:35 +00:00
renovate	cd5a5fbc67	fix(deps): update module github.com/wundergraph/graphql-go-tools/v2 to v2.24.0 (#977 ) Unbound Release / Check Preconditions (push) Successful in 39s Details Unbound Release / Create Release (push) Skipped Details Release / release (push) Successful in 2m41s Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 1m16s Details pre-commit / pre-commit (push) Successful in 2m50s Details schemas / build (push) Successful in 2m13s Details Unbound Release / Create Tag (push) Successful in 48s Details schemas / check (push) Successful in 1m38s Details schemas / vulnerabilities (push) Successful in 1m4s Details schemas / check-release (push) Successful in 1m27s Details schemas / deploy-prod (push) Successful in 1m15s Details	2026-09-26 21:13:17 +00:00