Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package timoni for openSUSE:Factory checked 
in at 2026-10-27 16:51:10
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/timoni (Old)
 and      /work/SRC/openSUSE:Factory/.timoni.new.2252680 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "timoni"

Tue Oct 27 16:51:10 2026 rev:32 rq:1392909 version:0.36.0

Changes:
--------
--- /work/SRC/openSUSE:Factory/timoni/timoni.changes    2026-09-29 
17:53:15.323914890 +0200
+++ /work/SRC/openSUSE:Factory/.timoni.new.2252680/timoni.changes       
2026-10-27 16:51:53.978871080 +0100
@@ -1,0 +2,37 @@
+Sat Oct 24 16:58:00 UTC 2026 - Martin Pluskal <[email protected]>
+
+- Update to version 0.36.0:
+  * `timoni mod build` and `timoni artifact build` take the new
+    --resolve-symlinks flag that packages symlink targets as
+    regular files, same as the push commands
+  * Built with Go 1.27.3; Go and Kubernetes dependencies updated
+  * CVE-2026-100352: kin-openapi OAS 3.1 validation panic on
+    YAML NaN/Inf values, fixed in vendored kin-openapi 0.151.0
+  * CVE-2026-100353: kin-openapi openapi3filter nil-Items
+    panics, fixed in vendored kin-openapi 0.151.0
+  * CVE-2026-100354: kin-openapi fatal crash on circular
+    schemas, fixed in vendored kin-openapi 0.151.0
+  * CVE-2026-78659: x/net HTTP/2 server memory exhaustion via
+    Trailer headers, fixed in vendored x/net 0.61.0
+  * CVE-2026-78660: x/net HTTP/2 transport accepts malformed
+    framing headers, fixed in vendored x/net 0.61.0
+  * CVE-2026-78663: x/net HTTP/2 double flow-control refund,
+    fixed in vendored x/net 0.61.0
+  * CVE-2026-78669: x/net HTTP/2 CPU exhaustion via window
+    changes, fixed in vendored x/net 0.61.0
+  * CVE-2026-97032: x/net HTTP/2 server crash via HPACK
+    encoder race, fixed in vendored x/net 0.61.0
+  * CVE-2024-45338 (boo#1235262): vendored x/net is 0.61.0,
+    above the 0.33.0 fix
+  * CVE-2025-22872 (boo#1241726): vendored x/net is 0.61.0,
+    above the 0.38.0 fix
+  * CVE-2025-47911 (boo#1251359): vendored x/net is 0.61.0,
+    above the 0.45.0 fix
+  * CVE-2025-58190 (boo#1251548): vendored x/net is 0.61.0,
+    above the 0.45.0 fix
+  * CVE-2026-33186 (boo#1260178): vendored grpc is 1.83.2,
+    above the 1.79.3 fix
+  * CVE-2026-100351 (boo#1285805): vendored kin-openapi is
+    0.151.0, the fix shipped upstream in 0.147.0
+
+-------------------------------------------------------------------

Old:
----
  timoni-0.35.0.obscpio

New:
----
  timoni-0.36.0.obscpio

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ timoni.spec ++++++
--- /var/tmp/diff_new_pack.wBXGoa/_old  2026-10-27 16:51:56.641982578 +0100
+++ /var/tmp/diff_new_pack.wBXGoa/_new  2026-10-27 16:51:56.645982745 +0100
@@ -17,7 +17,7 @@
 
 
 Name:           timoni
-Version:        0.35.0
+Version:        0.36.0
 Release:        0
 Summary:        Package manager for Kubernetes, powered by CUE and inspired by 
Helm
 License:        Apache-2.0
@@ -41,7 +41,6 @@
 
 %package -n %{name}-bash-completion
 Summary:        Bash Completion for %{name}
-Group:          System/Shells
 Requires:       %{name} = %{version}
 Requires:       bash-completion
 Supplements:    (%{name} and bash-completion)
@@ -52,7 +51,6 @@
 
 %package -n %{name}-fish-completion
 Summary:        Fish Completion for %{name}
-Group:          System/Shells
 Requires:       %{name} = %{version}
 Supplements:    (%{name} and fish)
 BuildArch:      noarch
@@ -62,7 +60,6 @@
 
 %package -n %{name}-zsh-completion
 Summary:        Zsh Completion for %{name}
-Group:          System/Shells
 Requires:       %{name} = %{version}
 Supplements:    (%{name} and zsh)
 BuildArch:      noarch

++++++ _service ++++++
--- /var/tmp/diff_new_pack.wBXGoa/_old  2026-10-27 16:51:56.722985969 +0100
+++ /var/tmp/diff_new_pack.wBXGoa/_new  2026-10-27 16:51:56.736986555 +0100
@@ -3,7 +3,7 @@
     <param name="url">https://github.com/stefanprodan/timoni.git</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">refs/tags/v0.35.0</param>
+    <param name="revision">refs/tags/v0.36.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="changesgenerate">enable</param>

++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.wBXGoa/_old  2026-10-27 16:51:56.791988858 +0100
+++ /var/tmp/diff_new_pack.wBXGoa/_new  2026-10-27 16:51:56.796989067 +0100
@@ -3,6 +3,6 @@
                 <param 
name="url">https://github.com/stefanprodan/timoni</param>
               <param 
name="changesrevision">c68e33a34f17c7ca93c7fc6717d61a14819276dc</param></service><service
 name="tar_scm">
                 <param 
name="url">https://github.com/stefanprodan/timoni.git</param>
-              <param 
name="changesrevision">995401ec3e45829b519208d8340a09a6b88c20a3</param></service></servicedata>
+              <param 
name="changesrevision">9f04f5c56a817024dce3f23bdbf8da4516fbe990</param></service></servicedata>
 (No newline at EOF)
 

++++++ timoni-0.35.0.obscpio -> timoni-0.36.0.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/.gitattributes 
new/timoni-0.36.0/.gitattributes
--- old/timoni-0.35.0/.gitattributes    1970-01-01 01:00:00.000000000 +0100
+++ new/timoni-0.36.0/.gitattributes    2026-10-21 19:00:30.000000000 +0200
@@ -0,0 +1,10 @@
+examples/**/templates/*.cue -linguist-documentation
+examples/bundles -linguist-documentation
+blueprints/**/cue.mod/** linguist-vendored
+
+# Pin CUE schemas to LF so embedded files parse consistently across platforms.
+*.cue text eol=lf
+
+# Hint Git for Windows to create directory-type NTFS symlinks
+# for the vendored schemas linked under cue.mod/pkg.
+**/cue.mod/pkg/timoni.sh symlink=dir
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/.github/FUNDING.yml 
new/timoni-0.36.0/.github/FUNDING.yml
--- old/timoni-0.35.0/.github/FUNDING.yml       1970-01-01 01:00:00.000000000 
+0100
+++ new/timoni-0.36.0/.github/FUNDING.yml       2026-10-21 19:00:30.000000000 
+0200
@@ -0,0 +1 @@
+github: stefanprodan
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/.github/dependabot.yaml 
new/timoni-0.36.0/.github/dependabot.yaml
--- old/timoni-0.35.0/.github/dependabot.yaml   1970-01-01 01:00:00.000000000 
+0100
+++ new/timoni-0.36.0/.github/dependabot.yaml   2026-10-21 19:00:30.000000000 
+0200
@@ -0,0 +1,16 @@
+version: 2
+
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    labels: ["area/ci", "dependencies"]
+    groups:
+      # Group all updates together, so that they are all applied in a single 
PR.
+      # Grouped updates are currently in beta and is subject to change.
+      # xref: 
https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups
+      ci:
+        patterns:
+          - "*"
+    schedule:
+      # By default, this will be on a monday.
+      interval: "weekly"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/.github/workflows/build.yaml 
new/timoni-0.36.0/.github/workflows/build.yaml
--- old/timoni-0.35.0/.github/workflows/build.yaml      1970-01-01 
01:00:00.000000000 +0100
+++ new/timoni-0.36.0/.github/workflows/build.yaml      2026-10-21 
19:00:30.000000000 +0200
@@ -0,0 +1,38 @@
+name: build
+
+on:
+  pull_request:
+    branches: [main]
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 
v7.0.1
+      - name: Setup Go
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # 
v7.0.0
+        with:
+          go-version: 1.27.x
+          check-latest: true
+      - name: Setup CUE
+        uses: cue-lang/setup-cue@b0e30e540a2dae47304ebf16586a5b2db023b61c # 
v2.0.0
+        with:
+          version: v0.15.4
+      - name: Run tests
+        run: make test
+      - name: Run linter
+        run: make cue-vet
+      - name: Run setup action
+        uses: ./actions/setup
+      - name: Check if working tree is dirty
+        run: |
+          if [[ $(git diff --stat) != '' ]]; then
+            echo 'run "make test cue-vet" and commit changes'
+            exit 1
+          fi
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/.github/workflows/docs.yaml 
new/timoni-0.36.0/.github/workflows/docs.yaml
--- old/timoni-0.35.0/.github/workflows/docs.yaml       1970-01-01 
01:00:00.000000000 +0100
+++ new/timoni-0.36.0/.github/workflows/docs.yaml       2026-10-21 
19:00:30.000000000 +0200
@@ -0,0 +1,75 @@
+name: docs
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ 'docs*' ]
+    tags: [ 'v*' ]
+
+permissions:
+  contents: read
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 
v7.0.1
+      - name: Setup Go
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # 
v7.0.0
+        with:
+          go-version: 1.27.x
+          check-latest: true
+      - name: Setup Node
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # 
v7.1.0
+        with:
+          node-version: 22
+      - name: Resolve Timoni version
+        id: ver
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          set -euo pipefail
+          if [[ "${GITHUB_REF_TYPE}" == "tag" ]]; then
+            version="${GITHUB_REF_NAME}"
+          else
+            version=$(gh release view --repo "${GITHUB_REPOSITORY}" --json 
tagName -q '.tagName')
+          fi
+          version="${version#v}"
+          if ! [[ "$version" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+            echo "::error::Invalid Timoni version '${version}'"
+            exit 1
+          fi
+          echo "version=${version}" >> "$GITHUB_OUTPUT"
+      - name: Set Timoni version in docs
+        env:
+          TIMONI_VERSION: ${{ steps.ver.outputs.version }}
+        run: |
+          set -euo pipefail
+          grep -rl --include='*.mdx' '{{TIMONI_VERSION}}' docs | xargs perl -i 
-pe 's/\{\{TIMONI_VERSION\}\}/$ENV{TIMONI_VERSION}/g'
+          echo "Set Timoni version ${TIMONI_VERSION} in docs"
+      - name: Generate CLI reference
+        run: make docgen
+      - name: Add agent skills
+        run: make docs-skills
+      - name: Validate site
+        working-directory: docs
+        run: |
+          npx --yes mint validate
+          npx --yes mint broken-links
+      - name: Publish website branch
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          set -euo pipefail
+          site=$(mktemp -d)
+          cp -R docs/. "$site"/
+          cd "$site"
+          git init -q -b website
+          git config user.name "github-actions[bot]"
+          git config user.email 
"41898282+github-actions[bot]@users.noreply.github.com"
+          git add -A
+          git commit -q -m "Publish docs from ${GITHUB_REF_NAME} 
(${GITHUB_SHA})"
+          git push --force 
"https://x-access-token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git"; 
website
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/.github/workflows/e2e.yaml 
new/timoni-0.36.0/.github/workflows/e2e.yaml
--- old/timoni-0.35.0/.github/workflows/e2e.yaml        1970-01-01 
01:00:00.000000000 +0100
+++ new/timoni-0.36.0/.github/workflows/e2e.yaml        2026-10-21 
19:00:30.000000000 +0200
@@ -0,0 +1,52 @@
+name: e2e
+
+on:
+  workflow_dispatch:
+  pull_request:
+    branches: [ main ]
+  push:
+    branches: [ main ]
+
+permissions:
+  contents: read
+
+defaults:
+  run:
+    working-directory: test
+
+jobs:
+  kubernetes:
+    runs-on: ubuntu-latest
+    services:
+      registry:
+        image: registry:3
+        ports:
+          - 5555:5000
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 
v7.0.1
+      - name: Setup Go
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # 
v7.0.0
+        with:
+          go-version: 1.27.x
+          check-latest: true
+          cache: true
+      - name: Setup staging cluster
+        uses: helm/kind-action@1544676c07bb3570fcb70166beaa07c4528fd4aa # 
v1.15.1
+        with:
+          cluster_name: timoni-staging
+      - name: Setup production cluster
+        uses: helm/kind-action@1544676c07bb3570fcb70166beaa07c4528fd4aa # 
v1.15.1
+        with:
+          cluster_name: timoni-production
+      - name: Build
+        working-directory: ${{ github.workspace }}
+        run: make build
+      - name: Push modules
+        run: make push
+      - name: Deploy
+        run: make fleet-deploy
+      - name: Check
+        run: make fleet-deploy-check
+      - name: Uninstall
+        run: make fleet-deploy-uninstall
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/.github/workflows/push.yaml 
new/timoni-0.36.0/.github/workflows/push.yaml
--- old/timoni-0.35.0/.github/workflows/push.yaml       1970-01-01 
01:00:00.000000000 +0100
+++ new/timoni-0.36.0/.github/workflows/push.yaml       2026-10-21 
19:00:30.000000000 +0200
@@ -0,0 +1,59 @@
+name: push-artifacts
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'RC version'
+        required: true
+
+permissions:
+  contents: read
+
+jobs:
+  push-minimal:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      packages: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 
v7.0.1
+      - name: Setup Cosign
+        uses: 
sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
+      - name: Setup Timoni
+        uses: ./actions/setup
+      - name: Login to GHCR
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # 
v4.6.0
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Push blueprint starter
+        run: |
+          timoni mod push ./blueprints/starter 
oci://ghcr.io/stefanprodan/timoni/blueprints/starter \
+          -v ${{ github.event.inputs.version }} --latest --resolve-symlinks \
+          -a 'org.opencontainers.image.licenses=Apache-2.0' \
+          -a 
'org.opencontainers.image.source=https://github.com/stefanprodan/timoni'  \
+          -a 'org.opencontainers.image.description=Get started blueprint for 
timoni.sh modules.' \
+          -a 'org.opencontainers.image.documentation=https://timoni.sh' \
+          --sign cosign
+      - name: Push minimal module
+        run: |
+          timoni mod push ./examples/minimal 
oci://ghcr.io/stefanprodan/timoni/minimal \
+          -v ${{ github.event.inputs.version }} --latest --resolve-symlinks \
+          -a 'org.opencontainers.image.licenses=Apache-2.0' \
+          -a 
'org.opencontainers.image.source=https://github.com/stefanprodan/timoni' \
+          -a 'org.opencontainers.image.description=A minimal timoni.sh 
module.' \
+          -a 'org.opencontainers.image.documentation=https://timoni.sh' \
+          --sign cosign
+      - name: Push schemas
+        run: |
+          timoni artifact push oci://ghcr.io/stefanprodan/timoni/schemas \
+          -f ./schemas -t ${{ github.event.inputs.version }} -t latest \
+          -a 'org.opencontainers.image.licenses=Apache-2.0' \
+          -a 
'org.opencontainers.image.source=https://github.com/stefanprodan/timoni' \
+          -a 'org.opencontainers.image.description=Timoni CUE schemas.' \
+          -a 'org.opencontainers.image.documentation=https://timoni.sh' \
+          --content-type="cue.mod/pkg" \
+          --sign cosign
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/.github/workflows/release.yaml 
new/timoni-0.36.0/.github/workflows/release.yaml
--- old/timoni-0.35.0/.github/workflows/release.yaml    1970-01-01 
01:00:00.000000000 +0100
+++ new/timoni-0.36.0/.github/workflows/release.yaml    2026-10-21 
19:00:30.000000000 +0200
@@ -0,0 +1,152 @@
+name: release
+
+on:
+  push:
+    tags: [ 'v*' ]
+
+permissions:
+  contents: read
+
+jobs:
+  goreleaser:
+    outputs:
+      hashes: ${{ steps.hash.outputs.hashes }}
+      version: ${{ steps.hash.outputs.version }}
+    runs-on: ubuntu-latest
+    permissions:
+      artifact-metadata: write
+      attestations: write
+      contents: write
+      id-token: write
+      packages: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 
v7.0.1
+        with:
+          fetch-depth: 0
+      - name: Setup Go
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # 
v7.0.0
+        with:
+          go-version: 1.27.x
+          check-latest: true
+          cache: false
+      - name: Setup Syft
+        uses: 
anchore/sbom-action/download-syft@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # 
v0.24.3
+      - name: Version info
+        id: ver
+        run: |
+          echo "SEMVER=${GITHUB_REF_NAME#v}" >> $GITHUB_OUTPUT
+      - name: Run GoReleaser
+        id: run-goreleaser
+        uses: 
goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0
+        with:
+          version: latest
+          args: release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Attest release assets
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
+        with:
+          subject-checksums: '${{ github.workspace }}/dist/${{ 
github.event.repository.name }}_${{ steps.ver.outputs.SEMVER }}_checksums.txt'
+      - name: Generate SLSA subject
+        id: hash
+        env:
+          ARTIFACTS: "${{ steps.run-goreleaser.outputs.artifacts }}"
+        run: |
+          set -euo pipefail
+
+          hashes=$(echo $ARTIFACTS | jq --raw-output '.[] | {name, "digest": 
(.extra.Digest // .extra.Checksum)} | select(.digest) | {digest} + {name} | 
join("  ") | sub("^sha256:";"")' | base64 -w0)
+          if test "$hashes" = ""; then # goreleaser < v1.13.0
+            checksum_file=$(echo "$ARTIFACTS" | jq -r '.[] | select 
(.type=="Checksum") | .path')
+            hashes=$(cat $checksum_file | base64 -w0)
+          fi
+          echo "hashes=$hashes" >> $GITHUB_OUTPUT
+          echo "version=${GITHUB_REF_NAME#v}" >> $GITHUB_OUTPUT
+
+  publish-artifacts:
+    needs: [goreleaser]
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+      packages: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 
v7.0.1
+      - name: Setup Cosign
+        uses: 
sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
+      - name: Setup Timoni
+        uses: ./actions/setup
+      - name: Login to GHCR
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # 
v4.6.0
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Version info
+        id: info
+        run: |
+          VERSION=$(timoni -v | awk '{ print $NF }')
+          echo "version=${VERSION}" >> $GITHUB_OUTPUT
+      - name: Push minimal module
+        run: |
+          timoni mod push ./examples/minimal 
oci://ghcr.io/stefanprodan/timoni/minimal \
+          -v ${{ steps.info.outputs.version }} --latest --resolve-symlinks \
+          -a 'org.opencontainers.image.licenses=Apache-2.0' \
+          -a 
'org.opencontainers.image.source=https://github.com/stefanprodan/timoni'  \
+          -a 'org.opencontainers.image.description=A minimal timoni.sh 
module.' \
+          -a 'org.opencontainers.image.documentation=https://timoni.sh' \
+          --sign cosign
+      - name: Push blueprint starter
+        run: |
+          timoni mod push ./blueprints/starter 
oci://ghcr.io/stefanprodan/timoni/blueprints/starter \
+          -v ${{ steps.info.outputs.version }} --latest --resolve-symlinks \
+          -a 'org.opencontainers.image.licenses=Apache-2.0' \
+          -a 
'org.opencontainers.image.source=https://github.com/stefanprodan/timoni'  \
+          -a 'org.opencontainers.image.description=Get started blueprint for 
timoni.sh modules.' \
+          -a 'org.opencontainers.image.documentation=https://timoni.sh' \
+          --sign cosign
+      - name: Push schemas
+        run: |
+          timoni artifact push oci://ghcr.io/stefanprodan/timoni/schemas \
+          -f ./schemas -t ${{ steps.info.outputs.version }} -t latest \
+          -a 'org.opencontainers.image.licenses=Apache-2.0' \
+          -a 
'org.opencontainers.image.source=https://github.com/stefanprodan/timoni' \
+          -a 'org.opencontainers.image.description=Timoni CUE schemas.' \
+          -a 'org.opencontainers.image.documentation=https://timoni.sh' \
+          --content-type="cue.mod/pkg" \
+          --sign cosign
+
+  provenance:
+    needs: [goreleaser]
+    permissions:
+      actions: read # To read the workflow path.
+      id-token: write # To sign the provenance.
+      contents: write # To add assets to a release.
+    uses: 
slsa-framework/slsa-github-generator/.github/workflows/[email protected]
+    with:
+      provenance-name: "timoni_${{ needs.goreleaser.outputs.version 
}}_provenance.intoto.jsonl"
+      base64-subjects: "${{ needs.goreleaser.outputs.hashes }}"
+      upload-assets: true # upload to a new release
+
+  packslip:
+    needs: [goreleaser]
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write # To add the packslip to the release.
+      id-token: write # To sign the packslip.
+    steps:
+      # The packslip is a signed inventory of the release archives, the
+      # executable inside each, and the shell completions and agent skill
+      # that match this version, signed with this workflow's identity.
+      # The goreleaser job already attested the archives, so it only links
+      # that provenance. See https://packslip.dev.
+      - name: Publish packslip
+        uses: jdx/packslip@0e9bde4ea49070555a79cac1f040f1dafe60acd6 # v1.8.0
+        with:
+          download: timoni_*_darwin_*.tar.gz timoni_*_linux_*.tar.gz 
timoni_*_windows_*.zip
+          bin: timoni
+          attest: link
+          resources: |
+            completion/bash,zsh,fish,powershell=exec:timoni completion {shell}
+            skill/timoni=repo:skills/timoni
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/.github/workflows/scan.yml 
new/timoni-0.36.0/.github/workflows/scan.yml
--- old/timoni-0.35.0/.github/workflows/scan.yml        1970-01-01 
01:00:00.000000000 +0100
+++ new/timoni-0.36.0/.github/workflows/scan.yml        2026-10-21 
19:00:30.000000000 +0200
@@ -0,0 +1,38 @@
+name: scan
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+  schedule:
+    - cron: '18 10 * * 3'
+
+permissions:
+  contents: read
+
+jobs:
+  codeql:
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+    if: github.actor != 'dependabot[bot]'
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 
v7.0.1
+      - name: Setup Go
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # 
v7.0.0
+        with:
+          go-version: 1.27.x
+          check-latest: true
+          cache-dependency-path: |
+            **/go.sum
+            **/go.mod
+      - name: Init
+        uses: 
github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+        with:
+          languages: go
+      - name: Build
+        uses: 
github/codeql-action/autobuild@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # 
v4.39.0
+      - name: Analyze
+        uses: 
github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/.gitignore new/timoni-0.36.0/.gitignore
--- old/timoni-0.35.0/.gitignore        1970-01-01 01:00:00.000000000 +0100
+++ new/timoni-0.36.0/.gitignore        2026-10-21 19:00:30.000000000 +0200
@@ -0,0 +1,8 @@
+*.out
+.DS_Store
+bin/
+docs/cmd/
+venv/
+.vscode
+workspace/
+docs/.mintlify/
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/Makefile new/timoni-0.36.0/Makefile
--- old/timoni-0.35.0/Makefile  2026-09-28 15:13:34.000000000 +0200
+++ new/timoni-0.36.0/Makefile  2026-10-21 19:00:30.000000000 +0200
@@ -11,7 +11,7 @@
 CONTROLLER_GEN_VERSION ?= v0.22.0
 
 # Go linter
-GOLANGCI_LINT_VERSION ?= v2.13.1
+GOLANGCI_LINT_VERSION ?= v2.15.0
 
 # Kubernetes env test
 ENVTEST_KUBERNETES_VERSION?=1.37
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/cmd/timoni/artifact_build.go 
new/timoni-0.36.0/cmd/timoni/artifact_build.go
--- old/timoni-0.35.0/cmd/timoni/artifact_build.go      2026-09-28 
15:13:34.000000000 +0200
+++ new/timoni-0.36.0/cmd/timoni/artifact_build.go      2026-10-21 
19:00:30.000000000 +0200
@@ -38,12 +38,13 @@
 
 // buildArtifactFlags contains local artifact build inputs.
 type buildArtifactFlags struct {
-       path        string
-       output      string
-       format      string
-       tags        []string
-       annotations []string
-       contentType string
+       path            string
+       output          string
+       format          string
+       tags            []string
+       annotations     []string
+       contentType     string
+       resolveSymlinks bool
 }
 
 var buildArtifactArgs buildArtifactFlags
@@ -61,6 +62,8 @@
                "Annotation in the format '<key>=<value>'.")
        buildArtifactCmd.Flags().StringVar(&buildArtifactArgs.contentType, 
"content-type", "generic",
                "The content type of this artifact.")
+       buildArtifactCmd.Flags().BoolVar(&buildArtifactArgs.resolveSymlinks, 
"resolve-symlinks", false,
+               "Resolve symbolic links and package their targets as regular 
files and directories.")
        artifactCmd.AddCommand(buildArtifactCmd)
 }
 
@@ -94,7 +97,31 @@
        }
        oci.AppendGitMetadata(cmd.Context(), buildArtifactArgs.path, 
annotations)
 
-       build, err := oci.BuildArtifactImage(buildArtifactArgs.path, 
ignorePaths, buildArtifactArgs.contentType, annotations)
+       // When symlink resolution is enabled, stage the directory in a temp dir
+       // so that the artifact contains the symlink targets as regular files
+       // and directories, since the archiver skips symbolic links.
+       contentPath := buildArtifactArgs.path
+       if buildArtifactArgs.resolveSymlinks {
+               if info.IsDir() {
+                       tmpDir, err := os.MkdirTemp("", apiv1.FieldManager)
+                       if err != nil {
+                               return err
+                       }
+                       defer os.RemoveAll(tmpDir)
+
+                       contentPath = filepath.Join(tmpDir, "artifact")
+                       if err := engine.CopyDir(buildArtifactArgs.path, 
contentPath, true); err != nil {
+                               return err
+                       }
+               } else {
+                       contentPath, err = filepath.EvalSymlinks(contentPath)
+                       if err != nil {
+                               return err
+                       }
+               }
+       }
+
+       build, err := oci.BuildArtifactImage(contentPath, ignorePaths, 
buildArtifactArgs.contentType, annotations)
        if err != nil {
                return err
        }
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/cmd/timoni/artifact_build_test.go 
new/timoni-0.36.0/cmd/timoni/artifact_build_test.go
--- old/timoni-0.35.0/cmd/timoni/artifact_build_test.go 2026-09-28 
15:13:34.000000000 +0200
+++ new/timoni-0.36.0/cmd/timoni/artifact_build_test.go 2026-10-21 
19:00:30.000000000 +0200
@@ -18,7 +18,9 @@
 
 import (
        "fmt"
+       "os"
        "path/filepath"
+       "runtime"
        "testing"
 
        . "github.com/onsi/gomega"
@@ -49,3 +51,45 @@
        _, err := executeCommand("artifact build -f missing -o output --format 
invalid")
        g.Expect(err).To(MatchError("unsupported OCI output format 
\"invalid\""))
 }
+
+func Test_BuildArtifactSymlinks(t *testing.T) {
+       if runtime.GOOS == "windows" {
+               t.Skip("symlink creation requires privileges on Windows")
+       }
+       g := NewWithT(t)
+
+       // Create a dir with a relative symlink to a file living outside of it.
+       tmpDir := t.TempDir()
+       aPath := filepath.Join(tmpDir, "artifact")
+       g.Expect(os.MkdirAll(aPath, 0o755)).To(Succeed())
+       g.Expect(os.WriteFile(filepath.Join(aPath, "main.cue"), []byte("main"), 
0o644)).To(Succeed())
+       sharedFile := filepath.Join(tmpDir, "shared", "extra.cue")
+       g.Expect(os.MkdirAll(filepath.Dir(sharedFile), 0o755)).To(Succeed())
+       g.Expect(os.WriteFile(sharedFile, []byte("extra"), 0o644)).To(Succeed())
+       g.Expect(os.Symlink(filepath.Join("..", "shared", "extra.cue"),
+               filepath.Join(aPath, "extra.cue"))).To(Succeed())
+
+       // By default the symlinked file is left out of the artifact.
+       output := filepath.Join(t.TempDir(), "skip")
+       _, err := executeCommand(fmt.Sprintf(
+               "artifact build -f %s -o %s -t 1.0.0 --format oci-layout",
+               aPath,
+               output,
+       ))
+       g.Expect(err).ToNot(HaveOccurred())
+       files := layoutFiles(g, output, "generic")
+       g.Expect(files).To(HaveKeyWithValue("main.cue", "main"))
+       g.Expect(files).ToNot(HaveKey("extra.cue"))
+
+       // With the opt-in, the symlinked file is materialized in the artifact.
+       output = filepath.Join(t.TempDir(), "resolve")
+       _, err = executeCommand(fmt.Sprintf(
+               "artifact build -f %s -o %s -t 1.0.0 --format oci-layout 
--resolve-symlinks",
+               aPath,
+               output,
+       ))
+       g.Expect(err).ToNot(HaveOccurred())
+       files = layoutFiles(g, output, "generic")
+       g.Expect(files).To(HaveKeyWithValue("main.cue", "main"))
+       g.Expect(files).To(HaveKeyWithValue("extra.cue", "extra"))
+}
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/cmd/timoni/mod_build.go 
new/timoni-0.36.0/cmd/timoni/mod_build.go
--- old/timoni-0.35.0/cmd/timoni/mod_build.go   2026-09-28 15:13:34.000000000 
+0200
+++ new/timoni-0.36.0/cmd/timoni/mod_build.go   2026-10-21 19:00:30.000000000 
+0200
@@ -49,6 +49,10 @@
   # Build a module to an OCI image layout directory
   timoni mod build ./path/to/module -v 1.0.0 -o ./app-module-1.0.0 --format 
oci-layout
 
+  # Build a module that shares files with other modules using symbolic links
+  timoni mod build ./path/to/module -v 1.0.0 -o ./app-module-1.0.0.oci.tar \
+       --resolve-symlinks
+
   # Build a module with custom OCI annotations
   timoni mod build ./path/to/module -v 1.0.0 -o ./app-module-1.0.0.oci.tar \
        --annotation='org.opencontainers.image.licenses=Apache-2.0' \
@@ -66,10 +70,11 @@
 
 // buildModFlags contains local module build inputs.
 type buildModFlags struct {
-       version     string
-       output      string
-       format      string
-       annotations []string
+       version         string
+       output          string
+       format          string
+       annotations     []string
+       resolveSymlinks bool
 }
 
 var buildModArgs buildModFlags
@@ -83,6 +88,8 @@
                "Output format, either 'oci-archive' or 'oci-layout'.")
        buildModCmd.Flags().StringArrayVarP(&buildModArgs.annotations, 
"annotation", "a", nil,
                "Set custom OCI annotations in the format '<key>=<value>'.")
+       buildModCmd.Flags().BoolVar(&buildModArgs.resolveSymlinks, 
"resolve-symlinks", false,
+               "Resolve symbolic links and package their targets as regular 
files and directories.")
        modCmd.AddCommand(buildModCmd)
 }
 
@@ -118,7 +125,23 @@
                return fmt.Errorf("reading %s failed: %w", apiv1.IgnoreFile, 
err)
        }
 
-       build, err := oci.BuildModuleImage(module, ignorePaths, annotations)
+       // When symlink resolution is enabled, stage the module in a temp dir
+       // so that the artifact contains the symlink targets as regular files.
+       moduleDir := module
+       if buildModArgs.resolveSymlinks {
+               tmpDir, err := os.MkdirTemp("", apiv1.FieldManager)
+               if err != nil {
+                       return err
+               }
+               defer os.RemoveAll(tmpDir)
+
+               moduleDir = filepath.Join(tmpDir, "module")
+               if err := engine.CopyDir(module, moduleDir, true); err != nil {
+                       return err
+               }
+       }
+
+       build, err := oci.BuildModuleImage(moduleDir, ignorePaths, annotations)
        if err != nil {
                return err
        }
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/cmd/timoni/mod_build_test.go 
new/timoni-0.36.0/cmd/timoni/mod_build_test.go
--- old/timoni-0.35.0/cmd/timoni/mod_build_test.go      2026-09-28 
15:13:34.000000000 +0200
+++ new/timoni-0.36.0/cmd/timoni/mod_build_test.go      2026-10-21 
19:00:30.000000000 +0200
@@ -17,14 +17,20 @@
 package main
 
 import (
+       "archive/tar"
        "fmt"
+       "io"
+       "os"
        "path/filepath"
+       "runtime"
        "testing"
 
+       v1 "github.com/google/go-containerregistry/pkg/v1"
        "github.com/google/go-containerregistry/pkg/v1/layout"
        . "github.com/onsi/gomega"
 
        apiv1 "github.com/stefanprodan/timoni/api/v1alpha1"
+       "github.com/stefanprodan/timoni/internal/fscopy"
 )
 
 func Test_BuildMod(t *testing.T) {
@@ -90,3 +96,89 @@
        ))
        g.Expect(err).To(MatchError(ContainSubstring("version build metadata is 
not supported")))
 }
+
+func Test_BuildModSymlinks(t *testing.T) {
+       if runtime.GOOS == "windows" {
+               t.Skip("symlink creation requires privileges on Windows")
+       }
+       g := NewWithT(t)
+
+       // Copy the test module and add a relative symlink
+       // to a file living outside the module root.
+       tmpDir := t.TempDir()
+       modPath := filepath.Join(tmpDir, "module")
+       g.Expect(fscopy.CopyDir("testdata/module", modPath, 
fscopy.Options{})).To(Succeed())
+       sharedFile := filepath.Join(tmpDir, "shared", "extra.txt")
+       g.Expect(os.MkdirAll(filepath.Dir(sharedFile), 0o755)).To(Succeed())
+       g.Expect(os.WriteFile(sharedFile, []byte("extra"), 0o644)).To(Succeed())
+       g.Expect(os.Symlink(filepath.Join("..", "shared", "extra.txt"),
+               filepath.Join(modPath, "extra.txt"))).To(Succeed())
+
+       // By default the symlinked file is left out of the artifact.
+       output := filepath.Join(t.TempDir(), "skip")
+       _, err := executeCommand(fmt.Sprintf(
+               "mod build %s -v 1.0.0 -o %s --format oci-layout",
+               modPath,
+               output,
+       ))
+       g.Expect(err).ToNot(HaveOccurred())
+       g.Expect(layoutFiles(g, output, 
apiv1.TimoniModContentType)).ToNot(HaveKey("extra.txt"))
+
+       // With the opt-in, the symlinked file is materialized in the artifact.
+       output = filepath.Join(t.TempDir(), "resolve")
+       _, err = executeCommand(fmt.Sprintf(
+               "mod build %s -v 1.0.0 -o %s --format oci-layout 
--resolve-symlinks",
+               modPath,
+               output,
+       ))
+       g.Expect(err).ToNot(HaveOccurred())
+       files := layoutFiles(g, output, apiv1.TimoniModContentType)
+       g.Expect(files).To(HaveKeyWithValue("extra.txt", "extra"))
+       g.Expect(files).To(HaveKey("values.cue"))
+}
+
+// layoutFiles returns the regular files packaged in the layer with the given
+// content type of the single image in the OCI layout at the given path,
+// keyed by their archive path.
+func layoutFiles(g *WithT, path, contentType string) map[string]string {
+       p, err := layout.FromPath(path)
+       g.Expect(err).ToNot(HaveOccurred())
+       index, err := p.ImageIndex()
+       g.Expect(err).ToNot(HaveOccurred())
+       indexManifest, err := index.IndexManifest()
+       g.Expect(err).ToNot(HaveOccurred())
+       g.Expect(indexManifest.Manifests).To(HaveLen(1))
+       image, err := index.Image(indexManifest.Manifests[0].Digest)
+       g.Expect(err).ToNot(HaveOccurred())
+       manifest, err := image.Manifest()
+       g.Expect(err).ToNot(HaveOccurred())
+       var layer v1.Layer
+       for _, desc := range manifest.Layers {
+               if desc.Annotations[apiv1.ContentTypeAnnotation] == contentType 
{
+                       layer, err = image.LayerByDigest(desc.Digest)
+                       g.Expect(err).ToNot(HaveOccurred())
+               }
+       }
+       g.Expect(layer).ToNot(BeNil())
+
+       rc, err := layer.Uncompressed()
+       g.Expect(err).ToNot(HaveOccurred())
+       defer rc.Close()
+
+       files := map[string]string{}
+       tr := tar.NewReader(rc)
+       for {
+               hdr, err := tr.Next()
+               if err == io.EOF {
+                       break
+               }
+               g.Expect(err).ToNot(HaveOccurred())
+               if hdr.Typeflag != tar.TypeReg {
+                       continue
+               }
+               data, err := io.ReadAll(tr)
+               g.Expect(err).ToNot(HaveOccurred())
+               files[hdr.Name] = string(data)
+       }
+       return files
+}
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/docs/cue/module/publishing.mdx 
new/timoni-0.36.0/docs/cue/module/publishing.mdx
--- old/timoni-0.35.0/docs/cue/module/publishing.mdx    2026-09-28 
15:13:34.000000000 +0200
+++ new/timoni-0.36.0/docs/cue/module/publishing.mdx    2026-10-21 
19:00:30.000000000 +0200
@@ -162,7 +162,8 @@
 
 When packaging a module, Timoni skips symbolic links by default.
 To include the link targets in the artifact as regular files and
-directories, run `timoni mod push` with the `--resolve-symlinks` flag:
+directories, run `timoni mod push` or `timoni mod build` with the
+`--resolve-symlinks` flag:
 
 ```shell
 timoni mod push ./path/to/module oci://docker.io/org/app-module \
@@ -170,14 +171,21 @@
   --resolve-symlinks
 ```
 
+The same flag applies when building the module artifact locally:
+
+```shell
+timoni mod build ./path/to/module -v 1.0.0 -o ./app-module-1.0.0.oci.tar \
+  --resolve-symlinks
+```
+
 This allows sharing files between modules in a monorepo, for example
 by symlinking the vendored CUE schemas under `cue.mod/gen`.
 
 The `timoni.ignore` rules apply to the resolved content at its
 in-module path, the same as for regular files and directories.
 
-The `timoni artifact push` command takes the same flag for packaging
-the symlink targets found in the pushed directory.
+The `timoni artifact push` and `timoni artifact build` commands take the
+same flag for packaging the symlink targets found in the given directory.
 
 <Tip>
 **Local modules**
@@ -186,7 +194,7 @@
 and `timoni mod vet` read the module files in place from the source
 directory, following symbolic links the same way as the operating system.
 Note that a module which relies on symlinked files builds locally but
-is published incomplete unless pushed with `--resolve-symlinks`.
+is published incomplete unless pushed or built with `--resolve-symlinks`.
 </Tip>
 
 ## Listing module versions
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/go.mod new/timoni-0.36.0/go.mod
--- old/timoni-0.35.0/go.mod    2026-09-28 15:13:34.000000000 +0200
+++ new/timoni-0.36.0/go.mod    2026-10-21 19:00:30.000000000 +0200
@@ -6,37 +6,37 @@
        cuelang.org/go v0.17.1
        github.com/Masterminds/semver/v3 v3.5.0
        github.com/briandowns/spinner v1.23.2
-       github.com/distribution/distribution/v3 v3.1.1
+       github.com/distribution/distribution/v3 v3.1.2
        github.com/fatih/color v1.19.0
-       github.com/fluxcd/cli-utils v1.3.0
-       github.com/fluxcd/pkg/sourceignore v0.19.0
-       github.com/fluxcd/pkg/ssa v0.78.0
-       github.com/fluxcd/pkg/tar v1.2.0
-       github.com/getkin/kin-openapi v0.147.0
+       github.com/fluxcd/cli-utils v1.4.0
+       github.com/fluxcd/pkg/sourceignore v0.21.0
+       github.com/fluxcd/pkg/ssa v0.80.0
+       github.com/fluxcd/pkg/tar v1.3.0
+       github.com/getkin/kin-openapi v0.151.0
        github.com/go-logr/logr v1.4.4
        github.com/go-logr/zerologr v1.2.3
        github.com/gonvenience/ytbx v1.5.0
        github.com/google/go-cmp v0.7.0
-       github.com/google/go-containerregistry v0.21.9
+       github.com/google/go-containerregistry v0.22.1
        github.com/hashicorp/go-cleanhttp v0.5.2
        github.com/homeport/dyff v1.12.0
-       github.com/mattn/go-shellwords v1.0.14
-       github.com/olekukonko/tablewriter v1.1.4
-       github.com/onsi/gomega v1.43.0
+       github.com/mattn/go-shellwords v1.0.16
+       github.com/olekukonko/tablewriter v1.1.5
+       github.com/onsi/gomega v1.44.0
        github.com/opencontainers/go-digest v1.0.0
        github.com/phayes/freeport v0.0.0-20220201140144-74d24b5ae9f5
-       github.com/rogpeppe/go-internal v1.15.0
+       github.com/rogpeppe/go-internal v1.16.0
        github.com/rs/zerolog v1.35.1
-       github.com/sirupsen/logrus v1.10.1
+       github.com/sirupsen/logrus v1.10.2
        github.com/spf13/cobra v1.10.2
-       golang.org/x/sync v0.23.0
+       golang.org/x/sync v0.24.0
        k8s.io/api v0.37.1
        k8s.io/apiextensions-apiserver v0.37.1
        k8s.io/apimachinery v0.37.1
        k8s.io/apiserver v0.37.1
        k8s.io/cli-runtime v0.37.1
        k8s.io/client-go v0.37.1
-       sigs.k8s.io/controller-runtime v0.25.1
+       sigs.k8s.io/controller-runtime v0.25.2
        sigs.k8s.io/yaml v1.6.0
 )
 
@@ -49,7 +49,6 @@
        github.com/antlr4-go/antlr/v4 v4.13.1 // indirect
        github.com/beorn7/perks v1.0.1 // indirect
        github.com/blang/semver/v4 v4.0.0 // indirect
-       github.com/bshuster-repo/logrus-logstash-hook v1.1.0 // indirect
        github.com/cenkalti/backoff/v5 v5.0.3 // indirect
        github.com/cespare/xxhash/v2 v2.3.0 // indirect
        github.com/chai2010/gettext-go v1.0.3 // indirect
@@ -65,7 +64,7 @@
        github.com/docker/cli v29.7.2+incompatible // indirect
        github.com/docker/docker-credential-helpers v0.9.8 // indirect
        github.com/docker/go-events v0.0.0-20250808211157-605354379745 // 
indirect
-       github.com/docker/go-metrics v0.0.1 // indirect
+       github.com/docker/go-metrics v0.1.0 // indirect
        github.com/emicklei/go-restful/v3 v3.13.0 // indirect
        github.com/emicklei/proto v1.14.3 // indirect
        github.com/evanphx/json-patch/v5 v5.9.11 // indirect
@@ -105,7 +104,7 @@
        github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
        github.com/inconshreveable/mousetrap v1.1.0 // indirect
        github.com/json-iterator/go v1.1.12 // indirect
-       github.com/klauspost/compress v1.19.1 // indirect
+       github.com/klauspost/compress v1.19.2 // indirect
        github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // 
indirect
        github.com/lucasb-eyer/go-colorful v1.4.0 // indirect
        github.com/mattn/go-ciede2000 v0.0.0-20170301095244-782e8c62fec3 // 
indirect
@@ -139,7 +138,7 @@
        github.com/redis/go-redis/extra/redisotel/v9 v9.0.5 // indirect
        github.com/redis/go-redis/v9 v9.7.3 // indirect
        github.com/russross/blackfriday/v2 v2.1.0 // indirect
-       github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 // indirect
+       github.com/santhosh-tekuri/jsonschema/v6 v6.0.3 // indirect
        github.com/sergi/go-diff v1.4.0 // indirect
        github.com/spf13/pflag v1.0.10 // indirect
        github.com/texttheater/golang-levenshtein v1.0.1 // indirect
@@ -176,13 +175,13 @@
        go.opentelemetry.io/proto/otlp v1.11.0 // indirect
        go.yaml.in/yaml/v2 v2.4.4 // indirect
        go.yaml.in/yaml/v3 v3.0.5 // indirect
-       golang.org/x/crypto v0.57.0 // indirect
+       golang.org/x/crypto v0.58.0 // indirect
        golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f // indirect
-       golang.org/x/net v0.58.0 // indirect
-       golang.org/x/oauth2 v0.36.0 // indirect
-       golang.org/x/sys v0.48.0 // indirect
-       golang.org/x/term v0.46.0 // indirect
-       golang.org/x/text v0.42.0 // indirect
+       golang.org/x/net v0.61.0 // indirect
+       golang.org/x/oauth2 v0.37.0 // indirect
+       golang.org/x/sys v0.49.0 // indirect
+       golang.org/x/term v0.47.0 // indirect
+       golang.org/x/text v0.43.0 // indirect
        golang.org/x/time v0.15.0 // indirect
        gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
        google.golang.org/genproto/googleapis/api 
v0.0.0-20260803160001-6ac0973c030d // indirect
@@ -191,16 +190,15 @@
        google.golang.org/protobuf v1.36.12 // indirect
        gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
        gopkg.in/inf.v0 v0.9.1 // indirect
-       gopkg.in/yaml.v2 v2.4.0 // indirect
        gotest.tools/v3 v3.5.2 // indirect
        k8s.io/component-base v0.37.1 // indirect
        k8s.io/klog/v2 v2.140.0 // indirect
        k8s.io/kube-openapi v0.0.0-20260821135717-be32def86098 // indirect
-       k8s.io/kubectl v0.37.0 // indirect
+       k8s.io/kubectl v0.37.1 // indirect
        k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3 // indirect
        sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
-       sigs.k8s.io/kustomize/api v0.21.1 // indirect
-       sigs.k8s.io/kustomize/kyaml v0.21.1 // indirect
+       sigs.k8s.io/kustomize/api v0.21.2 // indirect
+       sigs.k8s.io/kustomize/kyaml v0.21.2 // indirect
        sigs.k8s.io/randfill v1.0.0 // indirect
        sigs.k8s.io/structured-merge-diff/v6 v6.4.2 // indirect
 )
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/timoni-0.35.0/go.sum new/timoni-0.36.0/go.sum
--- old/timoni-0.35.0/go.sum    2026-09-28 15:13:34.000000000 +0200
+++ new/timoni-0.36.0/go.sum    2026-10-21 19:00:30.000000000 +0200
@@ -12,22 +12,16 @@
 github.com/MakeNowJust/heredoc v1.0.0/go.mod 
h1:mG5amYoWBHf8vpLOuehzbGGw0EHxpZZ6lCpQ4fNJ8LE=
 github.com/Masterminds/semver/v3 v3.5.0 
h1:kQceYJfbupGfZOKZQg0kou0DgAKhzDg2NZPAwZ/2OOE=
 github.com/Masterminds/semver/v3 v3.5.0/go.mod 
h1:4V+yj/TJE1HU9XfppCwVMZq3I84lprf4nC11bSS5beM=
-github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod 
h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc=
-github.com/alecthomas/units v0.0.0-20151022065526-2efee857e7cf/go.mod 
h1:ybxpYRFXyAe+OPACYpWeL0wqObRcbAqCMya13uyzqw0=
 github.com/alicebob/miniredis/v2 v2.35.0 
h1:QwLphYqCEAo1eu1TqPRN2jgVMPBweeQcR21jeqDCONI=
 github.com/alicebob/miniredis/v2 v2.35.0/go.mod 
h1:TcL7YfarKPGDAthEtl5NBeHZfeUQj6OXMm/+iu5cLMM=
 github.com/antlr4-go/antlr/v4 v4.13.1 
h1:SqQKkuVZ+zWkMMNkjy5FZe5mr5WURWnlpmOuzYWrPrQ=
 github.com/antlr4-go/antlr/v4 v4.13.1/go.mod 
h1:GKmUxMtwp6ZgGwZSva4eWPC5mS6vUAmOABFgjdkM7Nw=
-github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973/go.mod 
h1:Dwedo/Wpr24TaqPxmxbtue+5NUziq4I4S80YR8gNf3Q=
-github.com/beorn7/perks v1.0.0/go.mod 
h1:KWe93zE9D1o94FZ5RNwFwVgaQK1VOXiVxmqh+CedLV8=
 github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
 github.com/beorn7/perks v1.0.1/go.mod 
h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
 github.com/blang/semver/v4 v4.0.0 
h1:1PFHFE6yCCTv8C1TeyNNarDzntLi7wMI5i/pzqYIsAM=
 github.com/blang/semver/v4 v4.0.0/go.mod 
h1:IbckMUScFkM3pff0VJDNKRiT6TG/YpiHIM2yvyW5YoQ=
 github.com/briandowns/spinner v1.23.2 
h1:Zc6ecUnI+YzLmJniCfDNaMbW0Wid1d5+qcTq4L2FW8w=
 github.com/briandowns/spinner v1.23.2/go.mod 
h1:LaZeM4wm2Ywy6vO571mvhQNRcWfRUnXOs0RcKV0wYKM=
-github.com/bshuster-repo/logrus-logstash-hook v1.1.0 
h1:o2FzZifLg+z/DN1OFmzTWzZZx/roaqt8IPZCIVco8r4=
-github.com/bshuster-repo/logrus-logstash-hook v1.1.0/go.mod 
h1:Q2aXOe7rNuPgbBtPCOzYyWDvKX7+FpxE5sRdvcPoui0=
 github.com/bsm/ginkgo/v2 v2.7.0/go.mod 
h1:AiKlXPm7ItEHNc/2+OkrNG4E0ITzojb9/xWzvQ9XZ9w=
 github.com/bsm/ginkgo/v2 v2.12.0 
h1:Ny8MWAHyOepLGlLKYmXG4IEkioBysk6GpaRTLC8zwWs=
 github.com/bsm/ginkgo/v2 v2.12.0/go.mod 
h1:SwYbGRRDovPVboqFv0tPTcG1sN61LM1Z4ARdbAV9g4c=
@@ -64,8 +58,8 @@
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod 
h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f 
h1:lO4WD4F/rVNCu3HqELle0jiPLLBs70cWOduZpkS1E78=
 github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f/go.mod 
h1:cuUVRXasLTGF7a8hSLbxyZXjz+1KgoB3wDUb6vlszIc=
-github.com/distribution/distribution/v3 v3.1.1 
h1:KUbk7C8CfaLXy8kbf/hGq9cad/wCoLB6dbWH6DMbmX0=
-github.com/distribution/distribution/v3 v3.1.1/go.mod 
h1:d7lXwZpph0bVcOj4Aqn0nMrWHIwRQGdiV5TLeI+/w6Y=
+github.com/distribution/distribution/v3 v3.1.2 
h1:/Bv2YIqqSR00HiO49FT93hovy6r9IlrzwUDsJjCN5qg=
+github.com/distribution/distribution/v3 v3.1.2/go.mod 
h1:Oz0Drs2Tx3iTXzK3DhUD4otfTfqlCxlWVC7QJeXWBP0=
 github.com/distribution/reference v0.6.0 
h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk=
 github.com/distribution/reference v0.6.0/go.mod 
h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E=
 github.com/dlclark/regexp2 v1.11.0 
h1:G/nrcoOa7ZXlpoa/91N3X7mM3r8eIlMBBJZvsz/mxKI=
@@ -76,8 +70,8 @@
 github.com/docker/docker-credential-helpers v0.9.8/go.mod 
h1:v1S+hepowrQXITkEfw6o4+BMbGot02wiKpzWhGUZK6c=
 github.com/docker/go-events v0.0.0-20250808211157-605354379745 
h1:yOn6Ze6IbYI/KAw2lw/83ELYvZh6hvsygTVkD0dzMC4=
 github.com/docker/go-events v0.0.0-20250808211157-605354379745/go.mod 
h1:Uw6UezgYA44ePAFQYUehOuCzmy5zmg/+nl2ZfMWGkpA=
-github.com/docker/go-metrics v0.0.1 
h1:AgB/0SvBxihN0X8OR4SjsblXkbMvalQ8cjmtKQ2rQV8=
-github.com/docker/go-metrics v0.0.1/go.mod 
h1:cG1hvH2utMXtqgqqYE9plW6lDxS3/5ayHzueweSI3Vw=
+github.com/docker/go-metrics v0.1.0 
h1:r76KPNpstz+IvQKSWpYegSkkyzex0V3A1ZGVx6bhGlY=
+github.com/docker/go-metrics v0.1.0/go.mod 
h1:PciI3sONtB051kXALN1JoIlpcu54E1FuPh+4DuqEzyw=
 github.com/emicklei/go-restful/v3 v3.13.0 
h1:C4Bl2xDndpU6nJ4bc1jXd+uTmYPVUwkD6bFY/oTyCes=
 github.com/emicklei/go-restful/v3 v3.13.0/go.mod 
h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
 github.com/emicklei/proto v1.14.3 
h1:zEhlzNkpP8kN6utonKMzlPfIvy82t5Kb9mufaJxSe1Q=
@@ -92,25 +86,22 @@
 github.com/fatih/color v1.19.0/go.mod 
h1:zNk67I0ZUT1bEGsSGyCZYZNrHuTkJJB+r6Q9VuMi0LE=
 github.com/felixge/httpsnoop v1.1.0 
h1:3YtUj32ZZkqZtt3sZZsClsymw/QDuVfpNhoA31zeORc=
 github.com/felixge/httpsnoop v1.1.0/go.mod 
h1:Zqxgdd+1Rkcz8euOqdr7lqgCRJztwr5hp9vDSi5UZCE=
-github.com/fluxcd/cli-utils v1.3.0 
h1:doEjNgeNb4klO/1mNgU9bkeou5zH/YpHBQqZ7HTBgkc=
-github.com/fluxcd/cli-utils v1.3.0/go.mod 
h1:qW5YGrml58qvAv+fBqp9Vp4xGkkIc6h6eJLd77eqFoM=
-github.com/fluxcd/pkg/sourceignore v0.19.0 
h1:s3/E03o9JTAvjIE7K8vI257AT2+0zy8cFOFaX+lx0z8=
-github.com/fluxcd/pkg/sourceignore v0.19.0/go.mod 
h1:MYwDEmDdj5GjHg1r1ljgtNkXNGkeV42G8BnCsggqExg=
-github.com/fluxcd/pkg/ssa v0.78.0 
h1:Wzm9uoYLDUCRV2SlJuBLkOQu/OnPKuTWyTzIFZbpVfY=
-github.com/fluxcd/pkg/ssa v0.78.0/go.mod 
h1:yuW/1rJj6w89NpRgj2OJAP7tfqaXD6JmKm+WVnPrHKk=
-github.com/fluxcd/pkg/tar v1.2.0 
h1:T6WFB5M0YRHktlrgdKNskqpdp76TVDdWTOeuWz33CFs=
-github.com/fluxcd/pkg/tar v1.2.0/go.mod 
h1:Wlalp5vIVe+BbckkKkqExKcoHAeeWJPAzwK7ONeFcS0=
+github.com/fluxcd/cli-utils v1.4.0 
h1:zlTiCWcVDQvvwZXILYeu5rpbnGt1sS+w32y3+rkOpig=
+github.com/fluxcd/cli-utils v1.4.0/go.mod 
h1:OupUOj2boEKTbiguMbGMz5Z/d59JUcb1c7pPESe8Pjw=
+github.com/fluxcd/pkg/sourceignore v0.21.0 
h1:p65j81RzXAeL4KJKgbkFRou+xiA0841CUdAsOCSAb5o=
+github.com/fluxcd/pkg/sourceignore v0.21.0/go.mod 
h1:N9NFuxbEMm+UPtP9t+Oyx5LEs0uHu7W+WVPmdlIbCeY=
+github.com/fluxcd/pkg/ssa v0.80.0 
h1:GgakpCFz4pY+unpOscPYlc5eVLUsB7hw9TmWSNr3yp8=
+github.com/fluxcd/pkg/ssa v0.80.0/go.mod 
h1:mUwKP2+KZXm1mal1gSs9SjgcexyqzXbPfHKxdFv5ntM=
+github.com/fluxcd/pkg/tar v1.3.0 
h1:PbL5jNN5q/F6nXA8aCH+msM75BS6lSnPX2RNd48f8ls=
+github.com/fluxcd/pkg/tar v1.3.0/go.mod 
h1:CbN3lQVWrYBZ4CwcK7ZzpxA++WiiM1RQHDOtNPJWuno=
 github.com/fsnotify/fsnotify v1.10.1 
h1:b0/UzAf9yR5rhf3RPm9gf3ehBPpf0oZKIjtpKrx59Ho=
 github.com/fsnotify/fsnotify v1.10.1/go.mod 
h1:TLheqan6HD6GBK6PrDWyDPBaEV8LspOxvPSjC+bVfgo=
 github.com/fxamacker/cbor/v2 v2.9.3 
h1:oQBnFATpNdY8gJHTndDDv5Xl4QqNaz51G5LLEPhng3Q=
 github.com/fxamacker/cbor/v2 v2.9.3/go.mod 
h1:vM4b+DJCtHn+zz7h3FFp/hDAI9WNWCsZj23V5ytsSxQ=
-github.com/getkin/kin-openapi v0.147.0 
h1:s+Xsm9gUMPJbgCnABZ2to3zSQQ5A9dyj/zo62VVsldY=
-github.com/getkin/kin-openapi v0.147.0/go.mod 
h1:3BH9M9XDe/y9M5DSvEocVYAYq1w0qrhJHjC/vZi0AaY=
+github.com/getkin/kin-openapi v0.151.0 
h1:p8NIstL53h620DnlO9R4pR4QRkEzJ3jbw9flb4kc1hg=
+github.com/getkin/kin-openapi v0.151.0/go.mod 
h1:1+BHDzstro+P5CKtPy1X4PfofnFgmRe6uvMy9+r9fKY=
 github.com/go-errors/errors v1.5.1 
h1:ZwEMSLRCapFLflTpT7NKaAc7ukJ8ZPEjzlxt8rPN8bk=
 github.com/go-errors/errors v1.5.1/go.mod 
h1:sIVyrIiJhuEF+Pj9Ebtd6P/rEYROXFi3BopGUQ5a5Og=
-github.com/go-kit/kit v0.8.0/go.mod 
h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as=
-github.com/go-logfmt/logfmt v0.3.0/go.mod 
h1:Qt1PoO58o5twSAckw1HlFXLmHsOX5/0LbT9GBnD5lWE=
-github.com/go-logfmt/logfmt v0.4.0/go.mod 
h1:3RMwSq7FuexP4Kalkev3ejPJsZTpXXBr9+V4qmtdjCk=
 github.com/go-logr/logr v1.2.2/go.mod 
h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
 github.com/go-logr/logr v1.4.4 h1:tG4xh9yMsRCAiodLVTxyrkzSZ9+o0L1Kg/+cPVcbP/8=
 github.com/go-logr/logr v1.4.4/go.mod 
h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
@@ -156,13 +147,8 @@
 github.com/go-openapi/testify/v2 v2.6.1/go.mod 
h1:SgsVHtfooshd0tublTtJ50FPKhujf47YRqauXXOUxfw=
 github.com/go-quicktest/qt v1.102.0 
h1:HSQxCeh5YZH3EL3W39ixjtyaEhcWSXQHtHnMBzSs474=
 github.com/go-quicktest/qt v1.102.0/go.mod 
h1:p4lGIVX+8Wa6ZPNDvqcxq36XpUDLh42FLetFU7odllI=
-github.com/go-stack/stack v1.8.0/go.mod 
h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY=
 github.com/go-task/slim-sprig/v3 v3.0.0 
h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1vB6EwHI=
 github.com/go-task/slim-sprig/v3 v3.0.0/go.mod 
h1:W848ghGpv3Qj3dhTPRyJypKRiqCdHZiAzKg9hl15HA8=
-github.com/gogo/protobuf v1.1.1/go.mod 
h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
-github.com/golang/protobuf v1.2.0/go.mod 
h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
-github.com/golang/protobuf v1.3.1/go.mod 
h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
-github.com/golang/protobuf v1.3.2/go.mod 
h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.5.4 
h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek=
 github.com/golang/protobuf v1.5.4/go.mod 
h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps=
 github.com/gonvenience/bunt v1.4.3 
h1:MLd8YWu1Vl1tiL+XfXJvVA9kL71yQT0N+x7gXVH9H7w=
@@ -183,11 +169,10 @@
 github.com/google/cel-go v0.30.0/go.mod 
h1:X0bD6iVNR8pkROSOoHVdgTkzmRcosof7WQqCD6wcMc8=
 github.com/google/gnostic-models v0.7.1 
h1:SisTfuFKJSKM5CPZkffwi6coztzzeYUhc3v4yxLWH8c=
 github.com/google/gnostic-models v0.7.1/go.mod 
h1:whL5G0m6dmc5cPxKc5bdKdEN3UjI7OUGxBlw57miDrQ=
-github.com/google/go-cmp v0.3.0/go.mod 
h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod 
h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
-github.com/google/go-containerregistry v0.21.9 
h1:F+D4uZ3iA3DLMJLfhaqMdHJbzeqm/216WGQq2dokuLs=
-github.com/google/go-containerregistry v0.21.9/go.mod 
h1:dP5XNKcL7kMFF/TB3LfvWmVhAcv7iqkHb3oDK8aauTo=
+github.com/google/go-containerregistry v0.22.1 
h1:RZuuSYhTvlDvtsK+NkutoCZ//C0X2ebLK8X8l3ULs84=
+github.com/google/go-containerregistry v0.22.1/go.mod 
h1:bJR35SK8XgisYmhg/FMQ/5RK0S/XrOAqLBV5/LR2XE0=
 github.com/google/gofuzz v1.0.0/go.mod 
h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0=
 github.com/google/gofuzz v1.2.0/go.mod 
h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
@@ -215,15 +200,10 @@
 github.com/homeport/dyff v1.12.0/go.mod 
h1:ArdUQcX099hp+uQ7pnimwU0Xgk2ba7E7nqdFv3WBRr8=
 github.com/inconshreveable/mousetrap v1.1.0 
h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod 
h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
-github.com/json-iterator/go v1.1.6/go.mod 
h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCVDaaPEHmU=
-github.com/json-iterator/go v1.1.7/go.mod 
h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4=
 github.com/json-iterator/go v1.1.12 
h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
 github.com/json-iterator/go v1.1.12/go.mod 
h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
-github.com/julienschmidt/httprouter v1.2.0/go.mod 
h1:SYymIcj16QtmaHHD7aYtjjsJG7VTCxuUUipMqKk8s4w=
-github.com/klauspost/compress v1.19.1 
h1:VsB4HPswih7mmZ8WleSFQ75c/Ui1M4trX5oAsJnhSlk=
-github.com/klauspost/compress v1.19.1/go.mod 
h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ=
-github.com/konsorten/go-windows-terminal-sequences v1.0.1/go.mod 
h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
-github.com/kr/logfmt v0.0.0-20140226030751-b84e30acd515/go.mod 
h1:+0opPa2QZZtGFBFZlji/RkVcI2GknAs/DXo4wKdlNEc=
+github.com/klauspost/compress v1.19.2 
h1:hMRETovs/pu/dVWN7zIT1PGG8t509MwT6bO7XSi26R8=
+github.com/klauspost/compress v1.19.2/go.mod 
h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ=
 github.com/kr/pretty v0.1.0/go.mod 
h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
 github.com/kr/pretty v0.3.1/go.mod 
h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
@@ -247,9 +227,8 @@
 github.com/mattn/go-isatty v0.0.21/go.mod 
h1:ZXfXG4SQHsB/w3ZeOYbR0PrPwLy+n6xiMrJlRFqopa4=
 github.com/mattn/go-runewidth v0.0.19 
h1:v++JhqYnZuu5jSKrk9RbgF5v4CGUjqRfBm05byFGLdw=
 github.com/mattn/go-runewidth v0.0.19/go.mod 
h1:XBkDxAl56ILZc9knddidhrOlY5R/pDhgLpndooCuJAs=
-github.com/mattn/go-shellwords v1.0.14 
h1:yUKzIgsCnosndOASY6/enly1EAuaXeFSQ7cdyA3OuYg=
-github.com/mattn/go-shellwords v1.0.14/go.mod 
h1:EZzvwXDESEeg03EKmM+RmDnNOPKG4lLtQsUlTZDWQ8Y=
-github.com/matttproud/golang_protobuf_extensions v1.0.1/go.mod 
h1:D8He9yQNgCq6Z5Ld7szi9bcBfOoFv/3dc6xSMkL2PC0=
+github.com/mattn/go-shellwords v1.0.16 
h1:RRxAaRzU1YbzOSCj9NJqg2/VIbSWv0dnPoD3EwE8kxI=
+github.com/mattn/go-shellwords v1.0.16/go.mod 
h1:EZzvwXDESEeg03EKmM+RmDnNOPKG4lLtQsUlTZDWQ8Y=
 github.com/mitchellh/go-ps v1.0.0 
h1:i6ampVEEF4wQFF+bkYfwYgY+F/uYJDktmvLPf7qIgjc=
 github.com/mitchellh/go-ps v1.0.0/go.mod 
h1:J4lOc8z8yJs6vUwklHw2XEIiT4z4C40KtWVN3nvg8Pg=
 github.com/mitchellh/go-wordwrap v1.0.1 
h1:TLuKupo69TCn6TQSyGxwI1EblZZEsQ0vMlAFQflz0v0=
@@ -261,8 +240,6 @@
 github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod 
h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd 
h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod 
h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
-github.com/modern-go/reflect2 v0.0.0-20180701023420-4b7aa43c6742/go.mod 
h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
-github.com/modern-go/reflect2 v1.0.1/go.mod 
h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
 github.com/modern-go/reflect2 v1.0.2/go.mod 
h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
 github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee 
h1:W5t00kpgFdJifH4BDsTlE89Zl93FEloxaWZfGcifgq8=
 github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee/go.mod 
h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
@@ -270,7 +247,6 @@
 github.com/monochromegane/go-gitignore 
v0.0.0-20200626010858-205db1a8cc00/go.mod 
h1:Pm3mSP3c5uWn86xMLZ5Sa7JB9GsEZySvHYXCTK4E9q4=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 
h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod 
h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
-github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod 
h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
 github.com/oasdiff/yaml v0.1.1 h1:6nHx+pn9gBRM6YpBlFZFQGCCd1nuvqOBtTD3KKTgGxY=
 github.com/oasdiff/yaml v0.1.1/go.mod 
h1:EYJNoyktvWMJ0Hmhx+6qTaqMOsalUaRGT8Sj1hNcegU=
 github.com/oasdiff/yaml3 v0.0.14 
h1:aLJee3hxBK2H5wdXd9iPcIXb93Nty1Ge0pT171eHtkw=
@@ -281,12 +257,12 @@
 github.com/olekukonko/errors v1.2.0/go.mod 
h1:ppzxA5jBKcO1vIpCXQ9ZqgDh8iwODz6OXIGKU8r5m4Y=
 github.com/olekukonko/ll v0.1.6 h1:lGVTHO+Qc4Qm+fce/2h2m5y9LvqaW+DCN7xW9hsU3uA=
 github.com/olekukonko/ll v0.1.6/go.mod 
h1:NVUmjBb/aCtUpjKk75BhWrOlARz3dqsM+OtszpY4o88=
-github.com/olekukonko/tablewriter v1.1.4 
h1:ORUMI3dXbMnRlRggJX3+q7OzQFDdvgbN9nVWj1drm6I=
-github.com/olekukonko/tablewriter v1.1.4/go.mod 
h1:+kedxuyTtgoZLwif3P1Em4hARJs+mVnzKxmsCL/C5RY=
+github.com/olekukonko/tablewriter v1.1.5 
h1:4LoZSfMySpMQY3PT8RWJsJeuEuMIoo9xGRgvmqjg6IQ=
+github.com/olekukonko/tablewriter v1.1.5/go.mod 
h1:+kedxuyTtgoZLwif3P1Em4hARJs+mVnzKxmsCL/C5RY=
 github.com/onsi/ginkgo/v2 v2.32.0 
h1:Hw7s2pVrQo/8Yz5N77qdnpHaoc+c6cC9WIV1Jce+J6E=
 github.com/onsi/ginkgo/v2 v2.32.0/go.mod 
h1:+aXOY+vzZ5mu2iI2HpTZUPmM//oQfsNFX6gU9kNcA44=
-github.com/onsi/gomega v1.43.0 h1:VlG/1FxqNxhSO+lq/OHBNaaqwiBK/mO8JbVkX9Y+FeU=
-github.com/onsi/gomega v1.43.0/go.mod 
h1:REff/hsDsodHoKlWsP2mAPhu1+5/6hVYNf9rIEBpeSg=
+github.com/onsi/gomega v1.44.0 h1:eAiGl3Pw5jz5GQdDff0BcxYpAX1JxW8xD7mFUuwNfZQ=
+github.com/onsi/gomega v1.44.0/go.mod 
h1:e/C2HwaZ1DhvjzXXuFhcR7hY7Sh9pl7MmoWKEjzwcdA=
 github.com/opencontainers/go-digest v1.0.0 
h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
 github.com/opencontainers/go-digest v1.0.0/go.mod 
h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
 github.com/opencontainers/image-spec v1.1.1 
h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040=
@@ -297,30 +273,19 @@
 github.com/peterbourgon/diskv v2.0.1+incompatible/go.mod 
h1:uqqh8zWWbv1HBMNONnaR/tNboyR3/BZd58JJSHlUSCU=
 github.com/phayes/freeport v0.0.0-20220201140144-74d24b5ae9f5 
h1:Ii+DKncOVM8Cu1Hc+ETb5K+23HdAMvESYE3ZJ5b5cMI=
 github.com/phayes/freeport v0.0.0-20220201140144-74d24b5ae9f5/go.mod 
h1:iIss55rKnNBTvrwdmkUpLnDpZoAHvWaiq5+iMmen4AE=
-github.com/pkg/errors v0.8.0/go.mod 
h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
 github.com/pkg/errors v0.9.1/go.mod 
h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pmezard/go-difflib v1.0.0/go.mod 
h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 
h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U=
 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod 
h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
-github.com/prometheus/client_golang v0.9.1/go.mod 
h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw=
-github.com/prometheus/client_golang v1.0.0/go.mod 
h1:db9x61etRT2tGnBNRi70OPL5FsnadC4Ky3P0J6CfImo=
-github.com/prometheus/client_golang v1.1.0/go.mod 
h1:I1FGZT9+L76gKKOs5djB6ezCbFQP1xR9D75/vuwEF3g=
 github.com/prometheus/client_golang v1.24.1 
h1:JnJkREXzWxUdCuPFpIWZiPispT9xVV59uiuyR2bPlnU=
 github.com/prometheus/client_golang v1.24.1/go.mod 
h1:F+oSRECHg4sse5ucfYpYDeIv/hu68Zo0uoHKetWnzcE=
-github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod 
h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
-github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90/go.mod 
h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/prometheus/client_model v0.6.3 
h1:O0jaTVAYNxTHYInEPFJt5I3+sN8zqBtVMPTB1qyxiEo=
 github.com/prometheus/client_model v0.6.3/go.mod 
h1:gpN5P9S7Rr6Yr92PiQ+Ixvhf6JZEkF1dnxsYL2aPBEM=
-github.com/prometheus/common v0.4.1/go.mod 
h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
-github.com/prometheus/common v0.6.0/go.mod 
h1:eBmuwkDJBwy6iBfxCBob6t6dR6ENT/y+J+Zk0j9GMYc=
 github.com/prometheus/common v0.71.0 
h1:9KDAKb7Mj3HEVKyFCK6Dc/HIwlBzZIN2l7/lrHl3KK8=
 github.com/prometheus/common v0.71.0/go.mod 
h1:CLJ5H8TEsGX8bl31BdMkfhIZ+QmZ9tBPPotUxUbfcmk=
 github.com/prometheus/otlptranslator v1.0.0 
h1:s0LJW/iN9dkIH+EnhiD3BlkkP5QVIUVEoIwkU+A6qos=
 github.com/prometheus/otlptranslator v1.0.0/go.mod 
h1:vRYWnXvI6aWGpsdY/mOT/cbeVRBlPWtBNDb7kGR3uKM=
-github.com/prometheus/procfs v0.0.0-20181005140218-185b4288413d/go.mod 
h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
-github.com/prometheus/procfs v0.0.2/go.mod 
h1:TjEm7ze935MbeOT/UhFTIMYKhuLP4wbCsTZCD3I8kEA=
-github.com/prometheus/procfs v0.0.3/go.mod 
h1:4A/X28fw3Fc593LaREMrKMqOKvUAntwMDaekg4FpcdQ=
 github.com/prometheus/procfs v0.22.0 
h1:6q9+/JL9IKAPbCmBrv9n5O5Ty3NKnciV5X7YGw0oics=
 github.com/prometheus/procfs v0.22.0/go.mod 
h1:CvmFr/GVhIjIvWJZW3tgkODBQMRIf0EyWMQLHCHab58=
 github.com/protocolbuffers/txtpbfmt v0.0.0-20260420112717-c39628bde8b5 
h1:Mckui8l+Wqz2Ve7XQvsE8SbHNmDWu8NA7Xce5NFJ/kM=
@@ -332,30 +297,26 @@
 github.com/redis/go-redis/v9 v9.0.5/go.mod 
h1:WqMKv5vnQbRuZstUwxQI195wHy+t4PuXDOjzMvcuQHk=
 github.com/redis/go-redis/v9 v9.7.3 
h1:YpPyAayJV+XErNsatSElgRZZVCwXX9QzkKYNvO7x0wM=
 github.com/redis/go-redis/v9 v9.7.3/go.mod 
h1:bGUrSggJ9X9GUmZpZNEOQKaANxSGgOEBRltRTZHSvrA=
-github.com/rogpeppe/go-internal v1.15.0 
h1:D0RCU5rMAp+SpgkiNdrjfJ+LX4J1M32V2NeCY7EJ6hc=
-github.com/rogpeppe/go-internal v1.15.0/go.mod 
h1:DrUVZyrJU+txYW5/1kwtXQSMFio52ZOxX7yM1VHvnxs=
+github.com/rogpeppe/go-internal v1.16.0 
h1:O9DK+vNMDVGLr2BeZqmpLeMjiMNkuXfcqntWbZV6S5g=
+github.com/rogpeppe/go-internal v1.16.0/go.mod 
h1:DrUVZyrJU+txYW5/1kwtXQSMFio52ZOxX7yM1VHvnxs=
 github.com/rs/zerolog v1.35.1 h1:m7xQeoiLIiV0BCEY4Hs+j2NG4Gp2o2KPKmhnnLiazKI=
 github.com/rs/zerolog v1.35.1/go.mod 
h1:EjML9kdfa/RMA7h/6z6pYmq1ykOuA8/mjWaEvGI+jcw=
 github.com/russross/blackfriday/v2 v2.1.0 
h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf35Ld67mk=
 github.com/russross/blackfriday/v2 v2.1.0/go.mod 
h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
-github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 
h1:KRzFb2m7YtdldCEkzs6KqmJw4nqEVZGK7IN2kJkjTuQ=
-github.com/santhosh-tekuri/jsonschema/v6 v6.0.2/go.mod 
h1:JXeL+ps8p7/KNMjDQk3TCwPpBy0wYklyWTfbkIzdIFU=
+github.com/santhosh-tekuri/jsonschema/v6 v6.0.3 
h1:1EYB5IzjZawrrnELUi78f9fPu57HuXjmddZPjrls/28=
+github.com/santhosh-tekuri/jsonschema/v6 v6.0.3/go.mod 
h1:JXeL+ps8p7/KNMjDQk3TCwPpBy0wYklyWTfbkIzdIFU=
 github.com/sergi/go-diff v1.4.0 h1:n/SP9D5ad1fORl+llWyN+D6qoUETXNZARKjyY2/KVCw=
 github.com/sergi/go-diff v1.4.0/go.mod 
h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4=
-github.com/sirupsen/logrus v1.2.0/go.mod 
h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=
-github.com/sirupsen/logrus v1.8.1/go.mod 
h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0=
-github.com/sirupsen/logrus v1.10.1 
h1:xi4336Zh11WpU14fXR6I67V3yaTPQYwRx2WEtHbRg4Q=
-github.com/sirupsen/logrus v1.10.1/go.mod 
h1:vsQHnG7xzNsxk3NrwboUiWPnIC3dmbjcGPykD7+tiHk=
+github.com/sirupsen/logrus v1.10.2 
h1:G2SED73/qrAu6YwbdxOD6peLkCBI3z7L+ykJFTXJBBo=
+github.com/sirupsen/logrus v1.10.2/go.mod 
h1:SLEg8TqYulVKKfIGHldVp2K2aYz2DKSVBq4g/H5bR7Q=
 github.com/spf13/cobra v1.10.2 h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU=
 github.com/spf13/cobra v1.10.2/go.mod 
h1:7C1pvHqHw5A4vrJfjNwvOdzYu0Gml16OCs2GRiTUUS4=
 github.com/spf13/pflag v1.0.9/go.mod 
h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=
 github.com/spf13/pflag v1.0.10/go.mod 
h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/stretchr/objx v0.1.0/go.mod 
h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
-github.com/stretchr/objx v0.1.1/go.mod 
h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/objx v0.5.3 h1:jmXUvGomnU1o3W/V5h2VEradbpJDwGrzugQQvL0POH4=
 github.com/stretchr/objx v0.5.3/go.mod 
h1:rDQraq+vQZU7Fde9LOZLr8Tax6zZvy4kuNKF+QYS+U0=
-github.com/stretchr/testify v1.2.2/go.mod 
h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
 github.com/stretchr/testify v1.3.0/go.mod 
h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.4.0/go.mod 
h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
 github.com/stretchr/testify v1.6.1/go.mod 
h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
@@ -453,41 +414,29 @@
 go.yaml.in/yaml/v3 v3.0.4/go.mod 
h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
 go.yaml.in/yaml/v3 v3.0.5 h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw=
 go.yaml.in/yaml/v3 v3.0.5/go.mod 
h1:HVTZu1O7/Vkt2N+BFy8Zza+lnLsABggaTM2ZpNIGuKg=
-golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod 
h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
-golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod 
h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
-golang.org/x/crypto v0.57.0 h1:3ZVCjf8Ggz7zneR/EHRVx68Ctf+2pmIMP2UFhh9cC6M=
-golang.org/x/crypto v0.57.0/go.mod 
h1:Fdz0i5U6CoizGwLda9DttjSk6qlZo25zYNtR+ycvuZA=
+golang.org/x/crypto v0.58.0 h1:COkYLr4k7nDI4r6QtMML2AfzeIswWHAJthLS6K/M/54=
+golang.org/x/crypto v0.58.0/go.mod 
h1:Xh+kl5A+M0gMiWDytH2Hhr5Z7WbNCpv/eB/EFgfSk+w=
 golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f 
h1:W3F4c+6OLc6H2lb//N1q4WpJkhzJCK5J6kUi1NTVXfM=
 golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f/go.mod 
h1:J1xhfL/vlindoeF/aINzNzt2Bket5bjo9sdOYzOsU80=
 golang.org/x/mod v0.41.0 h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c=
 golang.org/x/mod v0.41.0/go.mod h1:Ek9pY8RKWXwsWvd3rQiHYtMqkjSUV+s1Rj7j4H5Ur6o=
-golang.org/x/net v0.0.0-20181114220301-adae6a3d119a/go.mod 
h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
-golang.org/x/net v0.0.0-20190613194153-d28f0bde5980/go.mod 
h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=
-golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU=
-golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
-golang.org/x/oauth2 v0.36.0/go.mod 
h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
-golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod 
h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod 
h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.23.0 h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk=
-golang.org/x/sync v0.23.0/go.mod 
h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0=
-golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod 
h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
-golang.org/x/sys v0.0.0-20181116152217-5ac8a444bdc5/go.mod 
h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
-golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod 
h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
-golang.org/x/sys v0.0.0-20190801041406-cbf593c0f2f3/go.mod 
h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod 
h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/net v0.61.0 h1:RR+6j/BTBCrggOLugxa+66R8FvoN6MHlzDlZIbN9YFw=
+golang.org/x/net v0.61.0/go.mod h1:WgDCOTH8iwtB66T4/GfI94AHo/hhdb7Hah9NDseQfiI=
+golang.org/x/oauth2 v0.37.0 h1:JUlcxA8oAtauLfiH8FX2/FkAWHAdi0QtGCGc+hofE98=
+golang.org/x/oauth2 v0.37.0/go.mod 
h1:IxwZNxUULJmpBFf9K/9NTMSIfZZuvuTy1gGxhigP/58=
+golang.org/x/sync v0.24.0 h1:iqiDrGoDgyuvAKrhLQthUEzU/R378N78gXbBjxed7oA=
+golang.org/x/sync v0.24.0/go.mod 
h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0=
 golang.org/x/sys v0.0.0-20210616094352-59db8d763f22/go.mod 
h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo=
-golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
-golang.org/x/term v0.46.0 h1:3+OXuTbaKDgwk8jTi3aSLHRlmWqHEUDUtxnbFigO4YE=
-golang.org/x/term v0.46.0/go.mod 
h1:+K02xbkittuwc0Am4abfA3Fc+XRGXkvBXNO88NCXPoc=
-golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
-golang.org/x/text v0.42.0 h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI=
-golang.org/x/text v0.42.0/go.mod 
h1:ojzP1Z+2QtioaF8DTtO8K5q7JWVVYwZKenzujK0Zd0E=
+golang.org/x/sys v0.49.0 h1:XbzkgYJHdqh/8m2Uu0W/dQv8nktxx4BFHp1M0gROTXA=
+golang.org/x/sys v0.49.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
+golang.org/x/term v0.47.0 h1:cpyOwQkr2Nzxe2p6KnrTG7Ei2wtzjsuSjhpXXepZ/BM=
+golang.org/x/term v0.47.0/go.mod 
h1:efAfAuG6RKABvg1ArGebRkvX6LXul14SM67o2e4mUCY=
+golang.org/x/text v0.43.0 h1:1QivrlhwAsnMOcqgOdl9my7s9OyZl8O5/UGUTJVXoWc=
+golang.org/x/text v0.43.0/go.mod 
h1:hbSIYA/amXcRXTFSZqh8tWHEoqRvvbKPJ2uz/KU+a+s=
 golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U=
 golang.org/x/time v0.15.0/go.mod 
h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno=
-golang.org/x/tools v0.49.0 h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI=
-golang.org/x/tools v0.49.0/go.mod 
h1:SJNXV9DBKT0UbdttsQjbfJlAE/q+y36++zo3uL3N0Oo=
+golang.org/x/tools v0.51.0 h1:k4Xc/1Om9jwkBJBo4NVLMSARBoWtK10mx+W5BnXCeAI=
+golang.org/x/tools v0.51.0/go.mod 
h1:9eEncMayCV6zRMGhR5eZEC2iBx98qWcF1HZ9Z7wJOoA=
 gomodules.xyz/jsonpatch/v2 v2.5.0 
h1:JELs8RLM12qJGXU4u/TO3V25KW8GreMKl9pdkk14RM0=
 gomodules.xyz/jsonpatch/v2 v2.5.0/go.mod 
h1:AH3dM2RI6uoBZxn3LVrfvJ3E0/9dG4cSrbuBJT4moAY=
 gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=
@@ -500,7 +449,6 @@
 google.golang.org/grpc v1.83.2/go.mod 
h1:YPI1hK3kDked6iHvgX3tR0y+nX/qpMFKhPgFsokw1S8=
 google.golang.org/protobuf v1.36.12 
h1:pJOKDDOyeXErUroCihFAd5LQuwXBSpVnKGrj5o/fwxc=
 google.golang.org/protobuf v1.36.12/go.mod 
h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
-gopkg.in/alecthomas/kingpin.v2 v2.2.6/go.mod 
h1:FMv+mEhP44yOT+4EoQTLFTRgOQ1FBLkstjWtayDeSgw=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod 
h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod 
h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c 
h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
@@ -509,9 +457,7 @@
 gopkg.in/evanphx/json-patch.v4 v4.13.0/go.mod 
h1:p8EYWUEYMpynmqDbY58zCKCFZw8pRWMG4EsWvDvM72M=
 gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
 gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
-gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
-gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
 gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod 
h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gotest.tools/v3 v3.5.2 h1:7koQfIKdy+I8UTetycgUqXWSDwpgv193Ka+qRsmBY8Q=
@@ -534,20 +480,20 @@
 k8s.io/klog/v2 v2.140.0/go.mod h1:o+/RWfJ6PwpnFn7OyAG3QnO47BFsymfEfrz6XyYSSp0=
 k8s.io/kube-openapi v0.0.0-20260821135717-be32def86098 
h1:z5+pcu1jTyKK5mNTe2/+x+U6Uuv9jRVOJQLaBJJMpeI=
 k8s.io/kube-openapi v0.0.0-20260821135717-be32def86098/go.mod 
h1:0/mqHCVhlumdJ3BhCfnjSZQE037nAhNodh1/hK0T8/I=
-k8s.io/kubectl v0.37.0 h1:cici6hiofx93ASldmprDmZF55SfhVt4o3HniltVLjTc=
-k8s.io/kubectl v0.37.0/go.mod h1:RSeEl8e/yqDx6srG8Azr0uAtVPNIZljA0PNh9HCBcdg=
+k8s.io/kubectl v0.37.1 h1:n1VCIntOJiX943uByXCThSZQmE+4v9jGS8S9u94/aHU=
+k8s.io/kubectl v0.37.1/go.mod h1:66cc4Bz8PxBTxlrHzBuzXEzGIytAnNasKQPeEcpuaV8=
 k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3 
h1:jVkFFVfXdXP74B/zbO3hM3hpSFD0xvhQ5U686DPurkE=
 k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3/go.mod 
h1:M2s5JB1lIYP3jzZdorPLHXIPJzt9vv2muW5a6L9DtNM=
 sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.36.0 
h1:/YpDJ4vReG7ZmzSpBGxduXgywWkJU9zHubgJG03MT+Y=
 sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.36.0/go.mod 
h1:tJo1aepTXyR+8Xs3sUsGBDk4Ub2AM5dPAPKJx0mpm5c=
-sigs.k8s.io/controller-runtime v0.25.1 
h1:BKgU9OeE8xv8EbbM8cY0NVzTQs35rokkdq1jh12fMb4=
-sigs.k8s.io/controller-runtime v0.25.1/go.mod 
h1:4QqLdT6z/L6Olj8JJCtvztid4/fnIiYsfaTFScegctc=
+sigs.k8s.io/controller-runtime v0.25.2 
h1:bEkK3PVOIVK9X8QWLGVhJgmFc++47vfT6wakSzAOLsQ=
+sigs.k8s.io/controller-runtime v0.25.2/go.mod 
h1:4QqLdT6z/L6Olj8JJCtvztid4/fnIiYsfaTFScegctc=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 
h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730/go.mod 
h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg=
-sigs.k8s.io/kustomize/api v0.21.1 
h1:lzqbzvz2CSvsjIUZUBNFKtIMsEw7hVLJp0JeSIVmuJs=
-sigs.k8s.io/kustomize/api v0.21.1/go.mod 
h1:f3wkKByTrgpgltLgySCntrYoq5d3q7aaxveSagwTlwI=
-sigs.k8s.io/kustomize/kyaml v0.21.1 
h1:IVlbmhC076nf6foyL6Taw4BkrLuEsXUXNpsE+ScX7fI=
-sigs.k8s.io/kustomize/kyaml v0.21.1/go.mod 
h1:hmxADesM3yUN2vbA5z1/YTBnzLJ1dajdqpQonwBL1FQ=
+sigs.k8s.io/kustomize/api v0.21.2 
h1:MRyw+zLnFBP+G40gZJoKZErAuRiOPEPao+ddS9L6xt4=
+sigs.k8s.io/kustomize/api v0.21.2/go.mod 
h1:inubcVvQjJR/BjUti22YVBWr4EX+XlurEWhB81v2JV4=
+sigs.k8s.io/kustomize/kyaml v0.21.2 
h1:1javwStFk7cgOeLU7yJtPmXcgMEhQgC2X0WjFT6U0p0=
+sigs.k8s.io/kustomize/kyaml v0.21.2/go.mod 
h1:zX3qwtuouXd2K1fMiCV0VSFReX06a+CY1rhyf5Dy7hQ=
 sigs.k8s.io/randfill v1.0.0 h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU=
 sigs.k8s.io/randfill v1.0.0/go.mod 
h1:XeLlZ/jmk4i1HRopwe7/aU3H5n1zNUcX6TM94b3QxOY=
 sigs.k8s.io/structured-merge-diff/v6 v6.4.2 
h1:qdOxHwrl2Kaag1aQEarlYcOA9vSyGCp3CIki3aW8c4Q=

++++++ timoni.obsinfo ++++++
--- /var/tmp/diff_new_pack.wBXGoa/_old  2026-10-27 16:51:58.388055680 +0100
+++ /var/tmp/diff_new_pack.wBXGoa/_new  2026-10-27 16:51:58.402056266 +0100
@@ -1,5 +1,5 @@
 name: timoni
-version: 0.35.0
-mtime: 1790601214
-commit: 995401ec3e45829b519208d8340a09a6b88c20a3
+version: 0.36.0
+mtime: 1792602030
+commit: 9f04f5c56a817024dce3f23bdbf8da4516fbe990
 

++++++ vendor.tar.gz ++++++
/work/SRC/openSUSE:Factory/timoni/vendor.tar.gz 
/work/SRC/openSUSE:Factory/.timoni.new.2252680/vendor.tar.gz differ: char 5, 
line 1

Reply via email to