chore: bump is-healthy to v1.0.90

[flankbot]

Automated changes by create-pull-request GitHub action

Summary by CodeRabbit

• Chores
  • Updated the application’s Go runtime version.
  • Refreshed health-checking, Kubernetes integration, and protocol buffer components to newer versions.
  • Included routine dependency maintenance and compatibility updates.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 2eda7790-4295-4ad5-a49d-e6d857c1ffc3

📥 Commits

Reviewing files that changed from the base of the PR and between 9bd9981 and 973ef2c.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

🚧 Files skipped from review as they are similar to previous changes (1)

• go.mod

---

Walkthrough

The module now targets Go 1.26.0. It also upgrades is-healthy, Kubernetes indirect dependencies, and google.golang.org/protobuf in go.mod.

Changes

Toolchain and dependency updates

Layer / File(s)	Summary
Go version and dependency updates go.mod	The module requires Go 1.26.0. Indirect health, Kubernetes, klog, kube-openapi, and protobuf dependencies use newer versions.

Possibly related PRs

• flanksource/commons#296: Updates the same health and dependency entries.
• flanksource/commons#312: Updates the same github.com/flanksource/is-healthy dependency.
• flanksource/commons#319: Updates the same Go version and dependency set.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely identifies the primary change: updating the is-healthy dependency to v1.0.90.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch bump-is-healthy-auto-pr

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch bump-is-healthy-auto-pr

Warning

Review ran into problems

🔥 Problems

Git: Failed to clone repository. Please run the @coderabbitai full review command to re-trigger a full review. If the issue persists, set path_filters to include or exclude specific files.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Gavel crashed before producing results

Exit code: 1
Error: gavel exited 1 before writing results

Last lines of gavel.log

go: downloading github.com/tidwall/match v1.2.0 go: downloading github.com/tidwall/pretty v1.2.1 go: downloading k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 go: downloading sigs.k8s.io/randfill...

Full gavel.log, JSON stub, and HTML stub are in the workflow artifact.

View full results

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: golang k8s.io/client-go is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: ? → golang/github.com/flanksource/clicky@v1.21.1 → golang/k8s.io/client-go@v0.36.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/k8s.io/client-go@v0.36.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@go.mod`:
- Line 3: Update the Go toolchain versions in the root workflows test.yml,
lint.yml, and release.yml from 1.25.x/v1.25.x to a supported 1.26.x version
matching the root module’s go 1.26.0 requirement. Leave the separate
cmd/hx/go.mod declaration at go 1.25.1 unchanged.

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: e4518c6d-3eb9-4e58-ab00-68ecde18b16e

📥 Commits

Reviewing files that changed from the base of the PR and between a09cb96 and 9bd9981.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

[coderabbitai]

🩺 Stability & Availability | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/usr/bin/env bash
set -euo pipefail

go version
rg -n --hidden -g '!.git/**' \
  -g 'go.mod' -g 'go.work' -g 'Dockerfile*' \
  -g '*.yml' -g '*.yaml' -g '*.toml' \
  '1\.25|1\.26|go-version|golang:' .

Repository: flanksource/commons

Length of output: 676

---

🏁 Script executed:

#!/usr/bin/env bash
set -euo pipefail

echo "== changed files/stat =="
git diff --stat -- go.mod go.sum || true
git diff --stat -- .github/workflows || true

echo
echo "== relevant workflow snippets =="
for f in .github/workflows/test.yml .github/workflows/lint.yml .github/workflows/hx-test.yml .github/workflows/release.yml; do
  if [ -f "$f" ]; then
    echo "--- $f ---"
    sed -n '1,80p;90,130p' "$f"
  fi
done

echo
echo "== module declarations =="
for f in go.mod cmd/hx/go.mod; do
  if [ -f "$f" ]; then
    echo "--- $f ---"
    sed -n '1,12p' "$f"
  fi
done

echo
echo "== top-level dependency tidy check =="
if command -v go >/dev/null 2>&1; then
  env GOMODCACHE="$PWD"/modcache GOFLAGS="-mod=readonly" go list -e ./... >/dev/null
fi

Repository: flanksource/commons

Length of output: 17288

---

Update root Go workflows to 1.26.x.

.github/workflows/test.yml, .github/workflows/lint.yml, and .github/workflows/release.yml install Go 1.25.x/v1.25.x, while the root module requires Go 1.26.0. Set those root workflows to a supported 1.26.x toolchain and keep cmd/hx/go.mod at go 1.25.1 separate.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@go.mod` at line 3, Update the Go toolchain versions in the root workflows
test.yml, lint.yml, and release.yml from 1.25.x/v1.25.x to a supported 1.26.x
version matching the root module’s go 1.26.0 requirement. Leave the separate
cmd/hx/go.mod declaration at go 1.25.1 unchanged.