ci: fix golangci-lint

Without this patch there are unexpected lint errors in version 1.60 where 1.61.0 passes locally on my machine. This patch updates to: golangci-lint has version 1.64.5 built with go1.24.0 from 0a603e49 on 2025-02-13T21:19:55Z
ci: update test cases with make bump
2026-03-19 08:44:58 +00:00 · 2025-02-20 09:28:35 -08:00 · 2025-02-20 09:14:37 -08:00 · 2025-02-20 09:07:47 -08:00 · 2025-02-20 08:37:01 -08:00 · 2025-02-06 14:37:50 -08:00
61 changed files with 289 additions and 499 deletions
--- a/.github/workflows/golangci-lint.yaml
+++ b/.github/workflows/golangci-lint.yaml
@@ -27,4 +27,4 @@ jobs:
      - name: golangci-lint
        uses: golangci/golangci-lint-action@v6
        with:
-          version: v1.60
+          version: v1.64.5
--- a/4
+++ b/4
@@ -32,17 +32,20 @@ bump: bumppatch
 .PHONY: bumppatch
 bumppatch: ## Bump the patch version.
 	scripts/bump patch
+	HOLOS_UPDATE_SCRIPTS=1 scripts/test

 .PHONY: bumpminor
 bumpminor: ## Bump the minor version.
 	scripts/bump minor
 	scripts/bump patch 0
+	HOLOS_UPDATE_SCRIPTS=1 scripts/test

 .PHONY: bumpmajor
 bumpmajor: ## Bump the major version.
 	scripts/bump major
 	scripts/bump minor 0
 	scripts/bump patch 0
+	HOLOS_UPDATE_SCRIPTS=1 scripts/test

 .PHONY: show-version
 show-version: ## Print the full version.
@@ -124,7 +127,6 @@ go-deps: ## tool versions pinned in tools.go
 	go install golang.org/x/tools/cmd/godoc
 	go install github.com/princjef/gomarkdoc/cmd/gomarkdoc
 	go install github.com/google/ko
-	go install github.com/stefanprodan/timoni/cmd/timoni@v0.23.0
 	# curl https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | bash

 .PHONY: frontend-deps
--- a/cmd/holos/main_test.go
+++ b/cmd/holos/main_test.go
@@ -11,10 +11,11 @@ import (
 )

 func TestMain(m *testing.M) {
-	os.Exit(testscript.RunMain(m, map[string]func() int{
-		"holos": cmd.MakeMain(),
-		"cue":   cue.Main,
-	}))
+	holosMain := cmd.MakeMain()
+	testscript.Main(m, map[string]func(){
+		"holos": func() { os.Exit(holosMain()) },
+		"cue":   func() { os.Exit(cue.Main()) },
+	})
 }

 func TestGuides_v1alpha5(t *testing.T) {
--- a/cmd/holos/tests/v1alpha5/schemas/kubernetes.txt
+++ b/cmd/holos/tests/v1alpha5/schemas/kubernetes.txt
@@ -31,7 +31,6 @@ spec:
        - kind: Resources
          output: resources.gen.yaml
          resources: {}
-      validators: []
      transformers:
        - kind: Kustomize
          inputs:
@@ -39,7 +38,8 @@ spec:
          output: components/no-name/no-name.gen.yaml
          kustomize:
            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
              resources:
                - resources.gen.yaml
-              kind: Kustomization
-              apiVersion: kustomize.config.k8s.io/v1beta1
+      validators: []
--- a/doc/md/tutorial/_cue/examples/01-holos-version.txt
+++ b/doc/md/tutorial/_cue/examples/01-holos-version.txt
@@ -1,7 +0,0 @@
-exec bash -c 'bash -euo pipefail $WORK/command.sh 2>&1'
-cmp stdout $WORK/output.txt
-
-- command.sh --
-holos --version
-- output.txt --
-0.103.0
--- a/doc/md/tutorial/_cue/examples/02-cue.txt
+++ b/doc/md/tutorial/_cue/examples/02-cue.txt
@@ -1,166 +0,0 @@
-# Set $HOME because:
-#   - Helm uses it for temporary files
-#   - Git requires it for setting author name/email globally
-env HOME=$WORK/.tmp
-chmod 0755 $WORK/update.sh
-
-# Configure git author for testscript execution
-exec git config --global user.name 'Holos Docs'
-exec git config --global user.email 'hello@holos.run'
-exec git config --global init.defaultBranch main
-
-# Remove the tutorial directory if it already exists
-exec rm -rf holos-cue-tutorial
-
-# Create and change to the tutorial directory, and then initialize the Holos platform
-exec bash -c 'bash -euo pipefail mkdir-and-init.sh'
-cd holos-cue-tutorial
-
-# Create the components directory, then combine and execute the multiline
-# podinfo component header/body/trailer files
-exec bash -c 'bash -euo pipefail $WORK/mkdir-components.sh'
-exec cat $WORK/podinfo-component-header.sh $WORK/podinfo-component-body.cue $WORK/eof-trailer.sh
-stdin stdout
-exec bash -xeuo pipefail
-
-# Combine and execute the multiline platform registration header/body/trailer files.
-exec cat $WORK/register-components-header.sh $WORK/register-components-body.cue $WORK/eof-trailer.sh
-stdin stdout
-exec bash -xeuo pipefail
-
-# Render and capture output
-# NOTE: The [net] condition will test whether external network access is available
-[net] exec bash -c 'bash -euo pipefail $WORK/render.sh 2>&1'
-[net] stdin stdout
-exec $WORK/update.sh $WORK/register-components-output.txt
-
-# Git init and commit
-exec bash -c 'bash -euo pipefail $WORK/git-init.sh'
-
-# Combine and execute the mixin component header/body/trailer files
-exec cat $WORK/mixin-component-header.sh $WORK/mixin-component-body.cue $WORK/eof-trailer.sh
-stdin stdout
-exec bash -xeuo pipefail
-
-# Import CRDs with Timoni
-exec bash -c 'bash -euo pipefail $WORK/import-crds.sh 2>&1'
-stdin stdout
-exec $WORK/update.sh $WORK/timoni-vendor.txt
-
-# Render platform
-[net] exec bash -c 'bash -euo pipefail $WORK/render.sh 2>&1'
-
-# Git diff and capture output
-exec bash -c 'bash -euo pipefail $WORK/git-diff.sh 2>&1'
-stdin stdout
-exec $WORK/update.sh $WORK/git.diff
-
-# Clean up the tutorial directory and tmp $HOME directory
-cd $WORK
-exec rm -rf holos-cue-tutorial
-exec rm -rf $HOME
-
-- update.sh --
-#! /bin/bash
-set -euo pipefail
-[[ -s "$1" ]] && [[ -z "${HOLOS_UPDATE_SCRIPTS:-}" ]] && exit 0
-cat > "$1"
-- mkdir-and-init.sh --
-mkdir holos-cue-tutorial && cd holos-cue-tutorial
-holos init platform v1alpha5
-- mkdir-components.sh --
-mkdir -p components/podinfo
-- import-crds.sh --
-timoni mod vendor crds -f https://raw.githubusercontent.com/external-secrets/external-secrets/v0.10.5/deploy/crds/bundle.yaml
-- podinfo-component-header.sh --
-cat <<EOF > components/podinfo/podinfo.cue
-- podinfo-component-body.cue --
-package holos
-
-// export the component build plan to holos
-holos: Component.BuildPlan
-
-// Component is a Helm chart
-Component: #Helm & {
-	Name:      "podinfo"
-	Namespace: "default"
-	// Add metadata.namespace to all resources with kustomize.
-	KustomizeConfig: Kustomization: namespace: Namespace
-	Chart: {
-		version: "6.6.2"
-		repository: {
-			name: "podinfo"
-			url:  "https://stefanprodan.github.io/podinfo"
-		}
-	}
-}
-- eof-trailer.sh --
-EOF
-- register-components-header.sh --
-cat <<EOF > platform/podinfo.cue
-- register-components-body.cue --
-package holos
-
-Platform: Components: podinfo: {
-	name: "podinfo"
-	path: "components/podinfo"
-}
-- render.sh --
-holos render platform
-- git-init.sh --
-git init . && git add . && git commit -m initial
-- mixin-component-header.sh --
-cat <<EOF > components/podinfo/mixins.cue
-- mixin-component-body.cue --
-package holos
-
-// Component fields are unified with podinfo.cue
-Component: {
-	// Concrete values are defined in podinfo.cue
-	Name:      string
-	Namespace: string
-
-	// Resources represents mix-in resources organized as a struct.
-	Resources: ExternalSecret: (Name): {
-		// Name is consistent with the component name.
-		metadata: name: Name
-		// Namespace is consistent with the component namespace.
-		metadata: namespace: Namespace
-		spec: {
-			// Ensure the target secret name is consistent.
-			target: name: metadata.name
-			// Ensure the name in the SecretStore is consistent.
-			dataFrom: [{extract: {key: metadata.name}}]
-			refreshInterval: "30s"
-			secretStoreRef: kind: "SecretStore"
-			secretStoreRef: name: "default"
-		}
-	}
-}
-- git-diff.sh --
-git diff deploy
-- git.diff --
-diff --git a/deploy/components/podinfo/podinfo.gen.yaml b/deploy/components/podinfo/podinfo.gen.yaml
-index 6e4aec0..f79e9d0 100644
--- a/deploy/components/podinfo/podinfo.gen.yaml
-+++ b/deploy/components/podinfo/podinfo.gen.yaml
-@@ -112,3 +112,19 @@ spec:
-       volumes:
-       - emptyDir: {}
-         name: data
-+---
-+apiVersion: external-secrets.io/v1beta1
-+kind: ExternalSecret
-+metadata:
-+  name: podinfo
-+  namespace: default
-+spec:
-+  dataFrom:
-+  - extract:
-+      key: podinfo
-+  refreshInterval: 30s
-+  secretStoreRef:
-+    kind: SecretStore
-+    name: default
-+  target:
-+    name: podinfo
--- a/doc/md/tutorial/_cue/script-01-holos-version/command.sh
+++ b/doc/md/tutorial/_cue/script-01-holos-version/command.sh
@@ -1 +0,0 @@
-holos --version
--- a/doc/md/tutorial/_cue/script-01-holos-version/output.txt
+++ b/doc/md/tutorial/_cue/script-01-holos-version/output.txt
@@ -1 +0,0 @@
-0.103.0
--- a/doc/md/tutorial/_cue/script-02-cue/eof-trailer.sh
+++ b/doc/md/tutorial/_cue/script-02-cue/eof-trailer.sh
@@ -1 +0,0 @@
-EOF
--- a/doc/md/tutorial/_cue/script-02-cue/git-diff.sh
+++ b/doc/md/tutorial/_cue/script-02-cue/git-diff.sh
@@ -1 +0,0 @@
-git diff deploy
--- a/doc/md/tutorial/_cue/script-02-cue/git-init.sh
+++ b/doc/md/tutorial/_cue/script-02-cue/git-init.sh
@@ -1 +0,0 @@
-git init . && git add . && git commit -m initial
--- a/doc/md/tutorial/_cue/script-02-cue/git.diff
+++ b/doc/md/tutorial/_cue/script-02-cue/git.diff
@@ -1,24 +0,0 @@
-diff --git a/deploy/components/podinfo/podinfo.gen.yaml b/deploy/components/podinfo/podinfo.gen.yaml
-index 6e4aec0..f79e9d0 100644
--- a/deploy/components/podinfo/podinfo.gen.yaml
-+++ b/deploy/components/podinfo/podinfo.gen.yaml
-@@ -112,3 +112,19 @@ spec:
-       volumes:
-       - emptyDir: {}
-         name: data
-+---
-+apiVersion: external-secrets.io/v1beta1
-+kind: ExternalSecret
-+metadata:
-+  name: podinfo
-+  namespace: default
-+spec:
-+  dataFrom:
-+  - extract:
-+      key: podinfo
-+  refreshInterval: 30s
-+  secretStoreRef:
-+    kind: SecretStore
-+    name: default
-+  target:
-+    name: podinfo
--- a/doc/md/tutorial/_cue/script-02-cue/import-crds.sh
+++ b/doc/md/tutorial/_cue/script-02-cue/import-crds.sh
@@ -1 +0,0 @@
-timoni mod vendor crds -f https://raw.githubusercontent.com/external-secrets/external-secrets/v0.10.5/deploy/crds/bundle.yaml
--- a/doc/md/tutorial/_cue/script-02-cue/mixin-component-body.cue
+++ b/doc/md/tutorial/_cue/script-02-cue/mixin-component-body.cue
@@ -1,25 +0,0 @@
-package holos
-
-// Component fields are unified with podinfo.cue
-Component: {
-	// Concrete values are defined in podinfo.cue
-	Name:      string
-	Namespace: string
-
-	// Resources represents mix-in resources organized as a struct.
-	Resources: ExternalSecret: (Name): {
-		// Name is consistent with the component name.
-		metadata: name: Name
-		// Namespace is consistent with the component namespace.
-		metadata: namespace: Namespace
-		spec: {
-			// Ensure the target secret name is consistent.
-			target: name: metadata.name
-			// Ensure the name in the SecretStore is consistent.
-			dataFrom: [{extract: {key: metadata.name}}]
-			refreshInterval: "30s"
-			secretStoreRef: kind: "SecretStore"
-			secretStoreRef: name: "default"
-		}
-	}
-}
--- a/doc/md/tutorial/_cue/script-02-cue/mixin-component-header.sh
+++ b/doc/md/tutorial/_cue/script-02-cue/mixin-component-header.sh
@@ -1 +0,0 @@
-cat <<EOF > components/podinfo/mixins.cue
--- a/doc/md/tutorial/_cue/script-02-cue/mkdir-and-init.sh
+++ b/doc/md/tutorial/_cue/script-02-cue/mkdir-and-init.sh
@@ -1,2 +0,0 @@
-mkdir holos-cue-tutorial && cd holos-cue-tutorial
-holos init platform v1alpha5
--- a/doc/md/tutorial/_cue/script-02-cue/mkdir-components.sh
+++ b/doc/md/tutorial/_cue/script-02-cue/mkdir-components.sh
@@ -1 +0,0 @@
-mkdir -p components/podinfo
--- a/doc/md/tutorial/_cue/script-02-cue/podinfo-component-body.cue
+++ b/doc/md/tutorial/_cue/script-02-cue/podinfo-component-body.cue
@@ -1,19 +0,0 @@
-package holos
-
-// export the component build plan to holos
-holos: Component.BuildPlan
-
-// Component is a Helm chart
-Component: #Helm & {
-	Name:      "podinfo"
-	Namespace: "default"
-	// Add metadata.namespace to all resources with kustomize.
-	KustomizeConfig: Kustomization: namespace: Namespace
-	Chart: {
-		version: "6.6.2"
-		repository: {
-			name: "podinfo"
-			url:  "https://stefanprodan.github.io/podinfo"
-		}
-	}
-}
--- a/doc/md/tutorial/_cue/script-02-cue/podinfo-component-header.sh
+++ b/doc/md/tutorial/_cue/script-02-cue/podinfo-component-header.sh
@@ -1 +0,0 @@
-cat <<EOF > components/podinfo/podinfo.cue
--- a/doc/md/tutorial/_cue/script-02-cue/register-components-body.cue
+++ b/doc/md/tutorial/_cue/script-02-cue/register-components-body.cue
@@ -1,6 +0,0 @@
-package holos
-
-Platform: Components: podinfo: {
-	name: "podinfo"
-	path: "components/podinfo"
-}
--- a/doc/md/tutorial/_cue/script-02-cue/register-components-header.sh
+++ b/doc/md/tutorial/_cue/script-02-cue/register-components-header.sh
@@ -1 +0,0 @@
-cat <<EOF > platform/podinfo.cue
--- a/doc/md/tutorial/_cue/script-02-cue/register-components-output.txt
+++ b/doc/md/tutorial/_cue/script-02-cue/register-components-output.txt
@@ -1,3 +0,0 @@
-cached podinfo 6.6.2
-rendered podinfo in 1.938665041s
-rendered platform in 1.938759417s
--- a/doc/md/tutorial/_cue/script-02-cue/render.sh
+++ b/doc/md/tutorial/_cue/script-02-cue/render.sh
@@ -1 +0,0 @@
-holos render platform
--- a/doc/md/tutorial/_cue/script-02-cue/timoni-vendor.txt
+++ b/doc/md/tutorial/_cue/script-02-cue/timoni-vendor.txt
@@ -1,17 +0,0 @@
-3:20PM INF schemas vendored: external-secrets.io/clusterexternalsecret/v1beta1
-3:20PM INF schemas vendored: external-secrets.io/clustersecretstore/v1alpha1
-3:20PM INF schemas vendored: external-secrets.io/clustersecretstore/v1beta1
-3:20PM INF schemas vendored: external-secrets.io/externalsecret/v1alpha1
-3:20PM INF schemas vendored: external-secrets.io/externalsecret/v1beta1
-3:20PM INF schemas vendored: external-secrets.io/pushsecret/v1alpha1
-3:20PM INF schemas vendored: external-secrets.io/secretstore/v1alpha1
-3:20PM INF schemas vendored: external-secrets.io/secretstore/v1beta1
-3:20PM INF schemas vendored: generators.external-secrets.io/acraccesstoken/v1alpha1
-3:20PM INF schemas vendored: generators.external-secrets.io/ecrauthorizationtoken/v1alpha1
-3:20PM INF schemas vendored: generators.external-secrets.io/fake/v1alpha1
-3:20PM INF schemas vendored: generators.external-secrets.io/gcraccesstoken/v1alpha1
-3:20PM INF schemas vendored: generators.external-secrets.io/githubaccesstoken/v1alpha1
-3:20PM INF schemas vendored: generators.external-secrets.io/password/v1alpha1
-3:20PM INF schemas vendored: generators.external-secrets.io/uuid/v1alpha1
-3:20PM INF schemas vendored: generators.external-secrets.io/vaultdynamicsecret/v1alpha1
-3:20PM INF schemas vendored: generators.external-secrets.io/webhook/v1alpha1
--- a/doc/md/tutorial/_cue/script-02-cue/update.sh
+++ b/doc/md/tutorial/_cue/script-02-cue/update.sh
@@ -1,4 +0,0 @@
-#! /bin/bash
-set -euo pipefail
-[[ -s "$1" ]] && [[ -z "${HOLOS_UPDATE_SCRIPTS:-}" ]] && exit 0
-cat > "$1"
--- a/doc/md/tutorial/_hello-holos/examples/01-holos-version.txt
+++ b/doc/md/tutorial/_hello-holos/examples/01-holos-version.txt
@@ -4,4 +4,4 @@ cmp stdout $WORK/output.txt
 -- command.sh --
 holos --version
 -- output.txt --
-0.103.0
+0.104.1
--- a/doc/md/tutorial/_hello-holos/script-01-holos-version/output.txt
+++ b/doc/md/tutorial/_hello-holos/script-01-holos-version/output.txt
@@ -1 +1 @@
-0.103.0
+0.104.1
--- a/doc/md/tutorial/_hello-holos/script-02-hello-holos/register-components-output.txt
+++ b/doc/md/tutorial/_hello-holos/script-02-hello-holos/register-components-output.txt
@@ -1,2 +1,2 @@
-rendered podinfo in 544.501875ms
-rendered platform in 544.608125ms
+rendered podinfo in 312.472625ms
+rendered platform in 312.557375ms
--- a/doc/md/tutorial/_helm-values/examples/01-holos-version.txt
+++ b/doc/md/tutorial/_helm-values/examples/01-holos-version.txt
@@ -4,4 +4,4 @@ cmp stdout $WORK/output.txt
 -- command.sh --
 holos --version
 -- output.txt --
-0.103.0
+0.104.1
--- a/doc/md/tutorial/_helm-values/script-01-holos-version/output.txt
+++ b/doc/md/tutorial/_helm-values/script-01-holos-version/output.txt
@@ -1 +1 @@
-0.103.0
+0.104.1
--- a/doc/md/tutorial/_helm-values/script-02-helm-values/blackbox-common-config-git-output.txt
+++ b/doc/md/tutorial/_helm-values/script-02-helm-values/blackbox-common-config-git-output.txt
@@ -1,3 +1,3 @@
-[main 1adcd08] add blackbox configuration
+[main aa9749e] add blackbox configuration
 1 file changed, 15 insertions(+)
- create mode 100644 components/blackbox.cue
+ create mode 100644 config/prometheus/blackbox.cue
--- a/doc/md/tutorial/_helm-values/script-02-helm-values/common-config-git-output.txt
+++ b/doc/md/tutorial/_helm-values/script-02-helm-values/common-config-git-output.txt
@@ -1,2 +1,3 @@
-[main 4221803] integrate blackbox and prometheus together
- 2 files changed, 4 insertions(+), 2 deletions(-)
+[main 656d4ee] integrate blackbox and prometheus together
+ 3 files changed, 1348 insertions(+), 2 deletions(-)
+ create mode 100644 components/prometheus/values.cue.orig
--- a/doc/md/tutorial/_helm-values/script-02-helm-values/import-values-git-output.txt
+++ b/doc/md/tutorial/_helm-values/script-02-helm-values/import-values-git-output.txt
@@ -1,4 +1,4 @@
-[main 52e90ea] import values
+[main 3788921] import values
 2 files changed, 1815 insertions(+)
 create mode 100644 components/blackbox/values.cue
 create mode 100644 components/prometheus/values.cue
--- a/doc/md/tutorial/_helm-values/script-02-helm-values/import-values-render-output.txt
+++ b/doc/md/tutorial/_helm-values/script-02-helm-values/import-values-render-output.txt
@@ -1,3 +1,3 @@
-rendered blackbox in 365.936792ms
-rendered prometheus in 371.855875ms
-rendered platform in 372.109916ms
+rendered blackbox in 129.142708ms
+rendered prometheus in 165.260375ms
+rendered platform in 165.33ms
--- a/doc/md/tutorial/_helm-values/script-02-helm-values/register-components-git-commit-output.txt
+++ b/doc/md/tutorial/_helm-values/script-02-helm-values/register-components-git-commit-output.txt
@@ -1,4 +1,4 @@
-[main b5df111] add blackbox and prometheus
+[main 654ae06] add blackbox and prometheus
 5 files changed, 1550 insertions(+)
 create mode 100644 components/blackbox/blackbox.cue
 create mode 100644 components/prometheus/prometheus.cue
--- a/doc/md/tutorial/_helm-values/script-02-helm-values/register-components-output.txt
+++ b/doc/md/tutorial/_helm-values/script-02-helm-values/register-components-output.txt
@@ -1,5 +1,3 @@
-cached prometheus-blackbox-exporter 9.0.1
-rendered blackbox in 3.825430417s
-cached prometheus 25.27.0
-rendered prometheus in 4.840089667s
-rendered platform in 4.840137792s
+rendered blackbox in 1.096663084s
+rendered prometheus in 1.151784875s
+rendered platform in 1.151839916s
--- a/doc/md/tutorial/_helm-values/script-02-helm-values/reviewing-changes-git-output.txt
+++ b/doc/md/tutorial/_helm-values/script-02-helm-values/reviewing-changes-git-output.txt
@@ -1,2 +1,2 @@
-[main 67efe0d] render integrated blackbox and prometheus manifests
+[main 9bc0126] render integrated blackbox and prometheus manifests
 2 files changed, 7 insertions(+), 7 deletions(-)
--- a/doc/md/tutorial/_kustomize/examples/01-holos-version.txt
+++ b/doc/md/tutorial/_kustomize/examples/01-holos-version.txt
@@ -4,4 +4,4 @@ cmp stdout $WORK/output.txt
 -- command.sh --
 holos --version
 -- output.txt --
-0.103.0
+0.104.1
--- a/doc/md/tutorial/_kustomize/script-01-holos-version/output.txt
+++ b/doc/md/tutorial/_kustomize/script-01-holos-version/output.txt
@@ -1 +1 @@
-0.103.0
+0.104.1
--- a/doc/md/tutorial/_kustomize/script-02-kustomize/buildplan-output.cue
+++ b/doc/md/tutorial/_kustomize/script-02-kustomize/buildplan-output.cue
@@ -13,7 +13,6 @@ spec:
          output: httpbin.yaml
          file:
            source: httpbin.yaml
-      validators: []
      transformers:
        - kind: Kustomize
          inputs:
@@ -22,6 +21,8 @@ spec:
          output: components/no-name/no-name.gen.yaml
          kustomize:
            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
              labels:
                - includeSelectors: false
                  pairs:
@@ -32,5 +33,4 @@ spec:
              resources:
                - resources.gen.yaml
                - httpbin.yaml
-              kind: Kustomization
-              apiVersion: kustomize.config.k8s.io/v1beta1
+      validators: []
--- a/doc/md/tutorial/_kustomize/script-02-kustomize/git-commit-component-output.txt
+++ b/doc/md/tutorial/_kustomize/script-02-kustomize/git-commit-component-output.txt
@@ -1,4 +1,4 @@
-[main f0dd632] add httpbin
+[main 823e136] add httpbin
 4 files changed, 113 insertions(+)
 create mode 100644 components/httpbin/httpbin.cue
 create mode 100644 components/httpbin/httpbin.yaml
--- a/doc/md/tutorial/_kustomize/script-02-kustomize/git-commit-final-output.txt
+++ b/doc/md/tutorial/_kustomize/script-02-kustomize/git-commit-final-output.txt
@@ -1,3 +1,3 @@
-[main b120712] annotate httpbin for prometheus probes
+[main 96f5f45] annotate httpbin for prometheus probes
 2 files changed, 18 insertions(+)
 create mode 100644 components/httpbin/patches.cue
--- a/doc/md/tutorial/_kustomize/script-02-kustomize/kustomize-patch-render-output.txt
+++ b/doc/md/tutorial/_kustomize/script-02-kustomize/kustomize-patch-render-output.txt
@@ -1,2 +1,2 @@
-rendered httpbin in 132.00525ms
-rendered platform in 132.124042ms
+rendered httpbin in 112.916375ms
+rendered platform in 112.990333ms
--- a/doc/md/tutorial/_kustomize/script-02-kustomize/register-component-output.txt
+++ b/doc/md/tutorial/_kustomize/script-02-kustomize/register-component-output.txt
@@ -1,2 +1,2 @@
-rendered httpbin in 175.057083ms
-rendered platform in 175.145292ms
+rendered httpbin in 111.183042ms
+rendered platform in 111.265792ms
--- a/doc/md/tutorial/cue.mdx
+++ b/doc/md/tutorial/cue.mdx
@@ -7,7 +7,6 @@ sidebar_position: 50

 import Tabs from '@theme/Tabs';
 import TabItem from '@theme/TabItem';
-import CodeBlock from '@theme/CodeBlock';

 # CUE

@@ -26,69 +25,92 @@ Key concepts:

 ## The Code

-### Holos Version
-
-Ensure you have a current version of `holos` installed.  This document was
-tested with the following version.
-
-import HolosVersionCommand from '!!raw-loader!./_cue/script-01-holos-version/command.sh';
-import HolosVersionOutput from '!!raw-loader!./_cue/script-01-holos-version/output.txt';
-
-<CodeBlock language="bash">{HolosVersionCommand}</CodeBlock>
-<CodeBlock language="txt">{HolosVersionOutput}</CodeBlock>
-
 ### Generating the Structure

 Use `holos` to generate a minimal platform directory structure. First, create
 and navigate into a blank directory. Then, use the `holos generate platform`
 command to generate a minimal platform.

-import MkdirAndInit from '!!raw-loader!./_cue/script-02-cue/mkdir-and-init.sh';
-
-<CodeBlock language="bash">{MkdirAndInit}</CodeBlock>
+```shell
+mkdir holos-cue-tutorial && cd holos-cue-tutorial
+holos init platform v1alpha5
+```

 ### Creating the Component

 Create the directory for the `podinfo` component. Create an empty file, then add
 the following CUE configuration to it.

-import MkdirComponents from '!!raw-loader!./_cue/script-02-cue/mkdir-components.sh';
-import PodinfoHeader from '!!raw-loader!./_cue/script-02-cue/podinfo-component-header.sh';
-import PodinfoBody from '!!raw-loader!./_cue/script-02-cue/podinfo-component-body.cue';
-import EofTrailer from '!!raw-loader!./_cue/script-02-cue/eof-trailer.sh';
+```bash
+mkdir -p components/podinfo
+```
+```bash
+cat <<EOF > components/podinfo/podinfo.cue
+```
+```cue showLineNumbers
+package holos

-<CodeBlock language="bash">{PodinfoHeader}</CodeBlock>
-<CodeBlock language="cue" showLineNumbers>{PodinfoBody}</CodeBlock>
-<CodeBlock language="bash">{EofTrailer}</CodeBlock>
+// export the component build plan to holos
+holos: Component.BuildPlan
+
+// Component is a Helm chart
+Component: #Helm & {
+	Name:      "podinfo"
+	Namespace: "default"
+	// Add metadata.namespace to all resources with kustomize.
+	KustomizeConfig: Kustomization: namespace: Namespace
+	Chart: {
+		version: "6.6.2"
+		repository: {
+			name: "podinfo"
+			url:  "https://stefanprodan.github.io/podinfo"
+		}
+	}
+}
+```
+```bash
+EOF
+```

 Register the component with the platform.

-import RegisterHeader from '!!raw-loader!./_cue/script-02-cue/register-components-header.sh';
-import RegisterBody from '!!raw-loader!./_cue/script-02-cue/register-components-body.cue';
+```bash
+cat <<EOF > platform/podinfo.cue
+```
+```cue showLineNumbers
+package holos

-<CodeBlock language="bash">{RegisterHeader}</CodeBlock>
-<CodeBlock language="cue" showLineNumbers>{RegisterBody}</CodeBlock>
-<CodeBlock language="bash">{EofTrailer}</CodeBlock>
+Platform: Components: podinfo: {
+	name: "podinfo"
+	path: "components/podinfo"
+}
+```
+```bash
+EOF
+```

 Render the platform.

-import RenderCommand from '!!raw-loader!./_cue/script-02-cue/render.sh';
-import RegisterOutput from '!!raw-loader!./_cue/script-02-cue/register-components-output.txt';
-
 <Tabs groupId="tutorial-hello-render-manifests">
  <TabItem value="command" label="Command">
-    <CodeBlock language="bash">{RenderCommand}</CodeBlock>
+```bash
+holos render platform
+```
  </TabItem>
  <TabItem value="output" label="Output">
-    <CodeBlock language="txt">{RegisterOutput}</CodeBlock>
+```
+cached podinfo 6.6.2
+rendered podinfo in 1.938665041s
+rendered platform in 1.938759417s
+```
  </TabItem>
 </Tabs>

 Add and commit the initial configuration.

-import GitInit from '!!raw-loader!./_cue/script-02-cue/git-init.sh';
-
-<CodeBlock language="bash">{GitInit}</CodeBlock>
+```bash
+git init . && git add . && git commit -m initial
+```

 ### Mixing in Resources

@@ -98,12 +120,39 @@ component kind.  This field is a convenient wrapper around the core [BuildPlan]

 Create the mixins.cue file.

-import MixinHeader from '!!raw-loader!./_cue/script-02-cue/mixin-component-header.sh';
-import MixinBody from '!!raw-loader!./_cue/script-02-cue/mixin-component-body.cue';
+```bash
+cat <<EOF > components/podinfo/mixins.cue
+```
+```cue showLineNumbers
+package holos

-<CodeBlock language="bash">{MixinHeader}</CodeBlock>
-<CodeBlock language="cue" showLineNumbers>{MixinBody}</CodeBlock>
-<CodeBlock language="bash">{EofTrailer}</CodeBlock>
+// Component fields are unified with podinfo.cue
+Component: {
+	// Concrete values are defined in podinfo.cue
+	Name:      string
+	Namespace: string
+
+	// Resources represents mix-in resources organized as a struct.
+	Resources: ExternalSecret: (Name): {
+		// Name is consistent with the component name.
+		metadata: name: Name
+		// Namespace is consistent with the component namespace.
+		metadata: namespace: Namespace
+		spec: {
+			// Ensure the target secret name is consistent.
+			target: name: metadata.name
+			// Ensure the name in the SecretStore is consistent.
+			dataFrom: [{extract: {key: metadata.name}}]
+			refreshInterval: "30s"
+			secretStoreRef: kind: "SecretStore"
+			secretStoreRef: name: "default"
+		}
+	}
+}
+```
+```bash
+EOF
+```

 :::important
 Holos uses CUE to validate mixed in resources against a schema.  The `Resources`
@@ -120,15 +169,32 @@ tutorial.
 To import your own custom resource definitions, use [Timoni]. We imported the
 ExternalSecret CRDs embedded in `holos` using the following command.

-import ImportCRDs from '!!raw-loader!./_cue/script-02-cue/import-crds.sh';
-import ImportOutput from '!!raw-loader!./_cue/script-02-cue/timoni-vendor.txt';
-
 <Tabs groupId="35B1A1A1-D7DF-4D27-A575-28556E182096">
  <TabItem value="command" label="Command">
-    <CodeBlock language="bash">{ImportCRDs}</CodeBlock>
+```bash
+timoni mod vendor crds -f https://raw.githubusercontent.com/external-secrets/external-secrets/v0.10.5/deploy/crds/bundle.yaml
+```
  </TabItem>
  <TabItem value="output" label="Output">
-    <CodeBlock language="txt">{ImportOutput}</CodeBlock>
+```txt
+2:22PM INF schemas vendored: external-secrets.io/clusterexternalsecret/v1beta1
+2:22PM INF schemas vendored: external-secrets.io/clustersecretstore/v1alpha1
+2:22PM INF schemas vendored: external-secrets.io/clustersecretstore/v1beta1
+2:22PM INF schemas vendored: external-secrets.io/externalsecret/v1alpha1
+2:22PM INF schemas vendored: external-secrets.io/externalsecret/v1beta1
+2:22PM INF schemas vendored: external-secrets.io/pushsecret/v1alpha1
+2:22PM INF schemas vendored: external-secrets.io/secretstore/v1alpha1
+2:22PM INF schemas vendored: external-secrets.io/secretstore/v1beta1
+2:22PM INF schemas vendored: generators.external-secrets.io/acraccesstoken/v1alpha1
+2:22PM INF schemas vendored: generators.external-secrets.io/ecrauthorizationtoken/v1alpha1
+2:22PM INF schemas vendored: generators.external-secrets.io/fake/v1alpha1
+2:22PM INF schemas vendored: generators.external-secrets.io/gcraccesstoken/v1alpha1
+2:22PM INF schemas vendored: generators.external-secrets.io/githubaccesstoken/v1alpha1
+2:22PM INF schemas vendored: generators.external-secrets.io/password/v1alpha1
+2:22PM INF schemas vendored: generators.external-secrets.io/uuid/v1alpha1
+2:22PM INF schemas vendored: generators.external-secrets.io/vaultdynamicsecret/v1alpha1
+2:22PM INF schemas vendored: generators.external-secrets.io/webhook/v1alpha1
+```
  </TabItem>
 </Tabs>

@@ -146,15 +212,42 @@ existing [resources.cue] file.

 Render the platform with the `ExternalSecret` mixed into the podinfo component.

-<CodeBlock language="bash">{RenderCommand}</CodeBlock>
+```shell
+holos render platform
+```

 Take a look at the diff to see the mixed in `ExternalSecret`.

-import GitDiff from '!!raw-loader!./_cue/script-02-cue/git-diff.sh';
-import DiffOutput from '!!raw-loader!./_cue/script-02-cue/git.diff';
+```shell
+git diff deploy
+```

-<CodeBlock language="bash">{GitDiff}</CodeBlock>
-<CodeBlock language="diff">{DiffOutput}</CodeBlock>
+```diff
+diff --git a/deploy/components/podinfo/podinfo.gen.yaml b/deploy/components/podinfo/podinfo.gen.yaml
+index 6e4aec0..f79e9d0 100644
+--- a/deploy/components/podinfo/podinfo.gen.yaml
+++ b/deploy/components/podinfo/podinfo.gen.yaml
+@@ -112,3 +112,19 @@ spec:
+       volumes:
+       - emptyDir: {}
+         name: data
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: podinfo
+  namespace: default
+spec:
+  dataFrom:
+  - extract:
+      key: podinfo
+  refreshInterval: 30s
+  secretStoreRef:
+    kind: SecretStore
+    name: default
+  target:
+    name: podinfo
+```

 We saw how to mix in resources using the `Resources` field of the
 [ComponentConfig]. This approach works for every kind of component in Holos,
--- a/doc/md/tutorial/cue_test.go
+++ b/doc/md/tutorial/cue_test.go
@@ -1,19 +0,0 @@
-package main
-
-import (
-	"path/filepath"
-	"testing"
-)
-
-// Run these with go test -v to see the verbose names
-func TestCue(t *testing.T) {
-	t.Run("TestCue", func(t *testing.T) {
-		// Get an ordered list of test script files.
-		dir := "_cue"
-		for _, file := range sortedTestScripts(t, filepath.Join(dir, "examples")) {
-			t.Run("examples", func(t *testing.T) {
-				runOneScript(t, dir, file)
-			})
-		}
-	})
-}
--- a/doc/md/tutorial/helm-values_test.go
+++ b/doc/md/tutorial/helm-values_test.go
@@ -15,10 +15,12 @@ import (
 )

 func TestMain(m *testing.M) {
-	os.Exit(testscript.RunMain(m, map[string]func() int{
-		"holos": cmd.MakeMain(),
-		"cue":   cue.Main,
-	}))
+	holosMain := cmd.MakeMain()
+
+	testscript.Main(m, map[string]func(){
+		"holos": func() { os.Exit(holosMain()) },
+		"cue":   func() { os.Exit(cue.Main()) },
+	})
 }

 // Run these with go test -v to see the verbose names
--- a/doc/website/blog/_migrate_appset/examples/01-clone.txtar
+++ b/doc/website/blog/_migrate_appset/examples/01-clone.txtar
@@ -24,7 +24,7 @@ exec git config user.name 'go test'
 -- version.sh --
 holos --version
 -- version.txt --
-0.103.0
+0.104.1
 -- clone.sh --
 git clone https://github.com/holos-run/multi-sources-example.git
 cd multi-sources-example
--- a/doc/website/blog/_migrate_appset/script-01-clone/git.commit
+++ b/doc/website/blog/_migrate_appset/script-01-clone/git.commit
@@ -1 +1 @@
-f35da50452b346d4eea3f3e59ff5ae6b8c221218
+6a882ac5aee7241e0130a59737cc46db5f636a21
--- a/doc/website/blog/_migrate_appset/script-01-clone/version.txt
+++ b/doc/website/blog/_migrate_appset/script-01-clone/version.txt
@@ -1 +1 @@
-0.103.0
+0.104.1
--- a/doc/website/blog/_migrate_appset/script-03-holos-structure/inspect-environments.txt
+++ b/doc/website/blog/_migrate_appset/script-03-holos-structure/inspect-environments.txt
@@ -1,4 +1,28 @@
 config:
+  integration/gpu/config.json:
+    env: integration-gpu
+    region: us
+    type: non-prod
+    version: prod
+    chart: 0.1.0
+  integration/non-gpu/config.json:
+    env: integration-non-gpu
+    region: us
+    type: non-prod
+    version: qa
+    chart: 0.2.0
+  prod/eu/config.json:
+    env: prod-eu
+    region: eu
+    type: prod
+    version: prod
+    chart: 0.1.0
+  prod/us/config.json:
+    env: prod-us
+    region: us
+    type: prod
+    version: prod
+    chart: 0.1.0
  qa/config.json:
    env: qa
    region: us
@@ -17,33 +41,9 @@ config:
    type: non-prod
    version: staging
    chart: 0.2.0
-  prod/eu/config.json:
-    env: prod-eu
-    region: eu
-    type: prod
-    version: prod
-    chart: 0.1.0
-  integration/gpu/config.json:
-    env: integration-gpu
-    region: us
-    type: non-prod
-    version: prod
-    chart: 0.1.0
  staging/us/config.json:
    env: staging-us
    region: us
    type: non-prod
    version: staging
    chart: 0.2.0
-  prod/us/config.json:
-    env: prod-us
-    region: us
-    type: prod
-    version: prod
-    chart: 0.1.0
-  integration/non-gpu/config.json:
-    env: integration-non-gpu
-    region: us
-    type: non-prod
-    version: qa
-    chart: 0.2.0
--- a/doc/website/blog/_migrate_appset/script-04-helm-component/inspect-value-files.txt
+++ b/doc/website/blog/_migrate_appset/script-04-helm-component/inspect-value-files.txt
@@ -1,11 +1,11 @@
-my-values/common-values.yaml:
-  replicaCount: 1
 my-values/app-version/prod-values.yaml:
  imageVersion: "1.0"
 my-values/app-version/qa-values.yaml:
  imageVersion: "3.0"
 my-values/app-version/staging-values.yaml:
  imageVersion: "2.0"
+my-values/common-values.yaml:
+  replicaCount: 1
 my-values/env-type/non-prod-values.yaml:
  replicaCount: 3
  environmentType: non-prod
--- a/doc/website/blog/_migrate_appset/script-04-helm-component/render.txt
+++ b/doc/website/blog/_migrate_appset/script-04-helm-component/render.txt
@@ -1,8 +1,8 @@
-rendered my-chart 0.1.0 for environment integration-gpu in 428.168708ms
-rendered my-chart 0.1.0 for environment prod-us in 428.221333ms
-rendered my-chart 0.1.0 for environment prod-eu in 428.148834ms
-rendered my-chart 0.2.0 for environment qa in 433.4605ms
-rendered my-chart 0.2.0 for environment staging-us in 493.320625ms
-rendered my-chart 0.2.0 for environment integration-non-gpu in 493.343917ms
-rendered my-chart 0.2.0 for environment staging-eu in 493.325917ms
-rendered platform in 493.432542ms
+rendered my-chart 0.1.0 for environment prod-us in 169.0965ms
+rendered my-chart 0.1.0 for environment integration-gpu in 169.146375ms
+rendered my-chart 0.1.0 for environment prod-eu in 171.797375ms
+rendered my-chart 0.2.0 for environment staging-us in 195.439625ms
+rendered my-chart 0.2.0 for environment qa in 270.457708ms
+rendered my-chart 0.2.0 for environment integration-non-gpu in 270.497166ms
+rendered my-chart 0.2.0 for environment staging-eu in 271.18825ms
+rendered platform in 271.252916ms
--- a/doc/website/blog/_migrate_appset/script-05-application/render.txt
+++ b/doc/website/blog/_migrate_appset/script-05-application/render.txt
@@ -1,8 +1,8 @@
-rendered my-chart 0.2.0 for environment integration-non-gpu in 204.149958ms
-rendered my-chart 0.1.0 for environment prod-us in 205.34475ms
-rendered my-chart 0.2.0 for environment staging-eu in 206.376291ms
-rendered my-chart 0.1.0 for environment prod-eu in 207.298833ms
-rendered my-chart 0.1.0 for environment integration-gpu in 207.896ms
-rendered my-chart 0.2.0 for environment staging-us in 210.70825ms
-rendered my-chart 0.2.0 for environment qa in 210.695667ms
-rendered platform in 210.776584ms
+rendered my-chart 0.2.0 for environment staging-eu in 202.936708ms
+rendered my-chart 0.2.0 for environment staging-us in 204.292666ms
+rendered my-chart 0.1.0 for environment integration-gpu in 205.155833ms
+rendered my-chart 0.1.0 for environment prod-us in 207.647458ms
+rendered my-chart 0.2.0 for environment qa in 208.1245ms
+rendered my-chart 0.1.0 for environment prod-eu in 208.608833ms
+rendered my-chart 0.2.0 for environment integration-non-gpu in 212.441042ms
+rendered platform in 212.504042ms
--- a/go.mod
+++ b/go.mod
@@ -10,7 +10,7 @@ require (
 	connectrpc.com/grpcreflect v1.2.0
 	connectrpc.com/otelconnect v0.7.0
 	connectrpc.com/validate v0.1.0
-	cuelang.org/go v0.11.1
+	cuelang.org/go v0.12.0
 	entgo.io/ent v0.13.1
 	github.com/bufbuild/buf v1.35.1
 	github.com/choria-io/machine-room v0.0.0-20240417064836-c604da2f005e
@@ -28,14 +28,14 @@ require (
 	github.com/olekukonko/tablewriter v0.0.5
 	github.com/princjef/gomarkdoc v1.1.0
 	github.com/prometheus/client_golang v1.19.1
-	github.com/rogpeppe/go-internal v1.13.1
+	github.com/rogpeppe/go-internal v1.13.2-0.20241226121412-a5dc8ff20d0a
 	github.com/sethvargo/go-retry v0.2.4
 	github.com/spf13/cobra v1.8.1
 	github.com/spf13/pflag v1.0.5
 	github.com/stretchr/testify v1.9.0
-	golang.org/x/net v0.30.0
-	golang.org/x/sync v0.8.0
-	golang.org/x/tools v0.26.0
+	golang.org/x/net v0.34.0
+	golang.org/x/sync v0.10.0
+	golang.org/x/tools v0.29.0
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20240701130421-f6361c86f094
 	google.golang.org/protobuf v1.34.2
 	gopkg.in/yaml.v3 v3.0.1
@@ -56,7 +56,7 @@ require (
 	buf.build/gen/go/bufbuild/registry/protocolbuffers/go v1.34.2-20240610164129-660609bc46d3.2 // indirect
 	cel.dev/expr v0.15.0 // indirect
 	cloud.google.com/go/compute/metadata v0.3.0 // indirect
-	cuelabs.dev/go/oci/ociregistry v0.0.0-20240906074133-82eb438dd565 // indirect
+	cuelabs.dev/go/oci/ociregistry v0.0.0-20241125120445-2c00c104c6e1 // indirect
 	dario.cat/mergo v1.0.1 // indirect
 	github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 // indirect
 	github.com/AlecAivazis/survey/v2 v2.3.7 // indirect
@@ -146,7 +146,7 @@ require (
 	github.com/dprotaso/go-yit v0.0.0-20220510233725-9ba8df137936 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
 	github.com/emicklei/go-restful/v3 v3.11.0 // indirect
-	github.com/emicklei/proto v1.13.2 // indirect
+	github.com/emicklei/proto v1.13.4 // indirect
 	github.com/emirpasic/gods v1.18.1 // indirect
 	github.com/envoyproxy/go-control-plane v0.12.0 // indirect
 	github.com/envoyproxy/protoc-gen-validate v1.0.4 // indirect
@@ -298,7 +298,7 @@ require (
 	github.com/prometheus/client_model v0.6.1 // indirect
 	github.com/prometheus/common v0.55.0 // indirect
 	github.com/prometheus/procfs v0.15.1 // indirect
-	github.com/protocolbuffers/txtpbfmt v0.0.0-20240823084532-8e6b51fa9bef // indirect
+	github.com/protocolbuffers/txtpbfmt v0.0.0-20241112170944-20d2c9ebc01d // indirect
 	github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 // indirect
 	github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
 	github.com/rivo/uniseg v0.4.7 // indirect
@@ -346,7 +346,7 @@ require (
 	github.com/xlab/tablewriter v0.0.0-20160610135559-80b567a11ad5 // indirect
 	github.com/xlab/treeprint v1.2.0 // indirect
 	github.com/yashtewari/glob-intersection v0.2.0 // indirect
-	github.com/yuin/goldmark v1.7.4 // indirect
+	github.com/yuin/goldmark v1.7.8 // indirect
 	github.com/yusufpapurcu/wmi v1.2.4 // indirect
 	github.com/zclconf/go-cty v1.8.0 // indirect
 	go.mongodb.org/mongo-driver v1.13.1 // indirect
@@ -359,14 +359,14 @@ require (
 	go.uber.org/automaxprocs v1.5.3 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.27.0 // indirect
-	golang.org/x/crypto v0.28.0 // indirect
+	golang.org/x/crypto v0.32.0 // indirect
 	golang.org/x/exp v0.0.0-20240613232115-7f521ea00fb8 // indirect
 	golang.org/x/exp/typeparams v0.0.0-20221208152030-732eee02a75a // indirect
-	golang.org/x/mod v0.21.0 // indirect
-	golang.org/x/oauth2 v0.23.0 // indirect
-	golang.org/x/sys v0.26.0 // indirect
-	golang.org/x/term v0.25.0 // indirect
-	golang.org/x/text v0.19.0 // indirect
+	golang.org/x/mod v0.22.0 // indirect
+	golang.org/x/oauth2 v0.25.0 // indirect
+	golang.org/x/sys v0.29.0 // indirect
+	golang.org/x/term v0.28.0 // indirect
+	golang.org/x/text v0.21.0 // indirect
 	golang.org/x/time v0.5.0 // indirect
 	google.golang.org/genproto v0.0.0-20240123012728-ef4313101c80 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20240617180043-68d350f18fd4 // indirect
--- a/go.sum
+++ b/go.sum
@@ -50,10 +50,10 @@ connectrpc.com/otelconnect v0.7.0 h1:ZH55ZZtcJOTKWWLy3qmL4Pam4RzRWBJFOqTPyAqCXkY
 connectrpc.com/otelconnect v0.7.0/go.mod h1:Bt2ivBymHZHqxvo4HkJ0EwHuUzQN6k2l0oH+mp/8nwc=
 connectrpc.com/validate v0.1.0 h1:r55jirxMK7HO/xZwVHj3w2XkVFarsUM77ZDy367NtH4=
 connectrpc.com/validate v0.1.0/go.mod h1:GU47c9/x/gd+u9wRSPkrQOP46gx2rMN+Wo37EHgI3Ow=
-cuelabs.dev/go/oci/ociregistry v0.0.0-20240906074133-82eb438dd565 h1:R5wwEcbEZSBmeyg91MJZTxfd7WpBo2jPof3AYjRbxwY=
-cuelabs.dev/go/oci/ociregistry v0.0.0-20240906074133-82eb438dd565/go.mod h1:5A4xfTzHTXfeVJBU6RAUf+QrlfTCW+017q/QiW+sMLg=
-cuelang.org/go v0.11.1 h1:pV+49MX1mmvDm8Qh3Za3M786cty8VKPWzQ1Ho4gZRP0=
-cuelang.org/go v0.11.1/go.mod h1:PBY6XvPUswPPJ2inpvUozP9mebDVTXaeehQikhZPBz0=
+cuelabs.dev/go/oci/ociregistry v0.0.0-20241125120445-2c00c104c6e1 h1:mRwydyTyhtRX2wXS3mqYWzR2qlv6KsmoKXmlz5vInjg=
+cuelabs.dev/go/oci/ociregistry v0.0.0-20241125120445-2c00c104c6e1/go.mod h1:5A4xfTzHTXfeVJBU6RAUf+QrlfTCW+017q/QiW+sMLg=
+cuelang.org/go v0.12.0 h1:q4W5I+RtDIA27rslQyyt6sWkXX0YS9qm43+U1/3e0kU=
+cuelang.org/go v0.12.0/go.mod h1:B4+kjvGGQnbkz+GuAv1dq/R308gTkp0sO28FdMrJ2Kw=
 dario.cat/mergo v1.0.1 h1:Ra4+bf83h2ztPIQYNP99R6m+Y7KfnARDfID+a+vLl4s=
 dario.cat/mergo v1.0.1/go.mod h1:uNxQE+84aUszobStD9th8a29P2fMDhsBdgRYvZOxGmk=
 dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod h1:H6x//7gZCb22OMCxBHrMx7a5I7Hp++hsVxbQ4BYO7hU=
@@ -336,8 +336,8 @@ github.com/elazarl/goproxy v0.0.0-20230808193330-2592e75ae04a h1:mATvB/9r/3gvcej
 github.com/elazarl/goproxy v0.0.0-20230808193330-2592e75ae04a/go.mod h1:Ro8st/ElPeALwNFlcTpWmkr6IoMFfkjXAvTHpevnDsM=
 github.com/emicklei/go-restful/v3 v3.11.0 h1:rAQeMHw1c7zTmncogyy8VvRZwtkmkZ4FxERmMY4rD+g=
 github.com/emicklei/go-restful/v3 v3.11.0/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
-github.com/emicklei/proto v1.13.2 h1:z/etSFO3uyXeuEsVPzfl56WNgzcvIr42aQazXaQmFZY=
-github.com/emicklei/proto v1.13.2/go.mod h1:rn1FgRS/FANiZdD2djyH7TMA9jdRDcYQ9IEN9yvjX0A=
+github.com/emicklei/proto v1.13.4 h1:myn1fyf8t7tAqIzV91Tj9qXpvyXXGXk8OS2H6IBSc9g=
+github.com/emicklei/proto v1.13.4/go.mod h1:rn1FgRS/FANiZdD2djyH7TMA9jdRDcYQ9IEN9yvjX0A=
 github.com/emirpasic/gods v1.18.1 h1:FXtiHYKDGKCW2KzwZKx0iC0PQmdlorYgdFG9jPXJ1Bc=
 github.com/emirpasic/gods v1.18.1/go.mod h1:8tpGGwCnJ5H4r6BWwaV6OrWmMoPhUl5jm/FMNAnJvWQ=
 github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
@@ -887,8 +887,8 @@ github.com/prometheus/procfs v0.0.2/go.mod h1:TjEm7ze935MbeOT/UhFTIMYKhuLP4wbCsT
 github.com/prometheus/procfs v0.0.3/go.mod h1:4A/X28fw3Fc593LaREMrKMqOKvUAntwMDaekg4FpcdQ=
 github.com/prometheus/procfs v0.15.1 h1:YagwOFzUgYfKKHX6Dr+sHT7km/hxC76UB0learggepc=
 github.com/prometheus/procfs v0.15.1/go.mod h1:fB45yRUv8NstnjriLhBQLuOUt+WW4BsoGhij/e3PBqk=
-github.com/protocolbuffers/txtpbfmt v0.0.0-20240823084532-8e6b51fa9bef h1:ej+64jiny5VETZTqcc1GFVAPEtaSk6U1D0kKC2MS5Yc=
-github.com/protocolbuffers/txtpbfmt v0.0.0-20240823084532-8e6b51fa9bef/go.mod h1:jgxiZysxFPM+iWKwQwPR+y+Jvo54ARd4EisXxKYpB5c=
+github.com/protocolbuffers/txtpbfmt v0.0.0-20241112170944-20d2c9ebc01d h1:HWfigq7lB31IeJL8iy7jkUmU/PG1Sr8jVGhS749dbUA=
+github.com/protocolbuffers/txtpbfmt v0.0.0-20241112170944-20d2c9ebc01d/go.mod h1:jgxiZysxFPM+iWKwQwPR+y+Jvo54ARd4EisXxKYpB5c=
 github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 h1:N/ElC8H3+5XpJzTSTfLsJV/mx9Q9g7kxmchpfZyxgzM=
 github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475/go.mod h1:bCqnVzQkZxMG4s8nGwiZ5l3QUCyqpo9Y+/ZMZ9VjZe4=
 github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE=
@@ -902,8 +902,8 @@ github.com/robfig/cron v1.2.0/go.mod h1:JGuDeoQd7Z6yL4zQhZ3OPEVHB7fL6Ka6skscFHfm
 github.com/rogpeppe/fastuuid v1.2.0/go.mod h1:jVj6XXZzXRy/MSR5jhDC/2q6DgLz+nrA6LYCDYWNEvQ=
 github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
 github.com/rogpeppe/go-internal v1.5.2/go.mod h1:xXDCJY+GAPziupqXw64V24skbSoqbTEfhy4qGm1nDQc=
-github.com/rogpeppe/go-internal v1.13.1 h1:KvO1DLK/DRN07sQ1LQKScxyZJuNnedQ5/wKSR38lUII=
-github.com/rogpeppe/go-internal v1.13.1/go.mod h1:uMEvuHeurkdAXX61udpOXGD/AzZDWNMNyH2VO9fmH0o=
+github.com/rogpeppe/go-internal v1.13.2-0.20241226121412-a5dc8ff20d0a h1:w3tdWGKbLGBPtR/8/oO74W6hmz0qE5q0z9aqSAewaaM=
+github.com/rogpeppe/go-internal v1.13.2-0.20241226121412-a5dc8ff20d0a/go.mod h1:S8kfXMp+yh77OxPD4fdM6YUknrZpQxLhvxzS4gDHENY=
 github.com/rs/cors v1.11.0 h1:0B9GE/r9Bc2UxRMMtymBkHTenPkHDv0CW4Y98GBY+po=
 github.com/rs/cors v1.11.0/go.mod h1:XyqrcTp5zjWr1wsJ8PIRZssZ8b/WMcMf71DJnit4EMU=
 github.com/rubenv/sql-migrate v1.7.0 h1:HtQq1xyTN2ISmQDggnh0c9U3JlP8apWh8YO2jzlXpTI=
@@ -1035,8 +1035,8 @@ github.com/yuin/goldmark v1.1.32/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9de
 github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k=
 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
-github.com/yuin/goldmark v1.7.4 h1:BDXOHExt+A7gwPCJgPIIq7ENvceR7we7rOS9TNoLZeg=
-github.com/yuin/goldmark v1.7.4/go.mod h1:uzxRWxtg69N339t3louHJ7+O03ezfj6PlliRlaOzY1E=
+github.com/yuin/goldmark v1.7.8 h1:iERMLn0/QJeHFhxSt3p6PeN9mGnvIKSpG9YYorDMnic=
+github.com/yuin/goldmark v1.7.8/go.mod h1:uzxRWxtg69N339t3louHJ7+O03ezfj6PlliRlaOzY1E=
 github.com/yusufpapurcu/wmi v1.2.4 h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0=
 github.com/yusufpapurcu/wmi v1.2.4/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0=
 github.com/yvasiyarov/go-metrics v0.0.0-20140926110328-57bccd1ccd43 h1:+lm10QQTNSBd8DVTNGHx7o/IKu9HYDvLMffDhbyLccI=
@@ -1101,8 +1101,8 @@ golang.org/x/crypto v0.3.1-0.20221117191849-2c476679df9a/go.mod h1:hebNnKkNXi2Uz
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
 golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU=
 golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU=
-golang.org/x/crypto v0.28.0 h1:GBDwsMXVQi34v5CCYUm2jkJvu4cbtru2U4TN2PSyQnw=
-golang.org/x/crypto v0.28.0/go.mod h1:rmgy+3RHxRZMyY0jjAJShp2zgEdOqj2AO7U0pYmeQ7U=
+golang.org/x/crypto v0.32.0 h1:euUpcYgM8WcP71gNpTqQCn6rC2t6ULUPiOzfWaXVVfc=
+golang.org/x/crypto v0.32.0/go.mod h1:ZnnJkOaASj8g0AjIduWNlq2NRxL0PlBrbKVyZ6V/Ugc=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
@@ -1140,8 +1140,8 @@ golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
-golang.org/x/mod v0.21.0 h1:vvrHzRwRfVKSiLrG+d4FMl/Qi4ukBCE6kZlTUkDYRT0=
-golang.org/x/mod v0.21.0/go.mod h1:6SkKJ3Xj0I0BrPOZoBy3bdMptDDU9oJrpohJ3eWZ1fY=
+golang.org/x/mod v0.22.0 h1:D4nJWe9zXqHOmWqj4VMOJhvzj7bEZg4wEYa759z1pH4=
+golang.org/x/mod v0.22.0/go.mod h1:6SkKJ3Xj0I0BrPOZoBy3bdMptDDU9oJrpohJ3eWZ1fY=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -1183,16 +1183,16 @@ golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
 golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
-golang.org/x/net v0.30.0 h1:AcW1SDZMkb8IpzCdQUaIq2sP4sZ4zw+55h6ynffypl4=
-golang.org/x/net v0.30.0/go.mod h1:2wGyMJ5iFasEhkwi13ChkO/t1ECNC4X4eBKkVFyYFlU=
+golang.org/x/net v0.34.0 h1:Mb7Mrk043xzHgnRM88suvJFwzVrRfHEHJEl5/71CKw0=
+golang.org/x/net v0.34.0/go.mod h1:di0qlW3YNM5oh6GqDGQr92MyTozJPmybPK4Ev/Gm31k=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20191202225959-858c2ad4c8b6/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20211005180243-6b3c2da341f1/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
-golang.org/x/oauth2 v0.23.0 h1:PbgcYx2W7i4LvjJWEbf0ngHV6qJYr86PkAV3bXdLEbs=
-golang.org/x/oauth2 v0.23.0/go.mod h1:XYTD2NtWslqkgxebSiOHnXEap4TF09sJSc7H1sXbhtI=
+golang.org/x/oauth2 v0.25.0 h1:CY4y7XT9v0cRI9oupztF8AgiIu99L/ksR/Xp/6jrZ70=
+golang.org/x/oauth2 v0.25.0/go.mod h1:XYTD2NtWslqkgxebSiOHnXEap4TF09sJSc7H1sXbhtI=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -1205,8 +1205,8 @@ golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ=
-golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ=
+golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
@@ -1276,8 +1276,8 @@ golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.11.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.26.0 h1:KHjCJyddX0LoSTb3J+vWpupP9p0oznkqVk/IfjymZbo=
-golang.org/x/sys v0.26.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.29.0 h1:TPYlXGxvx1MGTn2GiZDhnjPA9wZzZeGKHHmKhHYvgaU=
+golang.org/x/sys v0.29.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc=
@@ -1285,8 +1285,8 @@ golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
 golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U=
 golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=
 golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
-golang.org/x/term v0.25.0 h1:WtHI/ltw4NvSUig5KARz9h521QvRC8RmF/cuYqifU24=
-golang.org/x/term v0.25.0/go.mod h1:RPyXicDX+6vLxogjjRxjgD2TKtmAO6NZBsBRfrOLu7M=
+golang.org/x/term v0.28.0 h1:/Ts8HFuMR2E6IP/jlo7QVLZHggjKQbhu/7H0LJFr3Gg=
+golang.org/x/term v0.28.0/go.mod h1:Sw/lC2IAUZ92udQNf3WodGtn4k/XoLyZoh8v/8uiwek=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
@@ -1301,8 +1301,8 @@ golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
 golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
 golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
 golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
-golang.org/x/text v0.19.0 h1:kTxAhCbGbxhK0IwgSKiMO5awPoDQ0RpfiVYBfK860YM=
-golang.org/x/text v0.19.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY=
+golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo=
+golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
 golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
@@ -1355,8 +1355,8 @@ golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4f
 golang.org/x/tools v0.1.1/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
 golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
-golang.org/x/tools v0.26.0 h1:v/60pFQmzmT9ExmjDv2gGIfi3OqfKoEP6I5+umXlbnQ=
-golang.org/x/tools v0.26.0/go.mod h1:TPVVj70c7JJ3WCazhD8OdXcZg/og+b9+tH/KxylGwH0=
+golang.org/x/tools v0.29.0 h1:Xx0h3TtM9rzQpQuR4dKLrdglAmCEN5Oi+P74JdhdzXE=
+golang.org/x/tools v0.29.0/go.mod h1:KMQVMRsVxU6nHCFXrBPhDB8XncLNLM0lIy/F14RP588=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
--- a/internal/doc/doc.go
+++ b/internal/doc/doc.go
@@ -18,10 +18,11 @@ import (
 )

 func TestMain(m *testing.M) {
-	os.Exit(testscript.RunMain(m, map[string]func() int{
-		"holos": cmd.MakeMain(),
-		"cue":   cue.Main,
-	}))
+	holosMain := cmd.MakeMain()
+	testscript.Main(m, map[string]func(){
+		"holos": func() { os.Exit(holosMain()) },
+		"cue":   func() { os.Exit(cue.Main()) },
+	})
 }

 func RunOneScript(t *testing.T, dir string, file string) {
--- a/scripts/test
+++ b/scripts/test
@@ -1,7 +1,3 @@
 #! /bin/bash
 set -xeuo pipefail
-
-# Necessary to install timoni for testscript execution
-make go-deps
-
 go test -coverprofile=coverage.out ./...
--- a/tools/tools.go
+++ b/tools/tools.go
@@ -16,5 +16,4 @@ import (
 	_ "golang.org/x/tools/cmd/godoc"
 	_ "google.golang.org/protobuf/cmd/protoc-gen-go"
 	_ "honnef.co/go/tools/cmd/staticcheck"
-	- "github.com/stefanprodan/timoni/cmd/timoni"
 )
--- a/version/embedded/minor
+++ b/version/embedded/minor
@@ -1 +1 @@
-103
+104
--- a/version/embedded/patch
+++ b/version/embedded/patch
@@ -1 +1 @@
-0
+1
Author	SHA1	Message	Date
Jeff McCune	8e690b43ee	ci: fix golangci-lint Without this patch there are unexpected lint errors in version 1.60 where 1.61.0 passes locally on my machine. This patch updates to: golangci-lint has version 1.64.5 built with go1.24.0 from 0a603e49 on 2025-02-13T21:19:55Z	2025-02-20 09:28:35 -08:00
Jeff McCune	a4ceb1cdb2	ci: update test cases with make bump Previously using make bump to bump a version did not also update all of the test cases and documentation to reflect the new version. This patch updates the make bump tasks call HOLOS_UPDATE_SCRIPTS=1 scripts/test to keep the test cases and documentation in sync with the new version.	2025-02-20 09:14:37 -08:00
Jeff McCune	ddb5c0e07b	ci: fix make lint failures resulting from version bumps Without this patch lint fails with error: SA1019: testscript.RunMain is deprecated: use [Main] This patch uses testscript.Main instead.	2025-02-20 09:07:47 -08:00
Jeff McCune	a14d3ba0f4	ci: fix make test failures resulting from version bumps Previously the tests fail because they were not updated to use the new version string in holos, or the new topo sort behavior in cue 0.12.0. This patch updates the test cases using: HOLOS_UPDATE_SCRIPTS=1 scripts/test Result: make test passes	2025-02-20 08:37:01 -08:00
Jeff McCune	f7e0470c48	version 0.104.0 with cue 0.12.0	2025-02-06 14:37:50 -08:00
Jeff McCune	d5c7b82684	go mod tidy	2025-02-06 14:33:14 -08:00
Jeff McCune	7d0392e596	update to cue 0.12.0 Most relevant for us: lots of fixes to the evaluator, enables the embed and toposort experiments.	2025-02-06 14:31:39 -08:00
				`@@ -1 +0,0 @@`
				`git init . && git add . && git commit -m initial`
				`@@ -1 +0,0 @@`
				`timoni mod vendor crds -f https://raw.githubusercontent.com/external-secrets/external-secrets/v0.10.5/deploy/crds/bundle.yaml`
@@ -1 +1 @@
 .103.0
 .104.1