chore(release): prepare for v0.9.8

fix(deps): update module go.opentelemetry.io/contrib/bridges/otelslog to v0.20.1 (#930 )
fix(deps): update opentelemetry-go monorepo (#929 )
2026-08-29 11:23:57 +00:00 · 2026-08-29 11:21:01 +00:00 · 2026-08-28 17:22:05 +00:00 · 2026-08-27 21:17:47 +00:00 · 2026-08-27 19:12:16 +00:00 · 2026-08-25 05:38:30 +00:00
21 changed files with 2223 additions and 2261 deletions
@@ -19,8 +19,8 @@ jobs:
  check:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
        with:
          go-version: 'stable'
      - name: Generate and format check
@@ -35,8 +35,8 @@ jobs:
  vulnerabilities:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
        with:
          go-version: 'stable'
      - name: Check vulnerabilities
@@ -47,19 +47,22 @@ jobs:
  check-release:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
        with:
          fetch-depth: 0
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-node@v7
        with:
          node-version: '24'
      - uses: actions/setup-go@v7
        with:
          go-version: 'stable'
      - name: Check goreleaser config
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@v7
        with:
          version: '~> v2'
          args: check
      - name: Test release build
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@v7
        with:
          version: '~> v2'
          args: release --snapshot --clean
@@ -71,7 +74,7 @@ jobs:
      BUILDTOOLS_CONTENT: ${{ secrets.BUILDTOOLS_CONTENT }}
      GITEA_REPOSITORY: ${{ gitea.repository }}
    steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
      - uses: buildtool/setup-buildtools-action@v1
      - name: Build and push
        run: unset GITEA_TOKEN && build && push
@@ -85,7 +88,7 @@ jobs:
      GITEA_REPOSITORY: ${{ gitea.repository }}
    environment: prod
    steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
      - uses: buildtool/setup-buildtools-action@v1
      - name: Deploy to production
        run: deploy prod
@@ -12,16 +12,19 @@ jobs:
  release:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
        with:
          fetch-depth: 0
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-node@v7
        with:
          node-version: '24'
      - uses: actions/setup-go@v7
        with:
          go-version: 'stable'
      - name: Install goreleaser
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@v7
        with:
-          version: '~> v2'
+          version: 'v2.13.3'
          install-only: true
      - name: Release
        run: |
@@ -13,11 +13,11 @@ jobs:
    env:
      SKIP: no-commit-to-branch
    steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
        with:
          go-version: 'stable'
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
        with:
          python-version: '3.14'
      - name: Install goimports
@@ -11,7 +11,7 @@ repos:
    - --allow-multiple-documents
  - id: check-added-large-files
 - repo: https://github.com/alessandrojcm/commitlint-pre-commit-hook
-  rev: v9.24.0
+  rev: v9.26.0
  hooks:
  - id: commitlint
    stages: [ commit-msg ]
@@ -30,11 +30,11 @@ repos:
  - id: go-test
  - id: gofumpt
 - repo: https://github.com/golangci/golangci-lint
-  rev: v2.9.0
+  rev: v2.13.1
  hooks:
  - id: golangci-lint-full
 - repo: https://github.com/gitleaks/gitleaks
-  rev: v8.30.0
+  rev: v8.30.1
  hooks:
  - id: gitleaks
 exclude: '^ctl/generated.go|graph/generated/.*$|^graph/model/models_gen.go|^tools/.*$$'
@@ -1,3 +1,3 @@
 {
-  "version": "v0.9.2"
+  "version": "v0.9.7"
 }
@@ -2,6 +2,230 @@
 All notable changes to this project will be documented in this file.
 ## [0.9.8] - 2026-08-29
 ### 🐛 Bug Fixes
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.2.0 (#835)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.3.0 (#836)
 - *(deps)* Update module github.com/auth0/go-jwt-middleware/v3 to v3.2.0 (#837)
 - *(k8s)* Point OTEL endpoint to k8s-monitoring-alloy service (#839)
 - Raise Node heap cap to 512MB and bump pod memory limit (#838)
 - *(k8s)* Raise schemas CPU request from 20m to 100m (#840)
 - *(k8s)* Add scaleUp/scaleDown stabilization to schemas HPA (#844)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.3.1 (#845)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.0 (#846)
 - *(deps)* Update module golang.org/x/crypto to v0.52.0 (#848)
 - *(deps)* Update eventsourced (#849)
 - *(deps)* Update module gitlab.com/unboundsoftware/eventsourced/pg to v1.20.0 (#850)
 - Bump eventsourced/pg to v2.0.2 and harden startup error logging (#851)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.1 (#852)
 - *(deps)* Update module go.opentelemetry.io/contrib/bridges/otelslog to v0.19.0 (#854)
 - *(deps)* Update opentelemetry-go monorepo (#853)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.2 (#856)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.3 (#857)
 - *(deps)* Update module golang.org/x/sync to v0.21.0 (#858)
 - *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.34 (#860)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.4 (#862)
 - *(deps)* Update module golang.org/x/crypto to v0.53.0 (#863)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.5 (#865)
 - *(deps)* Update module github.com/99designs/gqlgen to v0.17.91 (#864)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.6 (#866)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.5.0 (#869)
 - *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.35 (#871)
 - *(deps)* Update module github.com/99designs/gqlgen to v0.17.92 (#873)
 - *(deps)* Update module github.com/99designs/gqlgen to v0.17.93 (#876)
 - *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.36 (#877)
 - *(deps)* Update module github.com/pressly/goose/v3 to v3.27.2 (#878)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.5.1 (#879)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.6.0 (#880)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.7.0 (#881)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.8.0 (#882)
 - *(deps)* Update module golang.org/x/sync to v0.22.0 (#883)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.9.0 (#884)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.9.1 (#885)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.9.2 (#886)
 - *(deps)* Update module golang.org/x/crypto to v0.54.0 (#888)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.10.0 (#890)
 - *(deps)* Update module github.com/99designs/gqlgen to v0.17.94 (#889)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.11.0 (#892)
 - *(deps)* Update module github.com/alecthomas/kong to v1.16.0 (#894)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.12.0 (#895)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.12.1 (#896)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.13.0 (#899)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.13.1 (#900)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.13.2 (#901)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.14.0 (#903)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.14.1 (#904)
 - *(deps)* Update module github.com/pressly/goose/v3 to v3.27.3 (#905)
 - *(deps)* Update module github.com/auth0/go-jwt-middleware/v3 to v3.3.0 (#907)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.14.2 (#908)
 - *(deps)* Update opentelemetry-go monorepo (#909)
 - *(deps)* Update module go.opentelemetry.io/contrib/bridges/otelslog to v0.20.0 (#911)
 - *(deps)* Update module github.com/alecthomas/kong to v1.16.1 (#914)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.15.0 (#915)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.15.1 (#917)
 - *(deps)* Update module golang.org/x/crypto to v0.55.0 (#918)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.16.0 (#919)
 - *(deps)* Update module github.com/stretchr/testify to v1.12.0 (#920)
 - *(deps)* Update module github.com/stretchr/testify to v1.12.1 (#923)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.17.0 (#925)
 - *(deps)* Update opentelemetry-go monorepo (#929)
 - *(deps)* Update module go.opentelemetry.io/contrib/bridges/otelslog to v0.20.1 (#930)
 ### ⚡ Performance
 - *(graph)* Cache merged SDL and SchemaUpdate per ref (#841)
 - *(graph)* Warm schema cache on startup to kill cold-start spikes (#843)
 ### ⚙️ Miscellaneous Tasks
 - *(deps)* Update golang:1.26.3 docker digest to 54d3246 (#842)
 - *(deps)* Update node.js to v24.16.0 (#847)
 - *(deps)* Update golang docker tag to v1.26.4 (#855)
 - *(deps)* Update node.js to fb71d01 (#859)
 - *(deps)* Update golang:1.26.4 docker digest to 62df9f3 (#861)
 - *(deps)* Update node.js to 21f403a (#867)
 - *(deps)* Update actions/checkout action to v7 (#868)
 - *(deps)* Update node.js to v24.17.0 (#870)
 - *(deps)* Update golang:1.26.4 docker digest to f83d235 (#872)
 - *(deps)* Update pre-commit hook alessandrojcm/commitlint-pre-commit-hook to v9.26.0 (#874)
 - *(deps)* Update node.js to v24.18.0 (#875)
 - *(deps)* Update golang docker tag to v1.26.5 (#887)
 - *(deps)* Update golang:1.26.5 docker digest to adde241 (#891)
 - *(deps)* Update actions/setup-go action to v7 (#897)
 - *(deps)* Update actions/setup-node action to v7 (#893)
 - *(deps)* Update actions/setup-python action to v7 (#902)
 - *(deps)* Update node.js to v24.18.1 (#906)
 - *(deps)* Update node.js to v24.19.0 (#910)
 - *(deps)* Update golang:1.26.5 docker digest to 046e320 (#912)
 - *(deps)* Update golang:1.26.5 docker digest to e8ab809 (#913)
 - *(deps)* Update golang docker tag to v1.26.6 (#916)
 - *(deps)* Update golang docker tag to v1.26.7 (#921)
 - *(deps)* Update golang docker tag to v1.27.0 (#922)
 - *(deps)* Update pre-commit hook golangci/golangci-lint to v2.13.1 (#924)
 - *(deps)* Update golang:1.27.0 docker digest to 47526c1 (#926)
 - *(deps)* Update node.js to v24.20.0 (#927)
 - *(deps)* Update node.js to e67514e (#928)
 ## [0.9.7] - 2026-05-14
 ### 🐛 Bug Fixes
 - *(deps)* Update module gitlab.com/unboundsoftware/eventsourced/pg to v1.18.6 (#790)
 - *(deps)* Update module github.com/alecthomas/kong to v1.15.0 (#791)
 - *(deps)* Update opentelemetry-go monorepo (#793)
 - *(deps)* Update module go.opentelemetry.io/contrib/bridges/otelslog to v0.18.0 (#797)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.268 (#798)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.269 (#802)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.270 (#804)
 - *(deps)* Update module github.com/auth0/go-jwt-middleware/v3 to v3.1.0 (#805)
 - *(deps)* Update module golang.org/x/crypto to v0.50.0 (#807)
 - *(deps)* Update module gitlab.com/unboundsoftware/eventsourced/pg to v1.18.7 (#810)
 - *(deps)* Update module github.com/pressly/goose/v3 to v3.27.1 (#814)
 - *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.33 (#816)
 - *(deps)* Update module github.com/99designs/gqlgen to v0.17.90 (#818)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0 (#820)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.1.0 (#823)
 - *(deps)* Update module gitlab.com/unboundsoftware/eventsourced/pg to v1.18.8 (#831)
 - *(deps)* Update module golang.org/x/crypto to v0.51.0 (#832)
 ### 🎨 Styling
 - Apply gofumpt formatting (#828)
 ### ⚙️ Miscellaneous Tasks
 - *(deps)* Update golang:1.26.1 docker digest to 5ba1126 (#795)
 - *(deps)* Update golang docker tag to v1.26.2 (#800)
 - *(deps)* Update node.js to 8510330 (#809)
 - *(deps)* Update node.js to v24.15.0 (#811)
 - *(deps)* Update golang:1.26.2 docker digest to e1203b8 (#812)
 - *(deps)* Update pre-commit hook alessandrojcm/commitlint-pre-commit-hook to v9.25.0 (#822)
 - *(deps)* Update pre-commit hook golangci/golangci-lint to v2.12.0 (#826)
 - *(deps)* Update pre-commit hook golangci/golangci-lint to v2.12.1 (#827)
 - *(deps)* Update pre-commit hook golangci/golangci-lint to v2.12.2 (#830)
 - *(deps)* Update golang docker tag to v1.26.3 (#833)
 ## [0.9.6] - 2026-03-29
 ### 🐛 Bug Fixes
 - *(graph)* Stabilize debouncer tests with synctest fake clock
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.257 (#743)
 - *(deps)* Update golang.org/x/net to v0.51.0
 - *(deps)* Update module go.opentelemetry.io/contrib/bridges/otelslog to v0.16.0 (#745)
 - *(deps)* Update opentelemetry-go monorepo (#744)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.260 (#750)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.261 (#751)
 - *(deps)* Update opentelemetry-go monorepo (#755)
 - *(deps)* Update module go.opentelemetry.io/contrib/bridges/otelslog to v0.17.0 (#756)
 - *(deps)* Update module golang.org/x/sync to v0.20.0 (#760)
 - *(deps)* Update module github.com/99designs/gqlgen to v0.17.88 (#762)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.262 (#765)
 - *(deps)* Update module golang.org/x/crypto to v0.49.0 (#767)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.263 (#771)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.264 (#773)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.265 (#776)
 - *(deps)* Update module gitlab.com/unboundsoftware/eventsourced/pg to v1.18.5 (#778)
 - *(deps)* Update module github.com/99designs/gqlgen to v0.17.89 (#782)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.266 (#784)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.267 (#786)
 - Cap Node.js heap to prevent OOM during wgc composition (#788)
 ### ⚙️ Miscellaneous Tasks
 - *(deps)* Update golang docker tag to v1.26.1 (#752)
 - *(deps)* Update pre-commit hook golangci/golangci-lint to v2.11.1
 - *(deps)* Update pre-commit hook golangci/golangci-lint to v2.11.2 (#758)
 - *(deps)* Update pre-commit hook golangci/golangci-lint to v2.11.3 (#763)
 - *(deps)* Update pre-commit hook gitleaks/gitleaks to v8.30.1 (#769)
 - *(deps)* Update golang:1.26.1 docker digest to 984bf90 (#774)
 - *(deps)* Update pre-commit hook golangci/golangci-lint to v2.11.4 (#780)
 - *(deps)* Update node.js to v24.14.1 (#783)
 ## [0.9.5] - 2026-02-25
 ### 🐛 Bug Fixes
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.256
 ### ⚙️ Miscellaneous Tasks
 - *(deps)* Update golang:1.26.0 docker digest to 9835fb4 (#736)
 - *(deps)* Update node.js to v24.14.0 (#735)
 - *(deps)* Update node.js to 7fddd9d (#739)
 ## [0.9.4] - 2026-02-23
 ### 🐛 Bug Fixes
 - *(ci)* Pin goreleaser to v2.13.3 for Gitea SDK compatibility
 ## [0.9.3] - 2026-02-23
 ### 🐛 Bug Fixes
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.249 (#702)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.250 (#704)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.251
 - *(deps)* Update module gitlab.com/unboundsoftware/eventsourced/pg to v1.18.3
 - *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.32
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.252 (#714)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.253 (#716)
 - *(deps)* Update module github.com/99designs/gqlgen to v0.17.87
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.254 (#718)
 - *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.0.0-rc.255
 - *(deps)* Update module github.com/pressly/goose/v3 to v3.27.0
 - *(deps)* Update module gitlab.com/unboundsoftware/eventsourced/pg to v1.18.4 (#727)
 - Prevent OOM on rapid schema publishing
 ### ⚙️ Miscellaneous Tasks
 - *(deps)* Update pre-commit hook golangci/golangci-lint to v2.10.1 (#706)
 - *(deps)* Update goreleaser/goreleaser-action action to v7
 - *(deps)* Update actions/setup-node action to v6
 ## [0.9.2] - 2026-02-13
 ### 🐛 Bug Fixes
@@ -1,4 +1,4 @@
-FROM amd64/golang:1.26.0@sha256:e7479dbd4918090d893b97245fd8c0bcf767677f8ede2e60e7fb2c2f38c94215 as modules
+FROM amd64/golang:1.27.0@sha256:47526c1fe3e75149ec38346e66f15399e20fc8044045827305dbc2814babe5a2 as modules
 WORKDIR /build
 ADD go.* /build
 RUN go mod download
@@ -24,12 +24,17 @@ RUN GOOS=linux GOARCH=amd64 go build \
 FROM scratch as export
 COPY --from=build /build/coverage.txt /
-FROM node:24.13.1-alpine@sha256:4f696fbf39f383c1e486030ba6b289a5d9af541642fc78ab197e584a113b9c03
+FROM node:24.20.0-alpine@sha256:e67514e5d0f6c46656005e1b693b2ec9d52e80b641307de684d4a015ba7a4eaf
 ENV TZ Europe/Stockholm
 # Install wgc CLI globally for Cosmo Router composition
 RUN npm install -g wgc@latest
 # Cap Node.js heap for runtime wgc invocations. 512MB leaves room for
 # composing supergraphs with many subgraphs; lower caps (e.g. 64MB) OOM
 # wgc as the subgraph count grows.
 ENV NODE_OPTIONS="--max-old-space-size=512"
 # Copy timezone data and certificates
 COPY --from=build /usr/share/zoneinfo /usr/share/zoneinfo
 COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
@@ -10,6 +10,7 @@ import (
 	"gitlab.com/unboundsoftware/eventsourced/eventsourced"
 	"gitea.unbound.se/unboundsoftware/schemas/domain"
 	"gitea.unbound.se/unboundsoftware/schemas/graph/model"
 	"gitea.unbound.se/unboundsoftware/schemas/hash"
 )
@@ -21,9 +22,19 @@ type Cache struct {
 	services      map[string]map[string]map[string]struct{}
 	subGraphs     map[string]string
 	lastUpdate    map[string]string
 	mergedSDLs    map[string]*mergedSDLEntry
 	schemaUpdates map[string]*model.SchemaUpdate
 	logger        *slog.Logger
 }
 // mergedSDLEntry holds a precomputed merged SDL together with the lastUpdate
 // id it was computed against, so stale entries can be detected on read.
 type mergedSDLEntry struct {
 	ID        string
 	SDL       string
 	SubGraphs []*model.SubGraph
 }
 func (c *Cache) OrganizationByAPIKey(apiKey string) *domain.Organization {
 	c.mu.RLock()
 	defer c.mu.RUnlock()
@@ -91,6 +102,30 @@ func (c *Cache) Services(orgId, ref, lastUpdate string) ([]string, string) {
 	return services, c.lastUpdate[key]
 }
 // OrgRef identifies a single (organizationId, ref) pair that the cache
 // tracks subgraphs for.
 type OrgRef struct {
 	OrgId string
 	Ref   string
 }
 // AllOrgRefs returns every (orgId, ref) pair that currently has at least
 // one subgraph in the cache. Used by startup warmup to pre-compute the
 // merged SDL and SchemaUpdate for every known ref before the pod starts
 // serving traffic.
 func (c *Cache) AllOrgRefs() []OrgRef {
 	c.mu.RLock()
 	defer c.mu.RUnlock()
 	var out []OrgRef
 	for orgId, refs := range c.services {
 		for ref := range refs {
 			out = append(out, OrgRef{OrgId: orgId, Ref: ref})
 		}
 	}
 	return out
 }
 func (c *Cache) SubGraphId(orgId, ref, service string) string {
 	c.mu.RLock()
 	defer c.mu.RUnlock()
@@ -184,8 +219,11 @@ func (c *Cache) Update(msg any, _ goamqp.Headers) (any, error) {
 					for service := range refs[ref] {
 						delete(c.subGraphs, subGraphKey(orgId, ref, service))
 					}
-					// Remove lastUpdate for this org/ref
+					// Remove cached results for this org/ref
-					delete(c.lastUpdate, refKey(orgId, ref))
+					rk := refKey(orgId, ref)
 					delete(c.lastUpdate, rk)
 					delete(c.mergedSDLs, rk)
 					delete(c.schemaUpdates, rk)
 				}
 				delete(c.services, orgId)
 			}
@@ -253,10 +291,68 @@ func New(logger *slog.Logger) *Cache {
 		services:      make(map[string]map[string]map[string]struct{}),
 		subGraphs:     make(map[string]string),
 		lastUpdate:    make(map[string]string),
 		mergedSDLs:    make(map[string]*mergedSDLEntry),
 		schemaUpdates: make(map[string]*model.SchemaUpdate),
 		logger:        logger,
 	}
 }
 // GetMergedSDL returns the cached merged SDL for (orgId, ref) if it was
 // computed against the current lastUpdate. Returns nil when missing or stale.
 func (c *Cache) GetMergedSDL(orgId, ref string) *mergedSDLEntry {
 	c.mu.RLock()
 	defer c.mu.RUnlock()
 	key := refKey(orgId, ref)
 	entry := c.mergedSDLs[key]
 	if entry == nil || entry.ID != c.lastUpdate[key] {
 		return nil
 	}
 	return entry
 }
 // MergedSDLEntry exposes the cached merged SDL fields to callers.
 func (e *mergedSDLEntry) Unpack() (id, sdl string, subGraphs []*model.SubGraph) {
 	return e.ID, e.SDL, e.SubGraphs
 }
 // SetMergedSDL stores a precomputed merged SDL for (orgId, ref). The entry
 // is only retained while c.lastUpdate[key] matches id; subsequent updates
 // invalidate it implicitly via the version mismatch in GetMergedSDL.
 func (c *Cache) SetMergedSDL(orgId, ref, id, sdl string, subGraphs []*model.SubGraph) {
 	c.mu.Lock()
 	defer c.mu.Unlock()
 	c.mergedSDLs[refKey(orgId, ref)] = &mergedSDLEntry{
 		ID:        id,
 		SDL:       sdl,
 		SubGraphs: subGraphs,
 	}
 }
 // GetSchemaUpdate returns the cached SchemaUpdate (subgraphs + cosmo router
 // config) for (orgId, ref) when its id matches the current lastUpdate.
 // Returns nil when missing or stale.
 func (c *Cache) GetSchemaUpdate(orgId, ref string) *model.SchemaUpdate {
 	c.mu.RLock()
 	defer c.mu.RUnlock()
 	key := refKey(orgId, ref)
 	upd := c.schemaUpdates[key]
 	if upd == nil || upd.ID != c.lastUpdate[key] {
 		return nil
 	}
 	return upd
 }
 // SetSchemaUpdate stores a precomputed SchemaUpdate for (orgId, ref).
 func (c *Cache) SetSchemaUpdate(orgId, ref string, update *model.SchemaUpdate) {
 	c.mu.Lock()
 	defer c.mu.Unlock()
 	c.schemaUpdates[refKey(orgId, ref)] = update
 }
 func refKey(orgId string, ref string) string {
 	return fmt.Sprintf("%s<->%s", orgId, ref)
 }
@@ -24,7 +24,7 @@ import (
 	"github.com/vektah/gqlparser/v2/ast"
 	"gitlab.com/unboundsoftware/eventsourced/amqp"
 	"gitlab.com/unboundsoftware/eventsourced/eventsourced"
-	"gitlab.com/unboundsoftware/eventsourced/pg"
+	"gitlab.com/unboundsoftware/eventsourced/pg/v2"
 	"gitea.unbound.se/unboundsoftware/schemas/cache"
 	"gitea.unbound.se/unboundsoftware/schemas/domain"
@@ -66,6 +66,13 @@ func main() {
 		cli,
 	); err != nil {
 		logger.With("error", err).Error("process error")
 		// start() defers the OTel SDK shutdown, so by the time we get here the
 		// log exporter may already be torn down and the line above never
 		// reaches Alloy. Write to stderr too so startup failures are always
 		// visible in `kubectl logs`, and exit non-zero so the container is
 		// reported as failed (CrashLoopBackOff) instead of "Completed".
 		fmt.Fprintf(os.Stderr, "fatal: process error: %v\n", err)
 		os.Exit(1)
 	}
 }
@@ -201,13 +208,17 @@ func start(closeEvents chan error, logger *slog.Logger, connectToAmqpFunc func(u
 		defer rootCancel()
 		resolver := &graph.Resolver{
-			EventStore: eventStore,
+			EventStore:     eventStore,
-			Publisher:  eventPublisher,
+			Publisher:      eventPublisher,
-			Logger:     logger,
+			Logger:         logger,
-			Cache:      serviceCache,
+			Cache:          serviceCache,
-			PubSub:     graph.NewPubSub(),
+			PubSub:         graph.NewPubSub(),
 			CosmoGenerator: graph.NewCosmoGenerator(&graph.DefaultCommandExecutor{}, 60*time.Second),
 			Debouncer:      graph.NewDebouncer(500 * time.Millisecond),
 		}
 		resolver.WarmCache(rootCtx)
 		config := generated.Config{
 			Resolvers:  resolver,
 			Complexity: generated.ComplexityRoot{},
@@ -1,91 +1,90 @@
 module gitea.unbound.se/unboundsoftware/schemas
-go 1.25
+go 1.25.7
 require (
-	github.com/99designs/gqlgen v0.17.86
+	github.com/99designs/gqlgen v0.17.94
 	github.com/DATA-DOG/go-sqlmock v1.5.2
 	github.com/Khan/genqlient v0.8.1
-	github.com/alecthomas/kong v1.14.0
+	github.com/alecthomas/kong v1.16.1
 	github.com/apex/log v1.9.0
-	github.com/auth0/go-jwt-middleware/v3 v3.0.0
+	github.com/auth0/go-jwt-middleware/v3 v3.3.0
 	github.com/google/uuid v1.6.0
 	github.com/jmoiron/sqlx v1.4.0
-	github.com/pressly/goose/v3 v3.26.0
+	github.com/pressly/goose/v3 v3.27.3
 	github.com/rs/cors v1.11.1
 	github.com/sparetimecoders/goamqp v0.3.3
-	github.com/stretchr/testify v1.11.1
+	github.com/stretchr/testify v1.12.1
-	github.com/vektah/gqlparser/v2 v2.5.31
+	github.com/vektah/gqlparser/v2 v2.5.36
-	github.com/wundergraph/graphql-go-tools/v2 v2.0.0-rc.248
+	github.com/wundergraph/graphql-go-tools/v2 v2.17.0
 	gitlab.com/unboundsoftware/eventsourced/amqp v1.9.1
-	gitlab.com/unboundsoftware/eventsourced/eventsourced v1.19.4
+	gitlab.com/unboundsoftware/eventsourced/eventsourced v1.23.0
-	gitlab.com/unboundsoftware/eventsourced/pg v1.18.2
+	gitlab.com/unboundsoftware/eventsourced/pg/v2 v2.0.2
-	go.opentelemetry.io/contrib/bridges/otelslog v0.15.0
+	go.opentelemetry.io/contrib/bridges/otelslog v0.20.1
-	go.opentelemetry.io/otel v1.40.0
+	go.opentelemetry.io/otel v1.46.0
-	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.40.0
+	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.46.0
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.40.0
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.46.0
-	go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.16.0
+	go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.22.0
-	go.opentelemetry.io/otel/log v0.16.0
+	go.opentelemetry.io/otel/log v0.22.0
-	go.opentelemetry.io/otel/sdk v1.40.0
+	go.opentelemetry.io/otel/sdk v1.46.0
-	go.opentelemetry.io/otel/sdk/log v0.16.0
+	go.opentelemetry.io/otel/sdk/log v0.22.0
-	go.opentelemetry.io/otel/sdk/metric v1.40.0
+	go.opentelemetry.io/otel/sdk/metric v1.46.0
-	go.opentelemetry.io/otel/trace v1.40.0
+	go.opentelemetry.io/otel/trace v1.46.0
-	golang.org/x/crypto v0.48.0
+	golang.org/x/crypto v0.55.0
 	golang.org/x/sync v0.22.0
 	gopkg.in/yaml.v3 v3.0.1
 )
 require (
 	github.com/agnivade/levenshtein v1.2.1 // indirect
-	github.com/buger/jsonparser v1.1.1 // indirect
+	github.com/buger/jsonparser v1.1.2 // indirect
 	github.com/cenkalti/backoff/v5 v5.0.3 // indirect
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
-	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/coder/websocket v1.8.15 // indirect
 	github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 // indirect
-	github.com/go-logr/logr v1.4.3 // indirect
+	github.com/go-logr/logr v1.4.4 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
-	github.com/go-viper/mapstructure/v2 v2.4.0 // indirect
+	github.com/go-viper/mapstructure/v2 v2.5.0 // indirect
 	github.com/goccy/go-json v0.10.5 // indirect
 	github.com/goccy/go-yaml v1.19.2 // indirect
-	github.com/gorilla/websocket v1.5.1 // indirect
+	github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0 // indirect
 	github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.7 // indirect
 	github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
 	github.com/lestrrat-go/blackmagic v1.0.4 // indirect
 	github.com/lestrrat-go/dsig v1.0.0 // indirect
 	github.com/lestrrat-go/dsig-secp256k1 v1.0.0 // indirect
 	github.com/lestrrat-go/httpcc v1.0.1 // indirect
 	github.com/lestrrat-go/httprc/v3 v3.0.3 // indirect
-	github.com/lestrrat-go/jwx/v3 v3.0.12 // indirect
+	github.com/lestrrat-go/jwx/v3 v3.0.13 // indirect
 	github.com/lestrrat-go/option/v2 v2.0.0 // indirect
-	github.com/lib/pq v1.11.1 // indirect
+	github.com/lib/pq v1.12.3 // indirect
 	github.com/mfridman/interpolate v0.0.2 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/rabbitmq/amqp091-go v1.10.0 // indirect
 	github.com/segmentio/asm v1.2.1 // indirect
-	github.com/sethvargo/go-retry v0.3.0 // indirect
+	github.com/sethvargo/go-retry v0.4.0 // indirect
-	github.com/sosodev/duration v1.3.1 // indirect
+	github.com/sosodev/duration v1.4.0 // indirect
-	github.com/stretchr/objx v0.5.2 // indirect
+	github.com/stretchr/objx v0.5.3 // indirect
-	github.com/tidwall/gjson v1.17.0 // indirect
+	github.com/tidwall/gjson v1.18.0 // indirect
 	github.com/tidwall/match v1.1.1 // indirect
 	github.com/tidwall/pretty v1.2.1 // indirect
 	github.com/tidwall/sjson v1.2.5 // indirect
-	github.com/urfave/cli/v3 v3.6.1 // indirect
+	github.com/urfave/cli/v3 v3.10.1 // indirect
 	github.com/valyala/fastjson v1.6.7 // indirect
-	github.com/wundergraph/astjson v1.0.0 // indirect
+	github.com/wundergraph/astjson v1.1.0 // indirect
-	github.com/wundergraph/go-arena v1.1.0 // indirect
+	github.com/wundergraph/go-arena v1.3.0 // indirect
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0 // indirect
-	go.opentelemetry.io/otel/metric v1.40.0 // indirect
+	go.opentelemetry.io/otel/metric v1.46.0 // indirect
-	go.opentelemetry.io/proto/otlp v1.9.0 // indirect
+	go.opentelemetry.io/proto/otlp v1.11.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
-	golang.org/x/mod v0.32.0 // indirect
+	go.yaml.in/yaml/v3 v3.0.5 // indirect
-	golang.org/x/net v0.49.0 // indirect
+	golang.org/x/mod v0.38.0 // indirect
-	golang.org/x/sync v0.19.0 // indirect
+	golang.org/x/net v0.58.0 // indirect
-	golang.org/x/sys v0.41.0 // indirect
+	golang.org/x/sys v0.47.0 // indirect
-	golang.org/x/text v0.34.0 // indirect
+	golang.org/x/text v0.41.0 // indirect
-	golang.org/x/tools v0.41.0 // indirect
+	golang.org/x/tools v0.48.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20260128011058-8636f8732409 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20260128011058-8636f8732409 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688 // indirect
-	google.golang.org/grpc v1.78.0 // indirect
+	google.golang.org/grpc v1.83.1 // indirect
-	google.golang.org/protobuf v1.36.11 // indirect
+	google.golang.org/protobuf v1.36.12 // indirect
 )
@@ -1,25 +1,20 @@
 filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA=
 filippo.io/edwards25519 v1.1.0/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4=
-github.com/99designs/gqlgen v0.17.86 h1:C8N3UTa5heXX6twl+b0AJyGkTwYL6dNmFrgZNLRcU6w=
+filippo.io/edwards25519 v1.2.0 h1:crnVqOiS4jqYleHd9vaKZ+HKtHfllngJIiOpNpoJsjo=
-github.com/99designs/gqlgen v0.17.86/go.mod h1:KTrPl+vHA1IUzNlh4EYkl7+tcErL3MgKnhHrBcV74Fw=
+filippo.io/edwards25519 v1.2.0/go.mod h1:xzAOLCNug/yB62zG1bQ8uziwrIqIuxhctzJT18Q77mc=
 github.com/99designs/gqlgen v0.17.94 h1:+3EUDVgX/8gDyDL+7NUqCo4cy2ylylwW0GvR1dGiEsA=
 github.com/99designs/gqlgen v0.17.94/go.mod h1:o+XaAMpPA/AX4rqeiK03tZUb/5T+WCgpRDD4aujgdas=
 github.com/DATA-DOG/go-sqlmock v1.5.2 h1:OcvFkGmslmlZibjAjaHm3L//6LiuBgolP7OputlJIzU=
 github.com/DATA-DOG/go-sqlmock v1.5.2/go.mod h1:88MAG/4G7SMwSE3CeA0ZKzrT5CiOU3OJ+JlNzwDqpNU=
 github.com/Khan/genqlient v0.8.1 h1:wtOCc8N9rNynRLXN3k3CnfzheCUNKBcvXmVv5zt6WCs=
 github.com/Khan/genqlient v0.8.1/go.mod h1:R2G6DzjBvCbhjsEajfRjbWdVglSH/73kSivC9TLWVjU=
 github.com/PuerkitoBio/goquery v1.11.0 h1:jZ7pwMQXIITcUXNH83LLk+txlaEy6NVOfTuP43xxfqw=
 github.com/PuerkitoBio/goquery v1.11.0/go.mod h1:wQHgxUOU3JGuj3oD/QFfxUdlzW6xPHfqyHre6VMY4DQ=
 github.com/agnivade/levenshtein v1.2.1 h1:EHBY3UOn1gwdy/VbFwgo4cxecRznFk7fKWN1KOX7eoM=
 github.com/agnivade/levenshtein v1.2.1/go.mod h1:QVVI16kDrtSuwcpd0p1+xMC6Z/VfhtCyDIjcwga4/DU=
 github.com/alecthomas/assert/v2 v2.11.0 h1:2Q9r3ki8+JYXvGsDyBXwH3LcJ+WK5D0gc5E8vS6K3D0=
 github.com/alecthomas/assert/v2 v2.11.0/go.mod h1:Bze95FyfUr7x34QZrjL+XP+0qgp/zg8yS+TtBj1WA3k=
-github.com/alecthomas/kong v1.14.0 h1:gFgEUZWu2ZmZ+UhyZ1bDhuutbKN1nTtJTwh19Wsn21s=
+github.com/alecthomas/kong v1.16.1 h1:ixhCt93XkJ98kGposQ54+bl0IK6XwqB40AsMynU7Z8E=
-github.com/alecthomas/kong v1.14.0/go.mod h1:wrlbXem1CWqUV5Vbmss5ISYhsVPkBb1Yo7YKJghju2I=
+github.com/alecthomas/kong v1.16.1/go.mod h1:wrlbXem1CWqUV5Vbmss5ISYhsVPkBb1Yo7YKJghju2I=
 github.com/alecthomas/repr v0.5.2 h1:SU73FTI9D1P5UNtvseffFSGmdNci/O6RsqzeXJtP0Qs=
 github.com/alecthomas/repr v0.5.2/go.mod h1:Fr0507jx4eOXV7AlPV6AVZLYrLIuIeSOWtW57eE/O/4=
 github.com/andreyvit/diff v0.0.0-20170406064948-c7f18ee00883 h1:bvNMNQO63//z+xNgfBlViaCIJKLlCJ6/fmUseuG0wVQ=
 github.com/andreyvit/diff v0.0.0-20170406064948-c7f18ee00883/go.mod h1:rCTlJbsFo29Kk6CurOXKm700vrz8f0KW0JNfpkRJY/8=
 github.com/andybalholm/cascadia v1.3.3 h1:AG2YHrzJIm4BZ19iwJ/DAua6Btl3IwJX+VI4kktS1LM=
 github.com/andybalholm/cascadia v1.3.3/go.mod h1:xNd9bqTn98Ln4DwST8/nG+H0yuB8Hmgu1YHNnWw0GeA=
 github.com/apex/log v1.9.0 h1:FHtw/xuaM8AgmvDDTI9fiwoAL25Sq2cxojnZICUU8l0=
 github.com/apex/log v1.9.0/go.mod h1:m82fZlWIuiWzWP04XCTXmnX0xRkYYbCdYn8jbJeLBEA=
 github.com/apex/logs v1.0.0/go.mod h1:XzxuLZ5myVHDy9SAmYpamKKRNApGj54PfYLcFrXqDwo=
@@ -27,19 +22,22 @@ github.com/aphistic/golf v0.0.0-20180712155816-02c07f170c5a/go.mod h1:3NqKYiepwy
 github.com/aphistic/sweet v0.2.0/go.mod h1:fWDlIh/isSE9n6EPsRmC0det+whmX6dJid3stzu0Xys=
 github.com/arbovm/levenshtein v0.0.0-20160628152529-48b4e1c0c4d0 h1:jfIu9sQUG6Ig+0+Ap1h4unLjW6YQJpKZVmUzxsD4E/Q=
 github.com/arbovm/levenshtein v0.0.0-20160628152529-48b4e1c0c4d0/go.mod h1:t2tdKJDJF9BV14lnkjHmOQgcvEKgtqs5a1N3LNdJhGE=
-github.com/auth0/go-jwt-middleware/v3 v3.0.0 h1:+rvUPCT+VbAuK4tpS13fWfZrMyqTwLopt3VoY0Y7kvA=
+github.com/auth0/go-jwt-middleware/v3 v3.3.0 h1:nRALRLGsUdWgxX0knqwp60YxiYypeZYfhr+yFCvHoGY=
-github.com/auth0/go-jwt-middleware/v3 v3.0.0/go.mod h1:iU42jqjRyeKbf9YYSnRnolr836gk6Ty/jnUNuVq2b0o=
+github.com/auth0/go-jwt-middleware/v3 v3.3.0/go.mod h1:WXL/zFf3nuQJWQOVj3hGUQ289ixKVSrFGwZn6LxaQsw=
 github.com/aws/aws-sdk-go v1.20.6/go.mod h1:KmX6BPdI08NWTb3/sm4ZGu5ShLoqVDhKgpiN924inxo=
 github.com/aybabtme/rgbterm v0.0.0-20170906152045-cc83f3b3ce59/go.mod h1:q/89r3U2H7sSsE2t6Kca0lfwTK8JdoNGS/yzM/4iH5I=
-github.com/buger/jsonparser v1.1.1 h1:2PnMjfWD7wBILjqQbt530v576A/cAbQvEW9gGIpYMUs=
+github.com/buger/jsonparser v1.1.2 h1:frqHqw7otoVbk5M8LlE/L7HTnIq2v9RX6EJ48i9AxJk=
-github.com/buger/jsonparser v1.1.1/go.mod h1:6RYKKt7H4d4+iWqouImQ9R2FZql3VbhNgx27UK13J/0=
+github.com/buger/jsonparser v1.1.2/go.mod h1:6RYKKt7H4d4+iWqouImQ9R2FZql3VbhNgx27UK13J/0=
 github.com/cenkalti/backoff/v5 v5.0.3 h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM=
 github.com/cenkalti/backoff/v5 v5.0.3/go.mod h1:rkhZdG3JZukswDf7f0cwqPNk4K0sa+F97BxZthm/crw=
 github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
 github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/coder/websocket v1.8.15 h1:6B2JPeOGlpff2Uz6vOEH1Vzpi0iUz20A+lPVhPHtNUA=
 github.com/coder/websocket v1.8.15/go.mod h1:NX3SzP+inril6yawo5CQXx8+fk145lPDC6pumgx0mVg=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 h1:NMZiJj8QnKe1LgsbDayM4UoHwbvwDRwnI3hwNaAHRnc=
 github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0/go.mod h1:ZXNYxsqcloTdSy/rNShjYzMhyjf0LaoftYK0p+A3h40=
 github.com/dgryski/trifles v0.0.0-20230903005119-f50d829f2e54 h1:SG7nF6SRlWhcT7cNTs5R6Hk4V2lcmLz2NsG2VnInyNo=
@@ -50,15 +48,15 @@ github.com/fatih/color v1.7.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5Kwzbycv
 github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
 github.com/go-logfmt/logfmt v0.4.0/go.mod h1:3RMwSq7FuexP4Kalkev3ejPJsZTpXXBr9+V4qmtdjCk=
 github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
-github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI=
+github.com/go-logr/logr v1.4.4 h1:tG4xh9yMsRCAiodLVTxyrkzSZ9+o0L1Kg/+cPVcbP/8=
-github.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
+github.com/go-logr/logr v1.4.4/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
 github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
 github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
 github.com/go-sql-driver/mysql v1.8.1/go.mod h1:wEBSXgmK//2ZFJyE+qWnIsVGmvmEKlqwuVSjsCm7DZg=
-github.com/go-sql-driver/mysql v1.9.3 h1:U/N249h2WzJ3Ukj8SowVFjdtZKfu9vlLZxjPXV1aweo=
+github.com/go-sql-driver/mysql v1.10.0 h1:Q+1LV8DkHJvSYAdR83XzuhDaTykuDx0l6fkXxoWCWfw=
-github.com/go-sql-driver/mysql v1.9.3/go.mod h1:qn46aNg1333BRMNU69Lq93t8du/dwxI64Gl8i5p1WMU=
+github.com/go-sql-driver/mysql v1.10.0/go.mod h1:M+cqaI7+xxXGG9swrdeUIoPG3Y3KCkF0pZej+SK+nWk=
-github.com/go-viper/mapstructure/v2 v2.4.0 h1:EBsztssimR/CONLSZZ04E8qAkxNYq4Qp9LvH92wZUgs=
+github.com/go-viper/mapstructure/v2 v2.5.0 h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro=
-github.com/go-viper/mapstructure/v2 v2.4.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM=
+github.com/go-viper/mapstructure/v2 v2.5.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM=
 github.com/goccy/go-json v0.10.5 h1:Fq85nIqj+gXn/S5ahsiTlK3TmC85qgirsdTP/+DeaC4=
 github.com/goccy/go-json v0.10.5/go.mod h1:oq7eo15ShAhp70Anwd5lgX2pLfOS3QCiwU/PULtXL6M=
 github.com/goccy/go-yaml v1.19.2 h1:PmFC1S6h8ljIz6gMRBopkjP1TVT7xuwrButHID66PoM=
@@ -72,10 +70,8 @@ github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
-github.com/gorilla/websocket v1.5.1 h1:gmztn0JnHVt9JZquRuzLw3g4wouNVzKL15iLr/zn/QY=
+github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0 h1:/Tnpcb2E0Pz/tN9s3bfEY2Q8ePCEX9iuS+cneUwncnw=
-github.com/gorilla/websocket v1.5.1/go.mod h1:x3kM2JMyaluk02fnUJpQuwD2dCS5NDG2ZHL0uE0tcaY=
+github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0/go.mod h1:zOBXOsUaBSjKgmH4OGzV1esUpR3oUSCPYVd2cUBjKYY=
 github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.7 h1:X+2YciYSxvMQK0UZ7sg45ZVabVZBeBuvMkmuI2V3Fak=
 github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.7/go.mod h1:lW34nIZuQ8UDPdkon5fmfp2l3+ZkQ2me/+oecHYLOII=
 github.com/hashicorp/golang-lru/v2 v2.0.7 h1:a+bsQ5rvGLjzHuww6tVxozPZFVghXaHOwFs4luLUK2k=
 github.com/hashicorp/golang-lru/v2 v2.0.7/go.mod h1:QeFd9opnmA6QUJc5vARoKUSoFhyfM2/ZepoAG6RGpeM=
 github.com/hexops/gotextdiff v1.0.3 h1:gitA9+qJrrTCsiCl7+kh75nPqQt1cx4ZkudSTLoUqJM=
@@ -106,35 +102,36 @@ github.com/lestrrat-go/httpcc v1.0.1 h1:ydWCStUeJLkpYyjLDHihupbn2tYmZ7m22BGkcvZZ
 github.com/lestrrat-go/httpcc v1.0.1/go.mod h1:qiltp3Mt56+55GPVCbTdM9MlqhvzyuL6W/NMDA8vA5E=
 github.com/lestrrat-go/httprc/v3 v3.0.3 h1:WjLHWkDkgWXeIUrKi/7lS/sGq2DjkSAwdTbH5RHXAKs=
 github.com/lestrrat-go/httprc/v3 v3.0.3/go.mod h1:mSMtkZW92Z98M5YoNNztbRGxbXHql7tSitCvaxvo9l0=
-github.com/lestrrat-go/jwx/v3 v3.0.12 h1:p25r68Y4KrbBdYjIsQweYxq794CtGCzcrc5dGzJIRjg=
+github.com/lestrrat-go/jwx/v3 v3.0.13 h1:AdHKiPIYeCSnOJtvdpipPg/0SuFh9rdkN+HF3O0VdSk=
-github.com/lestrrat-go/jwx/v3 v3.0.12/go.mod h1:HiUSaNmMLXgZ08OmGBaPVvoZQgJVOQphSrGr5zMamS8=
+github.com/lestrrat-go/jwx/v3 v3.0.13/go.mod h1:2m0PV1A9tM4b/jVLMx8rh6rBl7F6WGb3EG2hufN9OQU=
 github.com/lestrrat-go/option/v2 v2.0.0 h1:XxrcaJESE1fokHy3FpaQ/cXW8ZsIdWcdFzzLOcID3Ss=
 github.com/lestrrat-go/option/v2 v2.0.0/go.mod h1:oSySsmzMoR0iRzCDCaUfsCzxQHUEuhOViQObyy7S6Vg=
 github.com/lib/pq v1.10.9/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
-github.com/lib/pq v1.11.1 h1:wuChtj2hfsGmmx3nf1m7xC2XpK6OtelS2shMY+bGMtI=
+github.com/lib/pq v1.12.3 h1:tTWxr2YLKwIvK90ZXEw8GP7UFHtcbTtty8zsI+YjrfQ=
-github.com/lib/pq v1.11.1/go.mod h1:/p+8NSbOcwzAEI7wiMXFlgydTwcgTr3OSKMsD2BitpA=
+github.com/lib/pq v1.12.3/go.mod h1:/p+8NSbOcwzAEI7wiMXFlgydTwcgTr3OSKMsD2BitpA=
 github.com/mattn/go-colorable v0.1.1/go.mod h1:FuOcm+DKB9mbwrcAfNl7/TZVBZ6rcnceauSikq3lYCQ=
 github.com/mattn/go-colorable v0.1.2/go.mod h1:U0ppj6V5qS13XJ6of8GYAs25YV2eR4EVcfRqFIhoBtE=
 github.com/mattn/go-isatty v0.0.5/go.mod h1:Iq45c/XA43vh69/j3iqttzPXn0bhXyGjM0Hdxcsrc5s=
 github.com/mattn/go-isatty v0.0.8/go.mod h1:Iq45c/XA43vh69/j3iqttzPXn0bhXyGjM0Hdxcsrc5s=
-github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
+github.com/mattn/go-isatty v0.0.23 h1:cYwCQTQf3HB6xUC+BtyCLZNr7IzbOmoZbmssVNzSyiQ=
-github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/mattn/go-isatty v0.0.23/go.mod h1:nMCL3Zebbrt45jsMDgnfIwz6ydEQApk5oEI3HqDio6A=
 github.com/mattn/go-sqlite3 v1.14.22 h1:2gZY6PC6kBnID23Tichd1K+Z0oS6nE/XwU+Vz/5o4kU=
 github.com/mattn/go-sqlite3 v1.14.22/go.mod h1:Uh1q+B4BYcTPb+yiD3kU8Ct7aC0hY9fxUwlHK0RXw+Y=
 github.com/mfridman/interpolate v0.0.2 h1:pnuTK7MQIxxFz1Gr+rjSIx9u7qVjf5VOoM/u6BbAxPY=
 github.com/mfridman/interpolate v0.0.2/go.mod h1:p+7uk6oE07mpE/Ik1b8EckO0O4ZXiGAfshKBWLUM9Xg=
 github.com/mgutz/ansi v0.0.0-20170206155736-9520e82c474b/go.mod h1:01TrycV0kFyexm33Z7vhZRXopbI8J3TDReVlkTgMUxE=
-github.com/ncruces/go-strftime v0.1.9 h1:bY0MQC28UADQmHmaF5dgpLmImcShSi2kHU9XLdhx/f4=
+github.com/ncruces/go-strftime v1.0.0 h1:HMFp8mLCTPp341M/ZnA4qaf7ZlsbTc+miZjCLOFAw7w=
-github.com/ncruces/go-strftime v0.1.9/go.mod h1:Fwc5htZGVVkseilnfgOVb9mKy6w1naJmn9CehxcKcls=
+github.com/ncruces/go-strftime v1.0.0/go.mod h1:Fwc5htZGVVkseilnfgOVb9mKy6w1naJmn9CehxcKcls=
 github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
 github.com/onsi/gomega v1.5.0/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY=
 github.com/pkg/errors v0.8.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
 github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
-github.com/pressly/goose/v3 v3.26.0 h1:KJakav68jdH0WDvoAcj8+n61WqOIaPGgH0bJWS6jpmM=
+github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U=
-github.com/pressly/goose/v3 v3.26.0/go.mod h1:4hC1KrritdCxtuFsqgs1R4AU5bWtTAf+cnWvfhf2DNY=
+github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/pressly/goose/v3 v3.27.3 h1:pIglVHjw99r4e/hDHHwbl9vfOsDMqUokfkXo6+n/RxA=
 github.com/pressly/goose/v3 v3.27.3/go.mod h1:Dag+xpV6o20HR2LFY1j0q6MDwc3f7vPUFDA77R+0yGY=
 github.com/rabbitmq/amqp091-go v1.10.0 h1:STpn5XsHlHGcecLmMFCtg7mqq0RnD+zFr4uzukfVhBw=
 github.com/rabbitmq/amqp091-go v1.10.0/go.mod h1:Hy4jKW5kQART1u+JkDTF9YYOQUHXqMuhrgxOEeS7G4o=
 github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE=
@@ -153,26 +150,26 @@ github.com/segmentio/asm v1.2.1/go.mod h1:BqMnlJP91P8d+4ibuonYZw9mfnzI9HfxselHZr
 github.com/sergi/go-diff v1.0.0/go.mod h1:0CfEIISq7TuYL3j771MWULgwwjU+GofnZX9QAmXWZgo=
 github.com/sergi/go-diff v1.3.1 h1:xkr+Oxo4BOQKmkn/B9eMK0g5Kg/983T9DqqPHwYqD+8=
 github.com/sergi/go-diff v1.3.1/go.mod h1:aMJSSKb2lpPvRNec0+w3fl7LP9IOFzdc9Pa4NFbPK1I=
-github.com/sethvargo/go-retry v0.3.0 h1:EEt31A35QhrcRZtrYFDTBg91cqZVnFL2navjDrah2SE=
+github.com/sethvargo/go-retry v0.4.0 h1:9qy1OoIAxBL+gBYnkTnTnWle5wlfsXQlwRzIbbpdqPw=
-github.com/sethvargo/go-retry v0.3.0/go.mod h1:mNX17F0C/HguQMyMyJxcnU471gOZGxCLyYaFyAZraas=
+github.com/sethvargo/go-retry v0.4.0/go.mod h1:tvsjdKG6xfiCx4LSiUZ06kcv38xvdVQwv8R6/VnnVWg=
 github.com/smartystreets/assertions v1.0.0/go.mod h1:kHHU4qYBaI3q23Pp3VPrmWhuIUrLW/7eUrw0BU5VaoM=
 github.com/smartystreets/go-aws-auth v0.0.0-20180515143844-0c1422d1fdb9/go.mod h1:SnhjPscd9TpLiy1LpzGSKh3bXCfxxXuqd9xmQJy3slM=
 github.com/smartystreets/gunit v1.0.0/go.mod h1:qwPWnhz6pn0NnRBP++URONOVyNkPyr4SauJk4cUOwJs=
-github.com/sosodev/duration v1.3.1 h1:qtHBDMQ6lvMQsL15g4aopM4HEfOaYuhWBw3NPTtlqq4=
+github.com/sosodev/duration v1.4.0 h1:35ed0KiVFriGHHzZZJaZLgmTEEICIyt8Sx0RQfj9IjE=
-github.com/sosodev/duration v1.3.1/go.mod h1:RQIBBX0+fMLc/D9+Jb/fwvVmo0eZvDDEERAikUR6SDg=
+github.com/sosodev/duration v1.4.0/go.mod h1:RQIBBX0+fMLc/D9+Jb/fwvVmo0eZvDDEERAikUR6SDg=
 github.com/sparetimecoders/goamqp v0.3.3 h1:z/nfTPmrjeU/rIVuNOgsVLCimp3WFoNFvS3ZzXRJ6HE=
 github.com/sparetimecoders/goamqp v0.3.3/go.mod h1:W9NRCpWLE+Vruv2dcRSbszNil2O826d2Nv6kAkETW5o=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
-github.com/stretchr/objx v0.5.2 h1:xuMeJ0Sdp5ZMRXx/aWO6RZxdr3beISkG5/G/aIRr3pY=
+github.com/stretchr/objx v0.5.3 h1:jmXUvGomnU1o3W/V5h2VEradbpJDwGrzugQQvL0POH4=
-github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA=
+github.com/stretchr/objx v0.5.3/go.mod h1:rDQraq+vQZU7Fde9LOZLr8Tax6zZvy4kuNKF+QYS+U0=
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
-github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
+github.com/stretchr/testify v1.12.1 h1:EuwCh5fleGS7H32xRwO3wRGT7DxrDhLAT6FF8MpWDWE=
-github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
+github.com/stretchr/testify v1.12.1/go.mod h1:MDEgiDPPsNp5cuIrHPPCyornHKgEVbtFUmoNlxoYthg=
 github.com/tidwall/gjson v1.14.2/go.mod h1:/wbyibRr2FHMks5tjHJ5F8dMZh3AcwJEMf5vlfC0lxk=
-github.com/tidwall/gjson v1.17.0 h1:/Jocvlh98kcTfpN2+JzGQWQcqrPQwDrVEMApx/M5ZwM=
+github.com/tidwall/gjson v1.18.0 h1:FIDeeyB800efLX89e5a8Y0BNH+LOngJyGrIWxG2FKQY=
-github.com/tidwall/gjson v1.17.0/go.mod h1:/wbyibRr2FHMks5tjHJ5F8dMZh3AcwJEMf5vlfC0lxk=
+github.com/tidwall/gjson v1.18.0/go.mod h1:/wbyibRr2FHMks5tjHJ5F8dMZh3AcwJEMf5vlfC0lxk=
 github.com/tidwall/match v1.1.1 h1:+Ho715JplO36QYgwN9PGYNhgZvoUSc9X2c80KVTi+GA=
 github.com/tidwall/match v1.1.1/go.mod h1:eRSPERbgtNPcGhD8UCthc6PmLEQXEWd3PRB5JTxsfmM=
 github.com/tidwall/pretty v1.2.0/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU=
@@ -187,97 +184,99 @@ github.com/tj/go-buffer v1.1.0/go.mod h1:iyiJpfFcR2B9sXu7KvjbT9fpM4mOelRSDTbntVj
 github.com/tj/go-elastic v0.0.0-20171221160941-36157cbbebc2/go.mod h1:WjeM0Oo1eNAjXGDx2yma7uG2XoyRZTq1uv3M/o7imD0=
 github.com/tj/go-kinesis v0.0.0-20171128231115-08b17f58cb1b/go.mod h1:/yhzCV0xPfx6jb1bBgRFjl5lytqVqZXEaeqWP8lTEao=
 github.com/tj/go-spin v1.1.0/go.mod h1:Mg1mzmePZm4dva8Qz60H2lHwmJ2loum4VIrLgVnKwh4=
-github.com/urfave/cli/v3 v3.6.1 h1:j8Qq8NyUawj/7rTYdBGrxcH7A/j7/G8Q5LhWEW4G3Mo=
+github.com/urfave/cli/v3 v3.10.1 h1:7Kx9H50hrHbRbyxgO1KP6/BcbiGRz0uYh5YyQ30JEEY=
-github.com/urfave/cli/v3 v3.6.1/go.mod h1:ysVLtOEmg2tOy6PknnYVhDoouyC/6N42TMeoMzskhso=
+github.com/urfave/cli/v3 v3.10.1/go.mod h1:ysVLtOEmg2tOy6PknnYVhDoouyC/6N42TMeoMzskhso=
 github.com/valyala/fastjson v1.6.7 h1:ZE4tRy0CIkh+qDc5McjatheGX2czdn8slQjomexVpBM=
 github.com/valyala/fastjson v1.6.7/go.mod h1:CLCAqky6SMuOcxStkYQvblddUtoRxhYMGLrsQns1aXY=
-github.com/vektah/gqlparser/v2 v2.5.31 h1:YhWGA1mfTjID7qJhd1+Vxhpk5HTgydrGU9IgkWBTJ7k=
+github.com/vektah/gqlparser/v2 v2.5.36 h1:CN9mKVHgMkc+XftdOWIhb4HEL8wKSYkFAqhf8booa7s=
-github.com/vektah/gqlparser/v2 v2.5.31/go.mod h1:c1I28gSOVNzlfc4WuDlqU7voQnsqI6OG2amkBAFmgts=
+github.com/vektah/gqlparser/v2 v2.5.36/go.mod h1:cAJ9qwVgPaUkWv6Gn8vn0mqOE0Ui5Pn56wNy5396XWo=
-github.com/wundergraph/astjson v1.0.0 h1:rETLJuQkMWWW03HCF6WBttEBOu8gi5vznj5KEUPVV2Q=
+github.com/wundergraph/astjson v1.1.0 h1:xORDosrZ87zQFJwNGe/HIHXqzpdHOFmqWgykCLVL040=
-github.com/wundergraph/astjson v1.0.0/go.mod h1:h12D/dxxnedtLzsKyBLK7/Oe4TAoGpRVC9nDpDrZSWw=
+github.com/wundergraph/astjson v1.1.0/go.mod h1:h12D/dxxnedtLzsKyBLK7/Oe4TAoGpRVC9nDpDrZSWw=
-github.com/wundergraph/go-arena v1.1.0 h1:9+wSRkJAkA2vbYHp6s8tEGhPViRGQNGXqPHT0QzhdIc=
+github.com/wundergraph/go-arena v1.3.0 h1:n0ng5a1vbd8YGq1u3rMr0vPU5f6AZ1BXIiUhL1UIok8=
-github.com/wundergraph/go-arena v1.1.0/go.mod h1:ROOysEHWJjLQ8FSfNxZCziagb7Qw2nXY3/vgKRh7eWw=
+github.com/wundergraph/go-arena v1.3.0/go.mod h1:ROOysEHWJjLQ8FSfNxZCziagb7Qw2nXY3/vgKRh7eWw=
-github.com/wundergraph/graphql-go-tools/v2 v2.0.0-rc.248 h1:+6Byi9AMVT2eP6hJhNH6unRXjTtkzVs3fc/2XExbJpY=
+github.com/wundergraph/graphql-go-tools/v2 v2.17.0 h1:vZWNA5ifJBXbnCig6iwkHPLmzqCWgMefaEhBfg7TGyA=
-github.com/wundergraph/graphql-go-tools/v2 v2.0.0-rc.248/go.mod h1:MFbY0QI8ncF60DHs7yyyiyyhWyld0WE1JokiyTVY8j4=
+github.com/wundergraph/graphql-go-tools/v2 v2.17.0/go.mod h1:Q0DH6cCkFM/LAUT2ETlo6AMIZhUklZczF2I6uWK9HSA=
 gitlab.com/unboundsoftware/eventsourced/amqp v1.9.1 h1:X6269JoAzHIKCVmtgMHZH3m7xOpACSp37ca3eODe9iU=
 gitlab.com/unboundsoftware/eventsourced/amqp v1.9.1/go.mod h1:EAs0d6Eh0aDiQkUJlSWErHqgHFQdxx0e8I7aG/2FarY=
-gitlab.com/unboundsoftware/eventsourced/eventsourced v1.19.4 h1:+yZkhi9/sTyBEN5vJTfvycyXgGrm07QKGSh3jiWiQdM=
+gitlab.com/unboundsoftware/eventsourced/eventsourced v1.23.0 h1:qcteJH9D7kHaOgLQ0fzlW9dv42hSa0Vluqt7p4kooWA=
-gitlab.com/unboundsoftware/eventsourced/eventsourced v1.19.4/go.mod h1:LrA7I7etRmhIC1PjO8c26BHm+gWsy2rC3eSMe5+XUWE=
+gitlab.com/unboundsoftware/eventsourced/eventsourced v1.23.0/go.mod h1:LrA7I7etRmhIC1PjO8c26BHm+gWsy2rC3eSMe5+XUWE=
-gitlab.com/unboundsoftware/eventsourced/pg v1.18.2 h1:epP06WGBtbHlG8Zx6Ro4IcRk/zTiHQu09+PzxdzHTEs=
+gitlab.com/unboundsoftware/eventsourced/pg/v2 v2.0.2 h1:6pWgKGnxBq7bVFbeo6wPWBNW5OXU7acgexywC3N9dCM=
-gitlab.com/unboundsoftware/eventsourced/pg v1.18.2/go.mod h1:hm53OQtDa0reVzihzt8lfPiWgJ0R533Sj/8m7qN80ls=
+gitlab.com/unboundsoftware/eventsourced/pg/v2 v2.0.2/go.mod h1:S0oBU9kHxuAn5G/3DxvlMbf5BSfPPjhiXuwU+yVrTBg=
 go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64=
 go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=
-go.opentelemetry.io/contrib/bridges/otelslog v0.15.0 h1:yOYhGNPZseueTTvWp5iBD3/CthrmvayUXYEX862dDi4=
+go.opentelemetry.io/contrib/bridges/otelslog v0.20.1 h1:5sHc4ToTFjfSZCtGAAM6jPunICAmJX73htv372T4ipc=
-go.opentelemetry.io/contrib/bridges/otelslog v0.15.0/go.mod h1:CvaNVqIfcybc+7xqZNubbE+26K6P7AKZF/l0lE2kdCk=
+go.opentelemetry.io/contrib/bridges/otelslog v0.20.1/go.mod h1:oa6kgvyz/3GYW04dohd0++xJIH4xdQY8PAbpeCMaM8M=
-go.opentelemetry.io/otel v1.40.0 h1:oA5YeOcpRTXq6NN7frwmwFR0Cn3RhTVZvXsP4duvCms=
+go.opentelemetry.io/otel v1.46.0 h1:FHt5/CDyVxi/8IM1CH7VE/rRgq3kLHa2mSTVMO8AWyc=
-go.opentelemetry.io/otel v1.40.0/go.mod h1:IMb+uXZUKkMXdPddhwAHm6UfOwJyh4ct1ybIlV14J0g=
+go.opentelemetry.io/otel v1.46.0/go.mod h1:Gj3SEScelsNC45tp4nSxRYlS+f5iez7W8XPMCt905kE=
-go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.40.0 h1:9y5sHvAxWzft1WQ4BwqcvA+IFVUJ1Ya75mSAUnFEVwE=
+go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.46.0 h1:AP23h/mFgb/lc7tdck1Kfn9qxsM8TAeNPCU5C3pzaps=
-go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.40.0/go.mod h1:eQqT90eR3X5Dbs1g9YSM30RavwLF725Ris5/XSXWvqE=
+go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.46.0/go.mod h1:K4EqCe1b4kGk5WR690ntg9LaBfsPoV32FwthbyoptuA=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0 h1:QKdN8ly8zEMrByybbQgv8cWBcdAarwmIPZ6FThrWXJs=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0 h1:OFnwLJr+pF3iHrlGSzbxyuo6/6HyBlnlN1CWEJmBVcw=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0/go.mod h1:bTdK1nhqF76qiPoCCdyFIV+N/sRHYXYCTQc+3VCi3MI=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0/go.mod h1:716wFneO0ov19A2beH5hjfh9AK5z/VWNAtDijp1Y0/g=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.40.0 h1:wVZXIWjQSeSmMoxF74LzAnpVQOAFDo3pPji9Y4SOFKc=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.46.0 h1:KrC1YrQeSt46ITMWAbgQx1M1eV1/1TKzttrBzymPmss=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.40.0/go.mod h1:khvBS2IggMFNwZK/6lEeHg/W57h/IX6J4URh57fuI40=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.46.0/go.mod h1:zDSEzoEqsOrgBeGvH66KRgxh90VonFyJqBHA0Pk3+rM=
-go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.16.0 h1:ivlbaajBWJqhcCPniDqDJmRwj4lc6sRT+dCAVKNmxlQ=
+go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.22.0 h1:kvMAiLEudKmk+CSG+iYbU8vTUGNNDaf/V09OO5lrTwI=
-go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.16.0/go.mod h1:u/G56dEKDDwXNCVLsbSrllB2o8pbtFLUC4HpR66r2dc=
+go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.22.0/go.mod h1:L9Dlksri+MdT1cb2gIiA1cJJYW3Y92ipvDjNxYEyaDI=
-go.opentelemetry.io/otel/log v0.16.0 h1:DeuBPqCi6pQwtCK0pO4fvMB5eBq6sNxEnuTs88pjsN4=
+go.opentelemetry.io/otel/log v0.22.0 h1:5DBNnfvaJ6CVdkJ+Jle8Tzs50aSSv49TXGj9XRsEYw0=
-go.opentelemetry.io/otel/log v0.16.0/go.mod h1:rWsmqNVTLIA8UnwYVOItjyEZDbKIkMxdQunsIhpUMes=
+go.opentelemetry.io/otel/log v0.22.0/go.mod h1:gzOt/R67vF2GniAqWu8Qv0SXy89f71muHcrkz76PCdc=
-go.opentelemetry.io/otel/metric v1.40.0 h1:rcZe317KPftE2rstWIBitCdVp89A2HqjkxR3c11+p9g=
+go.opentelemetry.io/otel/metric v1.46.0 h1:yBnkXvgV7AXFILZc5K6IZe/CBFF3OS7BJ8ov6/lj0K8=
-go.opentelemetry.io/otel/metric v1.40.0/go.mod h1:ib/crwQH7N3r5kfiBZQbwrTge743UDc7DTFVZrrXnqc=
+go.opentelemetry.io/otel/metric v1.46.0/go.mod h1:iPmdWqifKUdzziPkvvzIJXITl56fQx2mGM/DHLB3/2o=
-go.opentelemetry.io/otel/sdk v1.40.0 h1:KHW/jUzgo6wsPh9At46+h4upjtccTmuZCFAc9OJ71f8=
+go.opentelemetry.io/otel/metric/x v0.68.0 h1:TA/cBT23D3MnxYPwHL7YFOdYGdx0A0v+s7Mzotpd1dU=
-go.opentelemetry.io/otel/sdk v1.40.0/go.mod h1:Ph7EFdYvxq72Y8Li9q8KebuYUr2KoeyHx0DRMKrYBUE=
+go.opentelemetry.io/otel/metric/x v0.68.0/go.mod h1:agudOmvWhwUTjgibWDzxD2PoWYnpw5Ht5jISYOD2Hd4=
-go.opentelemetry.io/otel/sdk/log v0.16.0 h1:e/b4bdlQwC5fnGtG3dlXUrNOnP7c8YLVSpSfEBIkTnI=
+go.opentelemetry.io/otel/sdk v1.46.0 h1:h5CNQQjEbuQXY/JfZtgt3i7HVFV3aHPO2OAwO2eTYPI=
-go.opentelemetry.io/otel/sdk/log v0.16.0/go.mod h1:JKfP3T6ycy7QEuv3Hj8oKDy7KItrEkus8XJE6EoSzw4=
+go.opentelemetry.io/otel/sdk v1.46.0/go.mod h1:GAERFXFt5SYCEB+YiKUbMBeza6UaDH7GmGOZEfh2gSM=
-go.opentelemetry.io/otel/sdk/log/logtest v0.16.0 h1:/XVkpZ41rVRTP4DfMgYv1nEtNmf65XPPyAdqV90TMy4=
+go.opentelemetry.io/otel/sdk/log v0.22.0 h1:PRL+s6P63XT4E/bheEflopPUpVxuvANqZwtt89yhoGk=
-go.opentelemetry.io/otel/sdk/log/logtest v0.16.0/go.mod h1:iOOPgQr5MY9oac/F5W86mXdeyWZGleIx3uXO98X2R6Y=
+go.opentelemetry.io/otel/sdk/log v0.22.0/go.mod h1:JNp0sBELrjCTcu5W3GzABVypeU6vDJjBS+X0JISuz+g=
-go.opentelemetry.io/otel/sdk/metric v1.40.0 h1:mtmdVqgQkeRxHgRv4qhyJduP3fYJRMX4AtAlbuWdCYw=
+go.opentelemetry.io/otel/sdk/log/logtest v0.22.0 h1:infPnfNrhCNgOUZRs3gWUg8vhoBUHihq02gwK05gzlg=
-go.opentelemetry.io/otel/sdk/metric v1.40.0/go.mod h1:4Z2bGMf0KSK3uRjlczMOeMhKU2rhUqdWNoKcYrtcBPg=
+go.opentelemetry.io/otel/sdk/log/logtest v0.22.0/go.mod h1:gkQZA3z15Bv3KU9vigBTi8dFechSozRP7v94X4VZv+s=
-go.opentelemetry.io/otel/trace v1.40.0 h1:WA4etStDttCSYuhwvEa8OP8I5EWu24lkOzp+ZYblVjw=
+go.opentelemetry.io/otel/sdk/metric v1.46.0 h1:0piZ26EG4RBfebb2jhDH6ERCYHoVWduc3kLgPCwSnSE=
-go.opentelemetry.io/otel/trace v1.40.0/go.mod h1:zeAhriXecNGP/s2SEG3+Y8X9ujcJOTqQ5RgdEJcawiA=
+go.opentelemetry.io/otel/sdk/metric v1.46.0/go.mod h1:I1PbKrdVc8Qu8HYVDNtqVIwLwjNrhsV/uFuxfwg8mO4=
-go.opentelemetry.io/proto/otlp v1.9.0 h1:l706jCMITVouPOqEnii2fIAuO3IVGBRPV5ICjceRb/A=
+go.opentelemetry.io/otel/trace v1.46.0 h1:OULy7ccdJnZtJ0UDYFOIGaCmiWzJ8Vi2G/Rsu60qs1c=
-go.opentelemetry.io/proto/otlp v1.9.0/go.mod h1:xE+Cx5E/eEHw+ISFkwPLwCZefwVjY+pqKg1qcK03+/4=
+go.opentelemetry.io/otel/trace v1.46.0/go.mod h1:J7GAXweO77XSFkB/rmAqk9D6ihszhFjLU+d9WuUxDLI=
 go.opentelemetry.io/proto/otlp v1.11.0 h1:5rrYs0Ykyj50sdU/JU0x8etU+LubXWb+gED6TbEdMIk=
 go.opentelemetry.io/proto/otlp v1.11.0/go.mod h1:SmVizdCOAm3XBtG1g1NnOdhW6jtddT72hLMhv8VwA8E=
 go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
 go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
 go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
 go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
 go.yaml.in/yaml/v3 v3.0.5 h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw=
 go.yaml.in/yaml/v3 v3.0.5/go.mod h1:HVTZu1O7/Vkt2N+BFy8Zza+lnLsABggaTM2ZpNIGuKg=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20190426145343-a29dc8fdc734/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
-golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts=
+golang.org/x/crypto v0.55.0 h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M=
-golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos=
+golang.org/x/crypto v0.55.0/go.mod h1:uq0V9dE/fzQuJtbnL+2EhWOE63vo164FY8xqEnV9xis=
-golang.org/x/exp v0.0.0-20250620022241-b7579e27df2b h1:M2rDM6z3Fhozi9O7NWsxAkg/yqS/lQJ6PmkyIV3YP+o=
+golang.org/x/mod v0.38.0 h1:MECBjubtXD7yj4HrhIUcywNaGeNVUdfVnxmPajOk4yk=
-golang.org/x/exp v0.0.0-20250620022241-b7579e27df2b/go.mod h1:3//PLf8L/X+8b4vuAfHzxeRUl04Adcb341+IGKfnqS8=
+golang.org/x/mod v0.38.0/go.mod h1:V6Xz0pq8TQ3dGqVQ1FVHuelZpAL0uNhSkk9ogYP3c40=
 golang.org/x/mod v0.32.0 h1:9F4d3PHLljb6x//jOyokMv3eX+YDeepZSEo3mFJy93c=
 golang.org/x/mod v0.32.0/go.mod h1:SgipZ/3h2Ci89DlEtEXWUk/HteuRin+HHhN+WbNhguU=
 golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.49.0 h1:eeHFmOGUTtaaPSGNmjBKpbng9MulQsJURQUAfUwY++o=
+golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=
-golang.org/x/net v0.49.0/go.mod h1:/ysNB2EvaqvesRkuLAyjI1ycPZlQHM3q01F02UY/MV8=
+golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.22.0 h1:SZjpbeLmrCk4xhRSZFNZW5gFUeCeFgjekvI/+gfScek=
-golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sync v0.22.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
 golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190222072716-a9d3bda3a223/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.41.0 h1:Ivj+2Cp/ylzLiEU89QhWblYnOE9zerudt9Ftecq2C6k=
+golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=
-golang.org/x/sys v0.41.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
-golang.org/x/text v0.34.0 h1:oL/Qq0Kdaqxa1KbNeMKwQq0reLCCaFtqu2eNuSeNHbk=
+golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8=
-golang.org/x/text v0.34.0/go.mod h1:homfLqTYRFyVYemLBFl5GgL/DWEiH5wcsQ5gSh1yziA=
+golang.org/x/text v0.41.0/go.mod h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
-golang.org/x/tools v0.41.0 h1:a9b8iMweWG+S0OBnlU36rzLp20z1Rp10w+IY2czHTQc=
+golang.org/x/tools v0.48.0 h1:3+hClM1aLL5mjMKm5ovokw9epgRXPuu2tILgismM6RE=
-golang.org/x/tools v0.41.0/go.mod h1:XSY6eDqxVNiYgezAVqqCeihT4j1U2CCsqvH3WhQpnlg=
+golang.org/x/tools v0.48.0/go.mod h1:08xX0orndb/F7jJxGDicx061tyd5pcMto75YMAXr6lk=
-gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk=
+gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=
-gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E=
+gonum.org/v1/gonum v0.17.0/go.mod h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E=
-google.golang.org/genproto/googleapis/api v0.0.0-20260128011058-8636f8732409 h1:merA0rdPeUV3YIIfHHcH4qBkiQAc1nfCKSI7lB4cV2M=
+google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688 h1:ax2KzoSRIZU/M0cIxri3pKxy99vniH1PVxWC6si/eZI=
-google.golang.org/genproto/googleapis/api v0.0.0-20260128011058-8636f8732409/go.mod h1:fl8J1IvUjCilwZzQowmw2b7HQB2eAuYBabMXzWurF+I=
+google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688/go.mod h1:1RJ9BQGyNdZwkGc1eTqkErfRZ6RJyYPHZo73BZ1vQqI=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20260128011058-8636f8732409 h1:H86B94AW+VfJWDqFeEbBPhEtHzJwJfTbgE2lZa54ZAQ=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688 h1:cYNAzI2sUwhmCcoj9TxvihSrqsxt6uIkj3rDRhSDmW4=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20260128011058-8636f8732409/go.mod h1:j9x/tPzZkyxcgEFkiKEEGxfvyumM01BEtsW8xzOahRQ=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688/go.mod h1:DjtHYE8FKJLivXcBEjGwndXfIC23G0VpXiXKqG179uA=
-google.golang.org/grpc v1.78.0 h1:K1XZG/yGDJnzMdd/uZHAkVqJE+xIDOcmdSFZkBUicNc=
+google.golang.org/grpc v1.83.1 h1:HIO0+BEtBP6soyqvqC8sNUjZ7bTs+0hFQuFF+RAy++Y=
-google.golang.org/grpc v1.78.0/go.mod h1:I47qjTo4OKbMkjA/aOOwxDIiPSBofUtQUI5EfpWvW7U=
+google.golang.org/grpc v1.83.1/go.mod h1:kDyl6SKsiHKt0uylY5gtn5cEjkrIOhQOGDgIc4JGwzQ=
-google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
+google.golang.org/protobuf v1.36.12 h1:pJOKDDOyeXErUroCihFAd5LQuwXBSpVnKGrj5o/fwxc=
-google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
+google.golang.org/protobuf v1.36.12/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
@@ -290,11 +289,11 @@ gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C
 gopkg.in/yaml.v3 v3.0.0-20200605160147-a5ece683394c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-modernc.org/libc v1.66.3 h1:cfCbjTUcdsKyyZZfEUKfoHcP3S0Wkvz3jgSzByEWVCQ=
+modernc.org/libc v1.74.3 h1:a4J+Z8aVaxPyjyxRAdJzw246PqpcFGvVPnfT/AuM5Ws=
-modernc.org/libc v1.66.3/go.mod h1:XD9zO8kt59cANKvHPXpx7yS2ELPheAey0vjIuZOhOU8=
+modernc.org/libc v1.74.3/go.mod h1:4H7h/MJ8wnjL8RAbp9v3OXgnk22X7MouHIhDbvP3gj4=
 modernc.org/mathutil v1.7.1 h1:GCZVGXdaN8gTqB1Mf/usp1Y/hSqgI2vAGGP4jZMCxOU=
 modernc.org/mathutil v1.7.1/go.mod h1:4p5IwJITfppl0G4sUEDtCr4DthTaT47/N3aT6MhfgJg=
 modernc.org/memory v1.11.0 h1:o4QC8aMQzmcwCK3t3Ux/ZHmwFPzE6hf2Y5LbkRs+hbI=
 modernc.org/memory v1.11.0/go.mod h1:/JP4VbVC+K5sU2wZi9bHoq2MAkCnrt2r98UGeSK7Mjw=
-modernc.org/sqlite v1.38.2 h1:Aclu7+tgjgcQVShZqim41Bbw9Cho0y/7WzYptXqkEek=
+modernc.org/sqlite v1.54.0 h1:JCxR4qwkJvOaqAoYcgDoO25Nc+ROg6EJ2LfBVzdrgog=
-modernc.org/sqlite v1.38.2/go.mod h1:cPTJYSlgg3Sfg046yBShXENNtPrWrDX8bsbAQBzgQ5E=
+modernc.org/sqlite v1.54.0/go.mod h1:4ntCLuNmnH8+GNqjka1wNg7KJd5/Hi5FYp8K+XQ7GZw=
@@ -1,11 +1,14 @@
 package graph
 import (
 	"context"
 	"fmt"
 	"os"
 	"os/exec"
 	"path/filepath"
 	"time"
 	"golang.org/x/sync/semaphore"
 	"gopkg.in/yaml.v3"
 	"gitea.unbound.se/unboundsoftware/schemas/graph/model"
@@ -106,7 +109,8 @@ func GenerateCosmoRouterConfigWithExecutor(subGraphs []*model.SubGraph, executor
 	// Execute wgc router compose
 	// wgc is installed globally in the Docker image
 	outputFile := filepath.Join(tmpDir, "config.json")
-	output, err := executor.Execute("wgc", "router", "compose",
+	output, err := executor.Execute(
 		"wgc", "router", "compose",
 		"--input", inputFile,
 		"--out", outputFile,
 		"--suppress-warnings",
@@ -123,3 +127,36 @@ func GenerateCosmoRouterConfigWithExecutor(subGraphs []*model.SubGraph, executor
 	return string(configJSON), nil
 }
 // CosmoGenerator wraps config generation with a concurrency limit and timeout
 // to prevent unbounded wgc process spawning under rapid schema updates.
 type CosmoGenerator struct {
 	sem      *semaphore.Weighted
 	executor CommandExecutor
 	timeout  time.Duration
 }
 // NewCosmoGenerator creates a CosmoGenerator that allows at most one concurrent
 // wgc process and applies the given timeout to each generation attempt.
 func NewCosmoGenerator(executor CommandExecutor, timeout time.Duration) *CosmoGenerator {
 	return &CosmoGenerator{
 		sem:      semaphore.NewWeighted(1),
 		executor: executor,
 		timeout:  timeout,
 	}
 }
 // Generate produces a Cosmo Router config, blocking if another generation is
 // already in progress. The provided context (plus the configured timeout)
 // controls cancellation.
 func (g *CosmoGenerator) Generate(ctx context.Context, subGraphs []*model.SubGraph) (string, error) {
 	ctx, cancel := context.WithTimeout(ctx, g.timeout)
 	defer cancel()
 	if err := g.sem.Acquire(ctx, 1); err != nil {
 		return "", fmt.Errorf("acquire cosmo generator: %w", err)
 	}
 	defer g.sem.Release(1)
 	return GenerateCosmoRouterConfigWithExecutor(subGraphs, g.executor)
 }
@@ -1,11 +1,15 @@
 package graph
 import (
 	"context"
 	"encoding/json"
 	"fmt"
 	"os"
 	"strings"
 	"sync"
 	"sync/atomic"
 	"testing"
 	"time"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
@@ -459,6 +463,114 @@ func TestGenerateCosmoRouterConfig_MockError(t *testing.T) {
 	assert.Equal(t, 1, mockExecutor.CallCount, "Should have attempted to call executor")
 }
 // SlowMockExecutor simulates a slow wgc command for concurrency testing.
 type SlowMockExecutor struct {
 	MockCommandExecutor
 	delay      time.Duration
 	mu         sync.Mutex
 	concurrent atomic.Int32
 	maxSeen    atomic.Int32
 }
 func (m *SlowMockExecutor) Execute(name string, args ...string) ([]byte, error) {
 	cur := m.concurrent.Add(1)
 	// Track the maximum concurrent executions observed.
 	for {
 		old := m.maxSeen.Load()
 		if cur <= old || m.maxSeen.CompareAndSwap(old, cur) {
 			break
 		}
 	}
 	defer m.concurrent.Add(-1)
 	time.Sleep(m.delay)
 	m.mu.Lock()
 	defer m.mu.Unlock()
 	return m.MockCommandExecutor.Execute(name, args...)
 }
 func TestCosmoGenerator_ConcurrencyLimit(t *testing.T) {
 	executor := &SlowMockExecutor{delay: 100 * time.Millisecond}
 	gen := NewCosmoGenerator(executor, 5*time.Second)
 	subGraphs := []*model.SubGraph{
 		{
 			Service: "svc",
 			URL:     stringPtr("http://localhost:4001/query"),
 			Sdl:     "type Query { hello: String }",
 		},
 	}
 	var wg sync.WaitGroup
 	for range 5 {
 		wg.Add(1)
 		go func() {
 			defer wg.Done()
 			_, _ = gen.Generate(context.Background(), subGraphs)
 		}()
 	}
 	wg.Wait()
 	assert.Equal(t, int32(1), executor.maxSeen.Load(),
 		"at most 1 wgc process should run concurrently")
 }
 func TestCosmoGenerator_Timeout(t *testing.T) {
 	// Executor that takes longer than the timeout.
 	executor := &SlowMockExecutor{delay: 500 * time.Millisecond}
 	gen := NewCosmoGenerator(executor, 50*time.Millisecond)
 	subGraphs := []*model.SubGraph{
 		{
 			Service: "svc",
 			URL:     stringPtr("http://localhost:4001/query"),
 			Sdl:     "type Query { hello: String }",
 		},
 	}
 	// First call: occupies the semaphore for 500ms.
 	go func() {
 		_, _ = gen.Generate(context.Background(), subGraphs)
 	}()
 	// Give the first goroutine time to acquire the semaphore.
 	time.Sleep(20 * time.Millisecond)
 	// Second call: should timeout waiting for the semaphore.
 	_, err := gen.Generate(context.Background(), subGraphs)
 	require.Error(t, err)
 	assert.Contains(t, err.Error(), "acquire cosmo generator")
 }
 func TestCosmoGenerator_ContextCancellation(t *testing.T) {
 	executor := &SlowMockExecutor{delay: 500 * time.Millisecond}
 	gen := NewCosmoGenerator(executor, 5*time.Second)
 	subGraphs := []*model.SubGraph{
 		{
 			Service: "svc",
 			URL:     stringPtr("http://localhost:4001/query"),
 			Sdl:     "type Query { hello: String }",
 		},
 	}
 	// First call: occupies the semaphore.
 	go func() {
 		_, _ = gen.Generate(context.Background(), subGraphs)
 	}()
 	time.Sleep(20 * time.Millisecond)
 	// Second call with an already-cancelled context.
 	ctx, cancel := context.WithCancel(context.Background())
 	cancel()
 	_, err := gen.Generate(ctx, subGraphs)
 	require.Error(t, err)
 	assert.Contains(t, err.Error(), "acquire cosmo generator")
 }
 // Helper function for tests
 func stringPtr(s string) *string {
 	return &s
@@ -0,0 +1,42 @@
 package graph
 import (
 	"sync"
 	"time"
 )
 // Debouncer coalesces rapid calls with the same key, executing only the last
 // one after a configurable delay. This prevents redundant work when multiple
 // updates arrive in quick succession (e.g., rapid schema publishing).
 type Debouncer struct {
 	mu     sync.Mutex
 	delay  time.Duration
 	timers map[string]*time.Timer
 }
 // NewDebouncer creates a Debouncer with the given delay window.
 func NewDebouncer(delay time.Duration) *Debouncer {
 	return &Debouncer{
 		delay:  delay,
 		timers: make(map[string]*time.Timer),
 	}
 }
 // Debounce resets the timer for key. When the timer fires (after delay with no
 // new calls for the same key), fn is executed in a new goroutine.
 func (d *Debouncer) Debounce(key string, fn func()) {
 	d.mu.Lock()
 	defer d.mu.Unlock()
 	if t, ok := d.timers[key]; ok {
 		t.Stop()
 	}
 	d.timers[key] = time.AfterFunc(d.delay, func() {
 		d.mu.Lock()
 		delete(d.timers, key)
 		d.mu.Unlock()
 		fn()
 	})
 }
@@ -0,0 +1,69 @@
 package graph
 import (
 	"sync/atomic"
 	"testing"
 	"testing/synctest"
 	"time"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 )
 func TestDebouncer_Coalesces(t *testing.T) {
 	synctest.Test(t, func(t *testing.T) {
 		d := NewDebouncer(50 * time.Millisecond)
 		var calls atomic.Int32
 		// Fire 10 rapid calls for the same key — only the last should execute.
 		for range 10 {
 			d.Debounce("key1", func() {
 				calls.Add(1)
 			})
 		}
 		// Advance fake clock past the debounce delay and let goroutines settle.
 		time.Sleep(50 * time.Millisecond)
 		synctest.Wait()
 		assert.Equal(t, int32(1), calls.Load(), "rapid calls should coalesce into a single execution")
 	})
 }
 func TestDebouncer_DifferentKeys(t *testing.T) {
 	synctest.Test(t, func(t *testing.T) {
 		d := NewDebouncer(50 * time.Millisecond)
 		var calls atomic.Int32
 		d.Debounce("key-a", func() { calls.Add(1) })
 		d.Debounce("key-b", func() { calls.Add(1) })
 		d.Debounce("key-c", func() { calls.Add(1) })
 		time.Sleep(50 * time.Millisecond)
 		synctest.Wait()
 		assert.Equal(t, int32(3), calls.Load(), "different keys should fire independently")
 	})
 }
 func TestDebouncer_TimerReset(t *testing.T) {
 	synctest.Test(t, func(t *testing.T) {
 		d := NewDebouncer(100 * time.Millisecond)
 		var value atomic.Int32
 		// First call sets value to 1.
 		d.Debounce("key", func() { value.Store(1) })
 		// Advance 60ms (less than the 100ms delay) — first timer hasn't fired.
 		time.Sleep(60 * time.Millisecond)
 		// Replace with value 2 — resets the timer to fire at 60+100 = 160ms.
 		d.Debounce("key", func() { value.Store(2) })
 		// Advance another 100ms (total 160ms) to fire the reset timer.
 		time.Sleep(100 * time.Millisecond)
 		synctest.Wait()
 		require.Equal(t, int32(2), value.Load(), "later call should replace the earlier one")
 	})
 }
@@ -8,7 +8,9 @@ import (
 	"gitlab.com/unboundsoftware/eventsourced/eventsourced"
 	"gitea.unbound.se/unboundsoftware/schemas/cache"
 	"gitea.unbound.se/unboundsoftware/schemas/graph/model"
 	"gitea.unbound.se/unboundsoftware/schemas/middleware"
 	"gitea.unbound.se/unboundsoftware/schemas/sdlmerge"
 )
 //go:generate go run github.com/99designs/gqlgen
@@ -24,11 +26,13 @@ type Publisher interface {
 }
 type Resolver struct {
-	EventStore eventsourced.EventStore
+	EventStore     eventsourced.EventStore
-	Publisher  Publisher
+	Publisher      Publisher
-	Logger     *slog.Logger
+	Logger         *slog.Logger
-	Cache      *cache.Cache
+	Cache          *cache.Cache
-	PubSub     *PubSub
+	PubSub         *PubSub
 	CosmoGenerator *CosmoGenerator
 	Debouncer      *Debouncer
 }
 func (r *Resolver) apiKeyCanAccessRef(ctx context.Context, ref string, publish bool) (string, error) {
@@ -58,3 +62,60 @@ func (r *Resolver) handler(ctx context.Context, aggregate eventsourced.Aggregate
 func apiKeyId(orgId, name string) string {
 	return fmt.Sprintf("%s-%s", orgId, name)
 }
 // WarmCache precomputes the merged SDL and SchemaUpdate (cosmo router
 // config) for every (orgId, ref) tracked in the cache. Intended to run
 // once at startup, after the event-sourced caches have been populated
 // but before the pod accepts traffic, so the first request per ref does
 // not pay the cold-start cost of running sdlmerge + wgc compose.
 //
 // Errors per ref are logged and skipped rather than aborting the whole
 // warmup: a single bad ref must not block the pod from serving the
 // remaining refs.
 func (r *Resolver) WarmCache(ctx context.Context) {
 	refs := r.Cache.AllOrgRefs()
 	r.Logger.Info("Warming schema cache on startup", "refCount", len(refs))
 	for _, or := range refs {
 		services, lastUpdate := r.Cache.Services(or.OrgId, or.Ref, "")
 		if len(services) == 0 {
 			continue
 		}
 		subGraphs := make([]*model.SubGraph, len(services))
 		serviceSDLs := make([]string, len(services))
 		for i, id := range services {
 			sg, err := r.fetchSubGraph(ctx, id)
 			if err != nil {
 				r.Logger.Error("warmup: fetch subgraph", "error", err, "orgId", or.OrgId, "ref", or.Ref, "id", id)
 				subGraphs = nil
 				break
 			}
 			subGraphs[i] = r.toGqlSubGraph(sg)
 			serviceSDLs[i] = sg.Sdl
 		}
 		if subGraphs == nil {
 			continue
 		}
 		if sdl, err := sdlmerge.MergeSDLs(serviceSDLs...); err != nil {
 			r.Logger.Error("warmup: merge SDLs", "error", err, "orgId", or.OrgId, "ref", or.Ref)
 		} else {
 			r.Cache.SetMergedSDL(or.OrgId, or.Ref, lastUpdate, sdl, subGraphs)
 		}
 		cosmoConfig, err := r.CosmoGenerator.Generate(ctx, subGraphs)
 		if err != nil {
 			r.Logger.Error("warmup: generate cosmo config", "error", err, "orgId", or.OrgId, "ref", or.Ref)
 			continue
 		}
 		r.Cache.SetSchemaUpdate(or.OrgId, or.Ref, &model.SchemaUpdate{
 			Ref:               or.Ref,
 			ID:                lastUpdate,
 			SubGraphs:         subGraphs,
 			CosmoRouterConfig: &cosmoConfig,
 		})
 	}
 	r.Logger.Info("Schema cache warmup complete", "refCount", len(refs))
 }
@@ -174,10 +174,12 @@ func (r *mutationResolver) UpdateSubGraph(ctx context.Context, input model.Input
 		return nil, err
 	}
-	// Publish schema update to subscribers
+	// Debounce schema update publishing so rapid successive updates for the
-	go func() {
+	// same org+ref only trigger one config generation.
 	r.Debouncer.Debounce(orgId+":"+input.Ref, func() {
 		services, lastUpdate := r.Cache.Services(orgId, input.Ref, "")
-		r.Logger.Info("Publishing schema update after subgraph change",
+		r.Logger.Info(
 			"Publishing schema update after subgraph change",
 			"ref", input.Ref,
 			"orgId", orgId,
 			"lastUpdate", lastUpdate,
@@ -191,19 +193,11 @@ func (r *mutationResolver) UpdateSubGraph(ctx context.Context, input model.Input
 				r.Logger.Error("fetch subgraph for update notification", "error", err)
 				continue
 			}
-			subGraphs[i] = &model.SubGraph{
+			subGraphs[i] = r.toGqlSubGraph(sg)
 				ID:        sg.ID.String(),
 				Service:   sg.Service,
 				URL:       sg.Url,
 				WsURL:     sg.WSUrl,
 				Sdl:       sg.Sdl,
 				ChangedBy: sg.ChangedBy,
 				ChangedAt: sg.ChangedAt,
 			}
 		}
-		// Generate Cosmo router config
+		// Generate Cosmo router config (concurrency-limited)
-		cosmoConfig, err := GenerateCosmoRouterConfig(subGraphs)
+		cosmoConfig, err := r.CosmoGenerator.Generate(context.Background(), subGraphs)
 		if err != nil {
 			r.Logger.Error("generate cosmo config for update", "error", err)
 			cosmoConfig = "" // Send empty if generation fails
@@ -216,8 +210,10 @@ func (r *mutationResolver) UpdateSubGraph(ctx context.Context, input model.Input
 			SubGraphs:         subGraphs,
 			CosmoRouterConfig: &cosmoConfig,
 		}
 		r.Cache.SetSchemaUpdate(orgId, input.Ref, update)
-		r.Logger.Info("Publishing schema update to subscribers",
+		r.Logger.Info(
 			"Publishing schema update to subscribers",
 			"ref", update.Ref,
 			"id", update.ID,
 			"subGraphsCount", len(update.SubGraphs),
@@ -225,7 +221,7 @@ func (r *mutationResolver) UpdateSubGraph(ctx context.Context, input model.Input
 		)
 		r.PubSub.Publish(input.Ref, update)
-	}()
+	})
 	return r.toGqlSubGraph(subGraph), nil
 }
@@ -253,7 +249,8 @@ func (r *queryResolver) Supergraph(ctx context.Context, ref string, isAfter *str
 	orgId := middleware.OrganizationFromContext(ctx)
 	userId := middleware.UserFromContext(ctx)
-	r.Logger.Info("Supergraph query",
+	r.Logger.Info(
 		"Supergraph query",
 		"ref", ref,
 		"orgId", orgId,
 		"userId", userId,
@@ -284,42 +281,41 @@ func (r *queryResolver) Supergraph(ctx context.Context, ref string, isAfter *str
 	if isAfter != nil {
 		after = *isAfter
 	}
-	services, lastUpdate := r.Cache.Services(orgId, ref, after)
+	_, lastUpdate := r.Cache.Services(orgId, ref, after)
 	if after == lastUpdate {
 		return &model.Unchanged{
 			ID:              lastUpdate,
 			MinDelaySeconds: 10,
 		}, nil
 	}
 	if cached := r.Cache.GetMergedSDL(orgId, ref); cached != nil {
 		id, sdl, subGraphs := cached.Unpack()
 		return &model.SubGraphs{
 			ID:              id,
 			SubGraphs:       subGraphs,
 			Sdl:             sdl,
 			MinDelaySeconds: 10,
 		}, nil
 	}
 	services, _ := r.Cache.Services(orgId, ref, "")
 	subGraphs := make([]*model.SubGraph, len(services))
 	serviceSDLs := make([]string, len(services))
 	for i, id := range services {
 		sg, err := r.fetchSubGraph(ctx, id)
 		if err != nil {
 			return nil, err
 		}
-		subGraphs[i] = &model.SubGraph{
+		subGraphs[i] = r.toGqlSubGraph(sg)
-			ID:        sg.ID.String(),
+		serviceSDLs[i] = sg.Sdl
 			Service:   sg.Service,
 			URL:       sg.Url,
 			WsURL:     sg.WSUrl,
 			Sdl:       sg.Sdl,
 			ChangedBy: sg.ChangedBy,
 			ChangedAt: sg.ChangedAt,
 		}
 	}
 	var serviceSDLs []string
 	for _, id := range services {
 		sg, err := r.fetchSubGraph(ctx, id)
 		if err != nil {
 			return nil, err
 		}
 		serviceSDLs = append(serviceSDLs, sg.Sdl)
 	}
 	sdl, err := sdlmerge.MergeSDLs(serviceSDLs...)
 	if err != nil {
 		return nil, err
 	}
 	r.Cache.SetMergedSDL(orgId, ref, lastUpdate, sdl, subGraphs)
 	return &model.SubGraphs{
 		ID:              lastUpdate,
 		SubGraphs:       subGraphs,
@@ -333,7 +329,8 @@ func (r *queryResolver) LatestSchema(ctx context.Context, ref string) (*model.Sc
 	orgId := middleware.OrganizationFromContext(ctx)
 	userId := middleware.UserFromContext(ctx)
-	r.Logger.Info("LatestSchema query",
+	r.Logger.Info(
 		"LatestSchema query",
 		"ref", ref,
 		"orgId", orgId,
 		"userId", userId,
@@ -361,9 +358,20 @@ func (r *queryResolver) LatestSchema(ctx context.Context, ref string) (*model.Sc
 		return nil, fmt.Errorf("no authentication provided")
 	}
 	if cached := r.Cache.GetSchemaUpdate(orgId, ref); cached != nil {
 		r.Logger.Info(
 			"Latest schema served from cache",
 			"ref", ref,
 			"orgId", orgId,
 			"id", cached.ID,
 		)
 		return cached, nil
 	}
 	// Get current services and schema
 	services, lastUpdate := r.Cache.Services(orgId, ref, "")
-	r.Logger.Info("Fetching latest schema",
+	r.Logger.Info(
 		"Fetching latest schema",
 		"ref", ref,
 		"orgId", orgId,
 		"lastUpdate", lastUpdate,
@@ -388,8 +396,8 @@ func (r *queryResolver) LatestSchema(ctx context.Context, ref string) (*model.Sc
 		}
 	}
-	// Generate Cosmo router config
+	// Generate Cosmo router config (concurrency-limited)
-	cosmoConfig, err := GenerateCosmoRouterConfig(subGraphs)
+	cosmoConfig, err := r.CosmoGenerator.Generate(ctx, subGraphs)
 	if err != nil {
 		r.Logger.Error("generate cosmo config", "error", err)
 		cosmoConfig = "" // Return empty if generation fails
@@ -401,8 +409,10 @@ func (r *queryResolver) LatestSchema(ctx context.Context, ref string) (*model.Sc
 		SubGraphs:         subGraphs,
 		CosmoRouterConfig: &cosmoConfig,
 	}
 	r.Cache.SetSchemaUpdate(orgId, ref, update)
-	r.Logger.Info("Latest schema fetched",
+	r.Logger.Info(
 		"Latest schema fetched",
 		"ref", update.Ref,
 		"id", update.ID,
 		"subGraphsCount", len(update.SubGraphs),
@@ -416,7 +426,8 @@ func (r *queryResolver) LatestSchema(ctx context.Context, ref string) (*model.Sc
 func (r *subscriptionResolver) SchemaUpdates(ctx context.Context, ref string) (<-chan *model.SchemaUpdate, error) {
 	orgId := middleware.OrganizationFromContext(ctx)
-	r.Logger.Info("SchemaUpdates subscription started",
+	r.Logger.Info(
 		"SchemaUpdates subscription started",
 		"ref", ref,
 		"orgId", orgId,
 	)
@@ -432,11 +443,9 @@ func (r *subscriptionResolver) SchemaUpdates(ctx context.Context, ref string) (<
 	// Send initial state immediately
 	go func() {
 		// Use background context for async operation
 		bgCtx := context.Background()
 		services, lastUpdate := r.Cache.Services(orgId, ref, "")
-		r.Logger.Info("Preparing initial schema update",
+		r.Logger.Info(
 			"Preparing initial schema update",
 			"ref", ref,
 			"orgId", orgId,
 			"lastUpdate", lastUpdate,
@@ -445,24 +454,16 @@ func (r *subscriptionResolver) SchemaUpdates(ctx context.Context, ref string) (<
 		subGraphs := make([]*model.SubGraph, len(services))
 		for i, id := range services {
-			sg, err := r.fetchSubGraph(bgCtx, id)
+			sg, err := r.fetchSubGraph(ctx, id)
 			if err != nil {
 				r.Logger.Error("fetch subgraph for initial update", "error", err, "id", id)
 				continue
 			}
-			subGraphs[i] = &model.SubGraph{
+			subGraphs[i] = r.toGqlSubGraph(sg)
 				ID:        sg.ID.String(),
 				Service:   sg.Service,
 				URL:       sg.Url,
 				WsURL:     sg.WSUrl,
 				Sdl:       sg.Sdl,
 				ChangedBy: sg.ChangedBy,
 				ChangedAt: sg.ChangedAt,
 			}
 		}
-		// Generate Cosmo router config
+		// Generate Cosmo router config (concurrency-limited)
-		cosmoConfig, err := GenerateCosmoRouterConfig(subGraphs)
+		cosmoConfig, err := r.CosmoGenerator.Generate(ctx, subGraphs)
 		if err != nil {
 			r.Logger.Error("generate cosmo config", "error", err)
 			cosmoConfig = "" // Send empty if generation fails
@@ -476,14 +477,19 @@ func (r *subscriptionResolver) SchemaUpdates(ctx context.Context, ref string) (<
 			CosmoRouterConfig: &cosmoConfig,
 		}
-		r.Logger.Info("Sending initial schema update",
+		r.Logger.Info(
 			"Sending initial schema update",
 			"ref", update.Ref,
 			"id", update.ID,
 			"subGraphsCount", len(update.SubGraphs),
 			"cosmoConfigLength", len(cosmoConfig),
 		)
-		ch <- update
+		select {
 		case ch <- update:
 		case <-ctx.Done():
 			return
 		}
 	}()
 	// Clean up subscription when context is done
@@ -18,3 +18,23 @@ spec:
      target:
        type: Utilization
        averageUtilization: 60
  behavior:
    scaleUp:
      # Wait 2min of sustained high CPU before scaling up. Schemas is
      # event-driven and the per-request work is bursty even with the
      # cache + warmup, so single spikes shouldn't pull replicas up.
      stabilizationWindowSeconds: 120
      policies:
      - type: Pods
        value: 1
        periodSeconds: 60
    scaleDown:
      # Default 300s window kept pods pinned at maxReplicas long after
      # the triggering spike had subsided. 120s is long enough to avoid
      # flapping but lets the deployment return to minReplicas quickly
      # once the workload calms.
      stabilizationWindowSeconds: 120
      policies:
      - type: Pods
        value: 1
        periodSeconds: 60
@@ -42,8 +42,10 @@ spec:
      - name: schemas
        resources:
          requests:
-            cpu: "20m"
+            cpu: "100m"
-            memory: "20Mi"
+            memory: "128Mi"
          limits:
            memory: "768Mi"
        livenessProbe:
          httpGet:
            path: /health/live
@@ -67,7 +69,7 @@ spec:
          containerPort: 8080
        env:
        - name: OTEL_EXPORTER_OTLP_ENDPOINT
-          value: http://k8s-monitoring-alloy-receiver.monitoring.svc.cluster.local:4318
+          value: http://k8s-monitoring-alloy.monitoring.svc.cluster.local:4318
        envFrom:
        - configMapRef:
            name: schemas
@@ -9,7 +9,8 @@ const charset = "abcdefghijklmnopqrstuvwxyz" +
 	"ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789"
 var seededRand *rand.Rand = rand.New(
-	rand.NewSource(time.Now().UnixNano()))
+	rand.NewSource(time.Now().UnixNano()),
 )
 func StringWithCharset(length int, charset string) string {
 	b := make([]byte, length)