fix(deps): update module github.com/fluxcd/pkg/ssa to v0.78.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/fluxcd/pkg/ssa	v0.67.6 → v0.78.0

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: scripts/retire-backstage-stateless/poller-native/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 28 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package	Change
github.com/fluxcd/cli-utils	v1.2.1 -> v1.3.0
github.com/fsnotify/fsnotify	v1.9.0 -> v1.10.1
github.com/fxamacker/cbor/v2	v2.9.1 -> v2.9.3
github.com/go-logr/logr	v1.4.3 -> v1.4.4
github.com/go-openapi/jsonreference	v1.0.0 -> v1.0.1
github.com/go-openapi/swag	v0.27.1 -> v0.29.1
github.com/go-openapi/swag/cmdutils	v0.27.1 -> v0.29.1
github.com/go-openapi/swag/conv	v0.27.1 -> v0.29.1
github.com/go-openapi/swag/fileutils	v0.27.1 -> v0.29.1
github.com/go-openapi/swag/jsonutils	v0.27.1 -> v0.29.1
github.com/go-openapi/swag/loading	v0.27.1 -> v0.29.1
github.com/go-openapi/swag/mangling	v0.27.1 -> v0.29.1
github.com/go-openapi/swag/netutils	v0.27.1 -> v0.29.1
github.com/go-openapi/swag/pools	v0.27.1 -> v0.29.1
github.com/go-openapi/swag/stringutils	v0.27.1 -> v0.29.1
github.com/go-openapi/swag/typeutils	v0.27.1 -> v0.29.1
github.com/go-openapi/swag/yamlutils	v0.27.1 -> v0.29.1
github.com/onsi/gomega	v1.40.0 -> v1.43.0
github.com/prometheus/client_golang	v1.24.0 -> v1.24.1
github.com/prometheus/client_model	v0.6.2 -> v0.6.3
github.com/prometheus/common	v0.70.0 -> v0.71.0
github.com/prometheus/procfs	v0.21.1 -> v0.22.0
golang.org/x/crypto	v0.54.0 -> v0.55.0
golang.org/x/net	v0.57.0 -> v0.58.0
golang.org/x/text	v0.40.0 -> v0.41.0
k8s.io/kube-openapi	v0.0.0-20260721132016-d427ff9ee9ad -> v0.0.0-20260821135717-be32def86098
k8s.io/kubectl	v0.36.1 -> v0.37.0
k8s.io/utils	v0.0.0-20260626114624-be93311217bd -> v0.0.0-20260707023825-cf1189d6abe3

[devantler]

🤖 Generated by the Agentic Engineer

Closing this update because it changes only the isolated native retirement-proof fixture. That fixture must use the published controller dependency graph; this independent bump fails the existing graph admission before any controller API call.

The producer-coupled graph and automation policy are tracked by #4840 and its delivery PR #4841. Update the complete fixture when its published producer changes. This closure changes no production dependency, vulnerability reporting or execution guard.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (v0.78.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.