chore(deps): bump github.com/google/cel-go from 0.27.0 to 0.28.0

[dependabot]

Bumps github.com/google/cel-go from 0.27.0 to 0.28.0.

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.28.0

High-Level Changes

• Enhanced JSON Interoperability: New support for JSON names across the checker, AST, and runtime allows for more seamless data handling when working with JSON-native structures.
• Improved Developer Tooling: Integration is now smoother thanks to new utilities for converting Go errors into cel.Issues and more descriptive, context-aware error messages.
• Greater Environment Flexibility: You can now redeclare variables as constants and export parse limit options, providing finer control over how CEL environments are configured and constrained.
• Native Struct Improvements: Support for mixing CEL and native values within native structs simplifies the handling of complex, hybrid data types.

---

🚀 Features

• Add helper method to check whether a function has a singleton binding in google/cel-go#1266
• Helper utility for converting a Go error into cel.Issues in google/cel-go#1267
• Policy API improvements in google/cel-go#1268
• CEL Test usability requirements in google/cel-go#1269
• Better context-related error messages in google/cel-go#1271
• Sort env.Config values where reasonable in google/cel-go#1273
• Support redeclaring variables as constants in NewEnv in google/cel-go#1275
• Add support for exporting parse limit options in google/cel-go#1277
• Support mixing CEL values and native values in native structs in google/cel-go#1270
• Add checker, AST, and type-provider support for JSON names in google/cel-go#1283
• JSON field names runtime support in google/cel-go#1286
• Optionally include reachable fieldpaths in prompt in google/cel-go#1285
• REPL -- cel-spec pb2 and json name support google/cel-go#1294

🐞 Bug Fixes

• Fix support for config-based type references in google/cel-go#1265
• Check arg kinds in optional.or and .orValue impl in google/cel-go#1276
• Bazel fixes for import in google/cel-go#1278
• Support zero-value literals in presence test inlining google/cel-go#1280
• Cache concatList.Size() to prevent O(N^2) evaluation time google/cel-go#1291
• Preserve runtime error node IDs from Resolve google/cel-go#1290
• Default enable identifier escaping with backticks google/cel-go#1295
• Cap format string precision to prevent memory exhaustion google/cel-go#1292

🛠️ Maintenance & Internal

• chore: Migrate gsutil usage to gcloud storage in google/cel-go#1274
• Lint fixes for exported function/type comments in google/cel-go#1279
• Lint fixes for import in google/cel-go#1287

---

Full Changelog: https://github.com/google/cel-go/compare/v0.27.0...v0.28.0-alpha

Release v0.28.0-alpha

High-Level Changes

... (truncated)

Commits

• 6b8f6d6 fix: cap format string precision to prevent memory exhaustion (#1292)
• d942970 Default enable identifier escaping with backticks (#1295)
• 7114ed2 Preserve runtime error node IDs from Resolve (#1290)
• d91350b fix: cache concatList.Size() to prevent O(N^2) evaluation time (#1291)
• 68bdd8c REPL -- cel-spec pb2 and json name support (#1294)
• d19e782 Support zero-value literals in presence test inlining and fix shadowing bugs ...
• 7c461fc Lint fixes for import (#1287)
• 09e3119 Optionally include reachable fieldpaths in prompt (#1285)
• ae49cd0 Json field names runtime support (#1286)
• 3624b64 Add checker, ast, and type-provider support for JSON names (#1283)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: lang: go. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[lerian-studio]

📊 Unit Test Coverage Report: tracer

Metric	Value
Overall Coverage	82.7% ⚠️ BELOW THRESHOLD
Threshold	85%

Coverage by Package

Package	Coverage
tracer/internal/adapters/cel	81.9%
tracer/internal/adapters/http/in/middleware	55.1%
tracer/internal/adapters/http/in	81.6%
tracer/internal/adapters/postgres/db	50.0%
tracer/internal/adapters/postgres	76.2%
tracer/internal/services/cache	95.6%
tracer/internal/services/command	78.9%
tracer/internal/services/query	79.8%
tracer/internal/services/workers	80.1%
tracer/internal/services	47.4%
tracer/internal/testhelper	0.0%
tracer/pkg/clock	50.0%
tracer/pkg/contextutil	100.0%
tracer/pkg/hash	100.0%
tracer/pkg/logging	100.0%
tracer/pkg/migration	89.0%
tracer/pkg/model	95.0%
tracer/pkg/net/http	88.3%
tracer/pkg/resilience	97.8%
tracer/pkg/sanitize	87.1%
tracer/pkg/validation	50.0%
tracer/pkg	96.6%

---

Generated by Go PR Analysis workflow

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.