build(deps): pin cloud-commitments-go to c5cf5c7 (dedupe fixes)

[cristim]

Summary

Re-pins all four cloud-commitments-go modules (pkg, providers/aws, providers/azure, providers/gcp) from fe940a89483d to v0.0.0-20260928205306-c5cf5c7fbad8, which is current cloud-commitments-go main (c5cf5c7f, after LeanerCloud/cloud-commitments-go#147). All four resolve to the same pseudo-version.

Included cloud-commitments-go changes (LeanerCloud/cloud-commitments-go)

• feat(recommendations): group per-plan-type SP rows in Recommendations table #135 sec(exchange): honor ExpectedAccount on the dependency-injected path, so an RI exchange fails closed when the injected client targets a different account than expected
• chore(docs): codify known_issues/ resolved-sweep convention and apply it to the backlog #141 fix(recfilter): count queued AWS RIs as existing commitments, so recommendations no longer suggest re-buying capacity that is already queued for purchase
• ux(settings): default Registrations filter to Pending #143 fix(recfilter): count pending and unknown commitment states in dedupe, so in-flight or unrecognised commitment states are not treated as absent (no duplicate purchase suggestions)
• feat(filter): 'All Savings Plans' aggregate option in Recommendations service-filter #137, fix(api): extend federation target/source guard to azure-self-source and gcp-self-source combos #140 docs only; fix(terraform): two orphan azurerm modules contain invalid HCL — fix or delete #147 bumps the providers' internal pkg pin

Code changes

None. The diff is go.mod and go.sum only; no call site needed updating for the #135 or #143 API changes.

Verification (GOWORK=off GOTOOLCHAIN=go1.26.6)

• go build -o /dev/null ./cmd: ok
• go vet ./cmd/...: ok
• go test -race -short ./cmd/...: ok
• go mod tidy -diff: empty
• c5cf5c7fbad8 is identical to cloud-commitments-go main (GitHub compare: 0 ahead, 0 behind)

[coderabbitai]

Warning

Review limit reached

• Run on-demand review

_{This review includes 1 billable file and costs up to $0.25.}

• Ask an admin to make reviews automatic

Open in CodeRabbit

Reviews can continue after your included limit without a manual trigger. An admin must approve usage-based billing.

Or wait 12 minutes for your next included review.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available. Your 63 included PR review attempts over the past 7 days set your current allowance at 1 review per hour.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Repository: LeanerCloud/cloud-commitments-cli/.coderabbit.yaml

Review profile: CHILL

Plan: Essentials

Run ID: 8b6bc872-5755-4c2d-bd7f-2c61eb9acede

📥 Commits

Reviewing files that changed from the base of the PR and between 7951e77 and c140f3c.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

---

_{Comment @coderabbitai help to get the list of available commands.}

[cristim]

Orchestrator-verified release plumbing: go.mod/go.sum only; pkg and providers/{aws,azure,gcp} all pinned to v0.0.0-20260928205306-c5cf5c7fbad8 (go main after #147), shipping the dedupe/money fixes #128 #131 #133 #135 #141 #143. The author verified build, vet, go test -race -short and tidy -diff with GOWORK=off GOTOOLCHAIN=go1.26.6; no code changes were needed.