Follow-up to !523. Aligns with the fairway proto change that drops the
CLOUDSQL_IAM enum value and treats absence of secret_ref as an
unauthenticated connection.

- newPSQLFormat now dispatches on secret_ref presence, not format.
- Renames cloudSQLIAMFormat to noSecretFormat to reflect the generic
  semantics (any passwordless topology — auth proxy, mTLS, no auth).
- projectionFormat.projection() reads format from
  PostgreSQL.SecretRef.Format (the field's home post-fairway refactor).
- Test cases renamed from cloudsql_iam_* to no_secret_*; Format moved
  from PostgreSQL to PostgreSQLSecret in the remaining cases.

Bumps fairway dep.

chore(CODEOWNERS): Remove deactivated account

See merge request !525

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Luke Hollinda <lhollinda@gitlab.com>
Reviewed-by: Matias Alvarez <malvarez@gitlab.com>

When LabKit is opened from the repo root (may depend on editor), gopls
attaches to the root module's go.mod and does not index v2/'s
dependencies.

This commit adds CONTRIBUTING.md guidance on setting up a go.work file
to avoid this issue.

Adds go.work and go.work.sum to .gitignore as per standard practice

refactor(v2/postgres): dispatch on secret_ref presence, not format

See merge request !526

Merged-by: Luke Hollinda <lhollinda@gitlab.com>
Approved-by: Luke Hollinda <lhollinda@gitlab.com>
Co-authored-by: s.abbasi <sabbasi@gitlab.com>

chore(deps): update dependency shfmt to v3.13

See merge request !534

Merged-by: Bob Van Landuyt <bob@gitlab.com>
Approved-by: Bob Van Landuyt <bob@gitlab.com>
Co-authored-by: GitLab Renovate Bot <ops-contact+gl-common-ci-tasks-self-renovate@gitlab.com>

chore(deps): update dependency pre-commit to v4.6.0

See merge request !532

Merged-by: Bob Van Landuyt <bob@gitlab.com>
Approved-by: Bob Van Landuyt <bob@gitlab.com>
Co-authored-by: GitLab Renovate Bot <ops-contact+gl-common-ci-tasks-self-renovate@gitlab.com>

fix(deps): update module github.com/getsentry/sentry-go to v0.46.2

See merge request !536

Merged-by: João Pereira <jpereira@gitlab.com>
Approved-by: João Pereira <jpereira@gitlab.com>
Co-authored-by: GitLab Renovate Bot <ops-contact+gl-common-ci-tasks-self-renovate@gitlab.com>

chore(deps): update dependency bufbuild/buf to v1.70.0

See merge request !530

Merged-by: João Pereira <jpereira@gitlab.com>
Approved-by: João Pereira <jpereira@gitlab.com>
Co-authored-by: GitLab Renovate Bot <ops-contact+gl-common-ci-tasks-self-renovate@gitlab.com>

chore(deps): update golangci-lint-minor to v2.12

See merge request !535

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Matias Alvarez <malvarez@gitlab.com>
Co-authored-by: GitLab Renovate Bot <ops-contact+gl-common-ci-tasks-self-renovate@gitlab.com>

docs: document go workspace setup for editor / LSP

See merge request !527

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Matias Alvarez <malvarez@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: Luke Hollinda <lhollinda@gitlab.com>

Duo Developer authored Jun 10, 2026 and Roger Makram committed Jun 15, 2026

When SecretRef is nil, GetFormat() returns REDIS_FORMAT_UNSPECIFIED which
maps to the VALKEY preset and requires redis/default-password. Add two
test cases to make this behaviour explicit: one where the secret is
present (succeeds) and one where it is absent (returns ErrNotFound).

feat(redis): wire secret projection through Redis client

See merge request !517

Merged-by: Luke Hollinda <lhollinda@gitlab.com>
Approved-by: Luke Hollinda <lhollinda@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: Roger Makram <rmakram@gitlab.com>
Co-authored-by: Duo Developer <service_account_group_9970_1976e9ecde3c53c783b64edb9ae993eb@noreply.gitlab.com>