Update hypeman-go SDK to 134587a

Bumps github.com/kernel/hypeman-go to
v0.28.1-0.20261001160305-134587a222ac, which carries the SDK's 2026-09-30
vulnerability remediation.

This commit is on main, whereas the branch previously pinned e6c2b7b from
the SDK's next branch. The Windows hypervisor primitives generated there
are therefore absent, dropping InstanceLogsParamsSourceSwtpm and
InstanceGPU.DevicePath. Both values are still specified by the API, so
rather than regress `hypeman logs --source swtpm` and the vendor VFIO
vGPU column in `hypeman ps`, read them without the generated bindings:
the log source is a string-backed enum, and device_path arrives in
JSON.ExtraFields. Both can go back to typed access once next lands on
main.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: kernel-internal[bot]

go.mod

@@ -12,7 +12,7 @@ require (
 	github.com/google/go-containerregistry v0.20.7
 	github.com/gorilla/websocket v1.5.3
 	github.com/itchyny/json2yaml v0.1.4
-	github.com/kernel/hypeman-go v0.28.1-0.20260902143136-e6c2b7bc0171
+	github.com/kernel/hypeman-go v0.28.1-0.20261001160305-134587a222ac
 	github.com/knadh/koanf/parsers/yaml v1.1.0
 	github.com/knadh/koanf/providers/env v1.1.0
 	github.com/knadh/koanf/providers/file v1.2.1

go.sum

@@ -80,8 +80,8 @@ github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2 h1:8Tjv8EJ+pM1xP8mK6egEbD1OgnV
 github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2/go.mod h1:pkJQ2tZHJ0aFOVEEot6oZmaVEZcRme73eIFmhiVuRWs=
 github.com/itchyny/json2yaml v0.1.4 h1:/pErVOXGG5iTyXHi/QKR4y3uzhLjGTEmmJIy97YT+k8=
 github.com/itchyny/json2yaml v0.1.4/go.mod h1:6iudhBZdarpjLFRNj+clWLAkGft+9uCcjAZYXUH9eGI=
-github.com/kernel/hypeman-go v0.28.1-0.20260902143136-e6c2b7bc0171 h1:psPDtnXBaPABqymQW5lu1o9YOF7gyyxJZeQOCqcuxyo=
-github.com/kernel/hypeman-go v0.28.1-0.20260902143136-e6c2b7bc0171/go.mod h1:of8qI/nef2OPLzt0EMlIRbMdJHEvuc4yWG8g/ioNg48=
+github.com/kernel/hypeman-go v0.28.1-0.20261001160305-134587a222ac h1:dAwrSu1y5hCNcqsnNq8ovzIYnJq+RcB7hjmr+qr8hy8=
+github.com/kernel/hypeman-go v0.28.1-0.20261001160305-134587a222ac/go.mod h1:C3X0483PGbvn6ySpvPrgSH2joOWqacu9KUYd1gIE5cI=
 github.com/klauspost/compress v1.18.1 h1:bcSGx7UbpBqMChDtsF28Lw6v/G94LPrrbMbdC3JH2co=
 github.com/klauspost/compress v1.18.1/go.mod h1:ZQFFVG+MdnR0P+l6wpXgIL4NTtwiKIdBnrBd8Nrxr+0=
 github.com/knadh/koanf/maps v0.1.2 h1:RBfmAW5CnZT+PJ1CVc1QSJKf4Xu9kxfQgYVQSu8hpbo=

pkg/cmd/coveragecmd_test.go

@@ -85,7 +85,7 @@ func TestParseInstanceLogsSource(t *testing.T) {
 	t.Run("accepts mixed-case source names", func(t *testing.T) {
 		source, err := parseInstanceLogsSource("SwTpM")
 		require.NoError(t, err)
-		assert.Equal(t, hypeman.InstanceLogsParamsSourceSwtpm, source)
+		assert.Equal(t, instanceLogsSourceSwtpm, source)
 	})
 
 	t.Run("rejects unsupported source names", func(t *testing.T) {

pkg/cmd/logs.go

@@ -10,6 +10,10 @@ import (
 	"github.com/urfave/cli/v3"
 )
 
+// instanceLogsSourceSwtpm is the "swtpm" value accepted by the API's log source
+// enum. The generated SDK does not define a constant for it yet.
+const instanceLogsSourceSwtpm hypeman.InstanceLogsParamsSource = "swtpm"
+
 var logsCmd = cli.Command{
 	Name:      "logs",
 	Usage:     "Fetch the logs of an instance",
@@ -93,7 +97,7 @@ func parseInstanceLogsSource(raw string) (hypeman.InstanceLogsParamsSource, erro
 	case "hypeman":
 		return hypeman.InstanceLogsParamsSourceHypeman, nil
 	case "swtpm":
-		return hypeman.InstanceLogsParamsSourceSwtpm, nil
+		return instanceLogsSourceSwtpm, nil
 	default:
 		return "", fmt.Errorf("invalid source: %s (must be app, vmm, hypeman, or swtpm)", raw)
 	}

pkg/cmd/ps.go

@@ -2,6 +2,7 @@ package cmd
 
 import (
 	"context"
+	"encoding/json"
 	"fmt"
 	"os"
 
@@ -123,12 +124,29 @@ func formatGPU(gpu hypeman.InstanceGPU) string {
 	}
 	// A vGPU is attached without a profile name shown. mdev_uuid is only populated on
 	// mdev hosts; vendor VFIO hosts report device_path instead.
-	if gpu.MdevUuid != "" || gpu.DevicePath != "" {
+	if gpu.MdevUuid != "" || instanceGPUDevicePath(gpu) != "" {
 		return "vgpu"
 	}
 	return "-"
 }
 
+// instanceGPUDevicePath returns the sysfs path of the assigned vGPU device,
+// which the API reports on vendor VFIO hosts. The generated SDK has no typed
+// field for it yet, so it arrives as an extra field.
+func instanceGPUDevicePath(gpu hypeman.InstanceGPU) string {
+	// Valid reports false for extra fields, so decode Raw instead; it is empty
+	// when the field is absent.
+	raw := gpu.JSON.ExtraFields["device_path"].Raw()
+	if raw == "" {
+		return ""
+	}
+	var devicePath string
+	if err := json.Unmarshal([]byte(raw), &devicePath); err != nil {
+		return ""
+	}
+	return devicePath
+}
+
 // formatHypervisor returns a short abbreviation for the hypervisor
 func formatHypervisor(hv hypeman.InstanceHypervisor) string {
 	switch hv {

pkg/cmd/ps_test.go

@@ -1,6 +1,7 @@
 package cmd
 
 import (
+	"encoding/json"
 	"testing"
 
 	"github.com/kernel/hypeman-go"
@@ -35,10 +36,8 @@ func TestFormatGPU(t *testing.T) {
 			expected: "vgpu",
 		},
 		{
-			name: "vGPU without profile but with device path",
-			gpu: hypeman.InstanceGPU{
-				DevicePath: "/sys/bus/pci/devices/0000:41:00.4",
-			},
+			name:     "vGPU without profile but with device path",
+			gpu:      instanceGPUFromJSON(t, `{"device_path":"/sys/bus/pci/devices/0000:41:00.4"}`),
 			expected: "vgpu",
 		},
 	}
@@ -51,6 +50,16 @@ func TestFormatGPU(t *testing.T) {
 	}
 }
 
+// instanceGPUFromJSON decodes an InstanceGPU the way the API delivers it, so
+// fields the SDK does not type yet land in JSON.ExtraFields.
+func instanceGPUFromJSON(t *testing.T, raw string) hypeman.InstanceGPU {
+	t.Helper()
+
+	var gpu hypeman.InstanceGPU
+	require.NoError(t, json.Unmarshal([]byte(raw), &gpu))
+	return gpu
+}
+
 func TestFormatHypervisor(t *testing.T) {
 	tests := []struct {
 		name       string