Backlog/v12 fixed open incident node

[AlexSanchez-bit]

No description provided.

[github-actions]

✅ AI review — Minor findings

Only minor (medium/low) issues were found. Consider addressing them.

⚠️ architecture (gemini-3-flash-lite) — minor findings

Summary: Routine dependency updates across modules and a minor case normalization fix in SOAR incident executor.

• low backend/modules/soar/executor/incident.go:65 — Severity string normalized to lowercase ("low"). Verify that downstream consumers or DTO validations do not strictly expect title-cased severity strings like "Low".

✅ bugs (gemini-3-flash-lite) — clean

Summary: Dependency version updates across modules and a case normalization fix for incident severity.

No findings.

✅ security (gemini-3-flash-lite) — clean

Summary: Routine dependency version bumps across Go modules with minor non-security logic update in SOAR execution.

No findings.

🔴 go-deps — pending updates

🔍 Discovered 31 Go projects

❌ Could not inspect the following projects (run 'go mod tidy' there):

## ./plugins/crowdstrike
go: github.com/utmstack/UTMStack/plugins/shared@v0.0.0-00010101000000-000000000000: module ../shared requires go >= 1.26.0 (running go 1.25.5)

## ./plugins/sophos
go: github.com/utmstack/UTMStack/plugins/shared@v0.0.0: module ../shared requires go >= 1.26.0 (running go 1.25.5)

## ./plugins/o365
go: github.com/utmstack/UTMStack/plugins/shared@v0.0.0: module ../shared requires go >= 1.26.0 (running go 1.25.5)