add log_relation to required fields for auditing

go.mod

@@ -1,6 +1,6 @@
 module github.com/nais/cli
 
-go 1.26.5
+go 1.26.6
 
 tool (
 	github.com/Khan/genqlient

internal/postgres/audit.go

@@ -134,6 +134,7 @@ func validateAuditFlags(ctx context.Context, info *CloudSQLDBInfo) error {
 		"cloudsql.enable_pgaudit",
 		"pgaudit.log",
 		"pgaudit.log_parameter",
+		"pgaudit.log_relation",
 	}
 
 	err = validateRequiredFlags(dbFlags, requiredFlags)
@@ -255,6 +256,17 @@ func verifyAuditAsAppUser(ctx context.Context, appName, team, environment string
 	}
 	out.Printf("  ✅ Flag <info>pgaudit.log_parameter</info> = <info>%s</info>\n", logParameter)
 
+	logRelation, relationExists := dbFlags["pgaudit.log_relation"]
+	if !relationExists {
+		out.Println("  ❌ Flag <info>pgaudit.log_relation</info> is missing")
+		return false, fmt.Errorf("pgaudit.log_relation flag is not set")
+	}
+	if logRelation != "on" && logRelation != "true" {
+		out.Printf("  ❌ Flag <info>pgaudit.log_relation</info>: expected <info>on</info>, got <info>%s</info>\n", logRelation)
+		return false, fmt.Errorf("pgaudit.log_relation must be set to 'on'")
+	}
+	out.Printf("  ✅ Flag <info>pgaudit.log_relation</info> = <info>%s</info>\n", logRelation)
+
 	db, err := sql.Open("cloudsqlpostgres", connectionInfo.ProxyConnectionString())
 	if err != nil {
 		return false, fmt.Errorf("error connecting to database: %w", err)

mise/config.toml

@@ -1,6 +1,6 @@
 [tools]
 git-cliff = "2.10.1"
-go = "1.26.5"
+go = "1.26.6"
 golangci-lint = "2.12.2"
 yamlfmt = "0.17.2"