only update license key via IaC when new expiry is posterior

[rubenfiszel]

Summary

• When using infrastructure-as-code (API endpoint or K8s operator) to update instance settings, the license key is now only updated if the new key has a later expiration date than the current one
• This applies only when the license keys share the same client ID and signature (i.e. differ only in the expiry field). Completely different license keys are always applied
• When a license key update is skipped, a tracing::info message is logged explaining the reason
• Non-string license key values (e.g. envRef, secretKeyRef) fall through to the standard diff logic

Test plan

• Unit test: skip update when desired expiry is older than current
• Unit test: skip update when same key/signature, expiry equal (actually different sig → update)
• Unit test: apply update when desired expiry is newer
• Unit test: always apply when client ID or signature differ
• Unit test: always apply when license key values are non-string (envRef/secretKeyRef)
• All 55 existing instance_config tests still pass
• cargo check -p windmill-common passes

🤖 Generated with Claude Code

[claude]

Claude Code is working…

I'll analyze this and get back to you.

View job run