Skip to content

[ci] Bump the production-dependencies group across 1 directory with 13 updates#5926

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/cluster/pulumi/production-dependencies-030e98a9e6
Open

[ci] Bump the production-dependencies group across 1 directory with 13 updates#5926
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/cluster/pulumi/production-dependencies-030e98a9e6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 11, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 13 updates in the /cluster/pulumi directory:

Package From To
@google-cloud/sql 0.24.0 0.24.1
@dotenvx/dotenvx 1.71.0 1.71.2
@pulumi/gcp 9.18.0 9.25.0
@pulumi/kubernetes 4.28.0 4.31.1
@pulumi/pulumi 3.230.0 3.245.0
@pulumi/random 4.19.2 4.21.0
@pulumi/github 6.13.1 6.14.0
auth0 5.6.0 5.11.0
js-yaml 4.1.1 4.2.0
zod 4.3.6 4.4.3
@pulumi/auth0 3.39.0 3.45.0
semver 7.8.1 7.8.3
@pulumi/policy 1.20.0 1.21.0

Updates @google-cloud/sql from 0.24.0 to 0.24.1

Changelog

Sourced from @​google-cloud/sql's changelog.

0.24.1 (2026-05-01)

Bug Fixes

  • Change the copyright year for files in the packages folder (#8109) (c1a03fe)
  • Do not publish the protos to npm (#8079) (816216b)
  • Revert "fix: Do not publish the protos to npm" (#8096) (ac0fbb6)
Commits

Updates @dotenvx/dotenvx from 1.71.0 to 1.71.2

Release notes

Sourced from @​dotenvx/dotenvx's releases.

v1.71.2

see CHANGELOG

v1.71.1

see CHANGELOG

Changelog

Sourced from @​dotenvx/dotenvx's changelog.

1.71.2 (2026-06-08)

Changed

  • touch up get, set, and decrypt when armor installed (#834)

1.71.1 (2026-06-08)

Changed

  • stderr changed to inherit for dotenvx-armor integration (#833)
Commits

Updates @pulumi/gcp from 9.18.0 to 9.25.0

Release notes

Sourced from @​pulumi/gcp's releases.

v9.25.0

What's Changed

Full Changelog: pulumi/pulumi-gcp@v9.24.0...v9.25.0

v9.24.0

What's Changed

Full Changelog: pulumi/pulumi-gcp@v9.23.0...v9.24.0

v9.23.0

What's Changed

Full Changelog: pulumi/pulumi-gcp@v9.22.0...v9.23.0

v9.22.0

What's Changed

... (truncated)

Commits

Updates @pulumi/kubernetes from 4.28.0 to 4.31.1

Release notes

Sourced from @​pulumi/kubernetes's releases.

v4.31.1

Changed

v4.31.0

Added

  • #2744 Advertise a helm mapping for terraform conversion so pulumi import --from terraform and pulumi convert --from terraform recognize helm_release and emit kubernetes:helm.sh/v3:Release.
  • #4332 Implement the List provider RPC and advertise listInputs (namespace, name, labelSelector, fieldSelector) on every non-nested resource. namespace is omitted from listInputs on cluster-scoped kinds. See https://github.com/pulumi/pulumi-kubernetes/blob/HEAD/docs/list-rpc-semantics.md for design notes.

Fixed

  • #4261 Fix CRD parameterization: implement Parameterize(Value) so subsequent runs can reconstruct the CRD schema from saved state, and flatten array-of-objects in OpenAPI specs so nested fields like spec.listeners generate typed args.

Changed

  • Upgrade Kubernetes schema and libraries to v1.36.1.

v4.30.0

4.30.0 (April 24, 2026)

Fixed

  • #4295Fix kustomize.v2.Directory resource output type in the schema to properly support array outputs. Previously, the resources field was incorrectly typed as a string in the schema. This fix updates the type to an array of Any, aligning the schema with the provider's Go implementation (pulumi.ArrayOutput). This resolves a regression that caused the Kustomize v2 resource to fail in the Python SDK.
  • #2997 Stop stripping null values when unmarshaling, fixing Helm chart default deletion and valueYamlFiles null handling. Deprecate allowNullValues (no longer needed).

Changed

  • Upgrade Kubernetes schema and libraries to v1.35.4.
  • Upgrade Kubernetes schema and libraries to v1.36.0.

v4.29.0

Fixed

pulumi/pulumi-kubernetes#2926 Use client-side create for new resources instead of server-side apply.

Users may observe stricter errors on some Create operations. Please read carefully.

When a resource already exists in the cluster, the API server now returns an AlreadyExists error instead of silently updating the existing object. This prevents data loss from create-then-delete scenarios (e.g. renaming a Pulumi resource or replacing an explicitly-named resource). A new provider config option upsertExistingObjects (default false) restores the previous upsert behavior for users who intentionally adopt existing cluster resources. To manage fields on existing objects without owning their lifecycle, use Patch resources (e.g. NamespacePatch).

Added

pulumi/pulumi-kubernetes#2280 Add enablePatchForce provider config option to force SSA patch conflicts on a per-stack basis.

Changed

Upgrade Kubernetes schema and libraries to v1.35.3.

Changelog

Sourced from @​pulumi/kubernetes's changelog.

4.31.1 (May 19, 2026)

Changed

  • #4364 Update github.com/go-git/go-git/v5 to v5.19.1 (SECURITY).
  • Update first-party Pulumi dependencies to v3.242.0.

4.31.0 (May 14, 2026)

Added

  • #2744 Advertise a helm mapping for terraform conversion so pulumi import --from terraform and pulumi convert --from terraform recognize helm_release and emit kubernetes:helm.sh/v3:Release.
  • #4332 Implement the List provider RPC and advertise listInputs (namespace, name, labelSelector, fieldSelector) on every non-nested resource. namespace is omitted from listInputs on cluster-scoped kinds. See https://github.com/pulumi/pulumi-kubernetes/blob/master/docs/list-rpc-semantics.md for design notes.

Fixed

  • #4261 Fix CRD parameterization: implement Parameterize(Value) so subsequent runs can reconstruct the CRD schema from saved state, and flatten array-of-objects in OpenAPI specs so nested fields like spec.listeners generate typed args.

Changed

  • Upgrade Kubernetes schema and libraries to v1.36.1.

4.30.0 (April 24, 2026)

Fixed

  • #4295Fix kustomize.v2.Directory resource output type in the schema to properly support array outputs. Previously, the resources field was incorrectly typed as a string in the schema. This fix updates the type to an array of Any, aligning the schema with the provider's Go implementation (pulumi.ArrayOutput). This resolves a regression that caused the Kustomize v2 resource to fail in the Python SDK.
  • #2997 Stop stripping null values when unmarshaling, fixing Helm chart default deletion and valueYamlFiles null handling. Deprecate allowNullValues (no longer needed).

Changed

  • Upgrade Kubernetes schema and libraries to v1.35.4.
  • Upgrade Kubernetes schema and libraries to v1.36.0.

4.29.0 (April 15, 2026)

Fixed

  • #2926 Use client-side create for new resources instead of server-side apply.

    Users may observe stricter errors on some Create operations. Please read carefully.

    When a resource already exists in the cluster, the API server now returns an AlreadyExists error instead of silently updating the existing object. This prevents data loss from create-then-delete scenarios (e.g. renaming a Pulumi resource or replacing an explicitly-named resource). A new provider config option upsertExistingObjects (default false) restores the previous upsert behavior for users who intentionally adopt existing cluster resources. To manage fields on existing objects without owning their lifecycle, use Patch resources (e.g. NamespacePatch).

Added

... (truncated)

Commits
Install script changes

This version modifies install script that runs during installation. Review the package contents before updating.


Updates @pulumi/pulumi from 3.230.0 to 3.245.0

Release notes

Sourced from @​pulumi/pulumi's releases.

v3.245.0

3.245.0 (2026-06-04)

Improvements

  • [backend/diy] Update gocloud.dev to 0.46 and aws sdk to v2 #23421
  • [cli] Show download and unpack progress when installing provider plugins pulumi/pulumi#23408
  • [cli/do] Expose the selected stack's organization and short name to PCL input files when running pulumi do inside a project
  • [cli/do] Suggest similar tokens when an unknown token is passed to pulumi do #23341
  • [cli/neo] Support up/down arrows to scroll through prompt history in pulumi neo #23425
  • [cli/stack] Remame pulumi stack init to new #23422

Bug Fixes

  • [engine] Download the HCL language runtime on demand instead of bundling it #23356
  • [sdk/nodejs] Fix mergeOptions dropping onError hooks from ResourceOptions in the Node.js SDK
  • [cli/auth] Delete shared temporary agent credentials when logging out

Miscellaneous

  • [sdk/go] Remove "name" from plugin loading functions and require "Type" on Configure & DiffConfig calls #23363

v3.244.0

3.244.0 (2026-05-28)

Bug Fixes

  • [cli/do] Fix top level flags like --logtostderr being recognized when using pulumi do #23355
  • [cli/install] Distinguish multiple packages with the same plugin
  • [engine] Fix snapshot integrity issue with up --refresh
  • [engine] Forward all provider errors to error hooks for retry #23347
  • [engine] Trace cancel RPCs sent to plugins during shutdown as children of the active operation instead of emitting separate root spans #23362
  • [sdk/python] Merge requirements.txt into pyproject.toml when using uv without a project section #23340

v3.243.0

3.243.0 (2026-05-22)

Features

  • [cli] Make the pulumi project new -y command write a minimal project file with no template #22847

  • [cli] Allow coding agents to create claimable temporary accounts when not authenticated

  • [cli] Suggest pulumi neo in pulumi preview and pulumi up diagnostics output #23326

  • [sdk] Add List to the Go plugin.Provider interface, wired to the streaming ResourceProvider.List RPC #23287

... (truncated)

Changelog

Sourced from @​pulumi/pulumi's changelog.

3.245.0 (2026-06-04)

Improvements

  • [backend/diy] Update gocloud.dev to 0.46 and aws sdk to v2 #23421
  • [cli] Show download and unpack progress when installing provider plugins pulumi/pulumi#23408
  • [cli/do] Expose the selected stack's organization and short name to PCL input files when running pulumi do inside a project
  • [cli/do] Suggest similar tokens when an unknown token is passed to pulumi do #23341
  • [cli/neo] Support up/down arrows to scroll through prompt history in pulumi neo #23425

Bug Fixes

  • [engine] Download the HCL language runtime on demand instead of bundling it #23356

Miscellaneous

  • [sdk/go] Remove "name" from plugin loading functions and require "Type" on Configure & DiffConfig calls #23363

Bug Fixes

  • [sdk/nodejs] Fix mergeOptions dropping onError hooks from ResourceOptions in the Node.js SDK
  • [cli/auth] Delete shared temporary agent credentials when logging out

Improvements

  • [cli/stack] Remame pulumi stack init to new #23422

3.244.0 (2026-05-28)

Bug Fixes

  • [cli/do] Fix top level flags like --logtostderr being recognized when using pulumi do #23355
  • [cli/install] Distinguish multiple packages with the same plugin
  • [engine] Fix snapshot integrity issue with up --refresh
  • [engine] Forward all provider errors to error hooks for retry #23347
  • [engine] Trace cancel RPCs sent to plugins during shutdown as children of the active operation instead of emitting separate root spans #23362
  • [sdk/python] Merge requirements.txt into pyproject.toml when using uv without a project section #23340

3.243.0 (2026-05-22)

Features

  • [cli] Make the pulumi project new -y command write a minimal project file with no template #22847

  • [cli] Allow coding agents to create claimable temporary accounts when not authenticated

  • [cli] Suggest pulumi neo in pulumi preview and pulumi up diagnostics output #23326

  • [sdk] Add List to the Go plugin.Provider interface, wired to the streaming ResourceProvider.List RPC

... (truncated)

Commits

Updates @pulumi/random from 4.19.2 to 4.21.0

Release notes

Sourced from @​pulumi/random's releases.

v4.21.0

What's Changed

Full Changelog: pulumi/pulumi-random@v4.20.0...v4.21.0

v4.20.0

What's Changed

New Contributors

... (truncated)

Commits

Updates @pulumi/github from 6.13.1 to 6.14.0

Release notes

Sourced from @​pulumi/github's releases.

v6.14.0

What's Changed

Full Changelog: pulumi/pulumi-github@v6.13.1...v6.14.0

Commits

Updates auth0 from 5.6.0 to 5.11.0

Release notes

Sourced from auth0's releases.

v5.11.0

Added

  • feat: add rate limit policies, group/org role management, and user effective roles/permissions #1348 (fern-api[bot])

v5.10.0

Added

  • feat: add passkey authentication methods, online access support, and improved error handling #1342 (fern-api[bot])

v5.9.1

Security

v5.9.0

Added

  • feat: add events SSE streaming, bulk refresh token revocation, and query string builder #1331 (fern-api[bot])

v5.8.0

⚠️ BREAKING CHANGES

  • Removed invitation_landing_client_id and allowed_roles fields from ClientMyOrganizationPatchConfiguration, ClientMyOrganizationPostConfiguration, and ClientMyOrganizationResponseConfiguration #1328 (fern-api[bot])

Added

  • Session Transfer Delegation: new delegation property on ClientSessionTransferConfiguration with ClientSessionTransferDelegationConfiguration interface supporting allow_delegated_access and enforce_device_binding options #1328 (fern-api[bot])
  • Self-Service SSO Ticket Features: new enabled_features property on CreateSelfServiceProfileSsoTicketRequestContent with SelfServiceProfileSsoTicketEnabledFeatures interface supporting sso, domain_verification, and provisioning toggles #1328 (fern-api[bot])
  • Self-Service SSO Ticket Domain Aliases: new pending_domains field on SelfServiceProfileSsoTicketDomainAliasesConfig #1328 (fern-api[bot])

Changed

  • Updated JSDoc descriptions for default_for field across Client Grant response types and CreateClientGrantRequestContent #1328 (fern-api[bot])

v5.7.0

Added

  • feat: add third-party client security, synchronized groups, and new event stream types #1326 (fern-api[bot])
Changelog

Sourced from auth0's changelog.

v5.11.0 (2026-05-28)

Full Changelog

Added

  • feat: add rate limit policies, group/org role management, and user effective roles/permissions #1348 (fern-api[bot])

v5.10.0 (2026-05-13)

Full Changelog

Added

  • feat: add passkey authentication methods, ephemeral session support, and improved error handling #1342 (fern-api[bot])

v5.9.1 (2026-05-05)

Full Changelog

Security

v5.9.0 (2026-04-30)

Full Changelog

Added

@dependabot dependabot Bot added the static Used to label PRs for which static tests suffice label Jun 11, 2026
@dependabot
[ci] Bump the production-dependencies group across 1 directory with 1…
893feee 
…3 updates

Bumps the production-dependencies group with 13 updates in the /cluster/pulumi directory:

| Package | From | To |
| --- | --- | --- |
| [@google-cloud/sql](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-sql) | `0.24.0` | `0.24.1` |
| [@dotenvx/dotenvx](https://github.com/dotenvx/dotenvx) | `1.71.0` | `1.71.2` |
| [@pulumi/gcp](https://github.com/pulumi/pulumi-gcp) | `9.18.0` | `9.25.0` |
| [@pulumi/kubernetes](https://github.com/pulumi/pulumi-kubernetes) | `4.28.0` | `4.31.1` |
| [@pulumi/pulumi](https://github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs) | `3.230.0` | `3.245.0` |
| [@pulumi/random](https://github.com/pulumi/pulumi-random) | `4.19.2` | `4.21.0` |
| [@pulumi/github](https://github.com/pulumi/pulumi-github) | `6.13.1` | `6.14.0` |
| [auth0](https://github.com/auth0/node-auth0) | `5.6.0` | `5.11.0` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.2.0` |
| [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.4.3` |
| [@pulumi/auth0](https://github.com/pulumi/pulumi-auth0) | `3.39.0` | `3.45.0` |
| [semver](https://github.com/npm/node-semver) | `7.8.1` | `7.8.3` |
| [@pulumi/policy](https://github.com/pulumi/pulumi-policy) | `1.20.0` | `1.21.0` |



Updates `@google-cloud/sql` from 0.24.0 to 0.24.1
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-sql/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/v0.24.1/packages/google-cloud-sql)

Updates `@dotenvx/dotenvx` from 1.71.0 to 1.71.2
- [Release notes](https://github.com/dotenvx/dotenvx/releases)
- [Changelog](https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md)
- [Commits](dotenvx/dotenvx@v1.71.0...v1.71.2)

Updates `@pulumi/gcp` from 9.18.0 to 9.25.0
- [Release notes](https://github.com/pulumi/pulumi-gcp/releases)
- [Changelog](https://github.com/pulumi/pulumi-gcp/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-gcp@v9.18.0...v9.25.0)

Updates `@pulumi/kubernetes` from 4.28.0 to 4.31.1
- [Release notes](https://github.com/pulumi/pulumi-kubernetes/releases)
- [Changelog](https://github.com/pulumi/pulumi-kubernetes/blob/master/CHANGELOG.md)
- [Commits](pulumi/pulumi-kubernetes@v4.28.0...v4.31.1)

Updates `@pulumi/pulumi` from 3.230.0 to 3.245.0
- [Release notes](https://github.com/pulumi/pulumi/releases)
- [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pulumi/pulumi/commits/v3.245.0/sdk/nodejs)

Updates `@pulumi/random` from 4.19.2 to 4.21.0
- [Release notes](https://github.com/pulumi/pulumi-random/releases)
- [Changelog](https://github.com/pulumi/pulumi-random/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-random@v4.19.2...v4.21.0)

Updates `@pulumi/github` from 6.13.1 to 6.14.0
- [Release notes](https://github.com/pulumi/pulumi-github/releases)
- [Changelog](https://github.com/pulumi/pulumi-github/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-github@v6.13.1...v6.14.0)

Updates `auth0` from 5.6.0 to 5.11.0
- [Release notes](https://github.com/auth0/node-auth0/releases)
- [Changelog](https://github.com/auth0/node-auth0/blob/master/CHANGELOG.md)
- [Commits](auth0/node-auth0@v5.6.0...v5.11.0)

Updates `js-yaml` from 4.1.1 to 4.2.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

Updates `zod` from 4.3.6 to 4.4.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.6...v4.4.3)

Updates `@pulumi/auth0` from 3.39.0 to 3.45.0
- [Release notes](https://github.com/pulumi/pulumi-auth0/releases)
- [Changelog](https://github.com/pulumi/pulumi-auth0/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-auth0@v3.39.0...v3.45.0)

Updates `semver` from 7.8.1 to 7.8.3
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.8.1...v7.8.3)

Updates `@pulumi/policy` from 1.20.0 to 1.21.0
- [Changelog](https://github.com/pulumi/pulumi-policy/blob/main/CHANGELOG.md)
- [Commits](pulumi/pulumi-policy@v1.20.0...v1.21.0)

---
updated-dependencies:
- dependency-name: "@dotenvx/dotenvx"
  dependency-version: 1.71.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@google-cloud/sql"
  dependency-version: 0.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@pulumi/auth0"
  dependency-version: 3.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/gcp"
  dependency-version: 9.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/github"
  dependency-version: 6.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/kubernetes"
  dependency-version: 4.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/policy"
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/pulumi"
  dependency-version: 3.245.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/random"
  dependency-version: 4.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: auth0
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: semver
  dependency-version: 7.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/cluster/pulumi/production-dependencies-030e98a9e6 branch from 96589c5 to 893feee Compare June 12, 2026 18:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@martinflorian-da martinflorian-da

@mblaze-da mblaze-da

@krzysztofczyz-da krzysztofczyz-da

Labels

static Used to label PRs for which static tests suffice

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@martinflorian-da @mblaze-da @krzysztofczyz-da