Skip to content

[ci] Bump the production-dependencies group across 1 directory with 11 updates#5749

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/cluster/pulumi/production-dependencies-2d4235ea37
Closed

[ci] Bump the production-dependencies group across 1 directory with 11 updates#5749
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/cluster/pulumi/production-dependencies-2d4235ea37

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 29, 2026 •
edited
Loading

Bumps the production-dependencies group with 11 updates in the /cluster/pulumi directory:

Package From To
@google-cloud/sql 0.24.0 0.24.1
@dotenvx/dotenvx 1.61.0 1.69.1
@pulumi/gcp 9.18.0 9.25.0
@pulumi/kubernetes 4.28.0 4.31.1
@pulumi/pulumi 3.230.0 3.243.0
@pulumi/random 4.19.2 4.21.0
@pulumi/github 6.13.1 6.14.0
auth0 5.6.0 5.10.0
zod 4.3.6 4.4.3
@pulumi/auth0 3.39.0 3.44.0
@pulumi/policy 1.20.0 1.21.0

Updates @google-cloud/sql from 0.24.0 to 0.24.1

Changelog

Sourced from @​google-cloud/sql's changelog.

0.24.1 (2026-05-01)

Bug Fixes

  • Change the copyright year for files in the packages folder (#8109) (c1a03fe)
  • Do not publish the protos to npm (#8079) (816216b)
  • Revert "fix: Do not publish the protos to npm" (#8096) (ac0fbb6)
Commits

Updates @dotenvx/dotenvx from 1.61.0 to 1.69.1

Release notes

Sourced from @​dotenvx/dotenvx's releases.

v1.69.1

see CHANGELOG

v1.69.0

see CHANGELOG

v1.68.1

see CHANGELOG

v1.68.0

see CHANGELOG

v1.67.0

see CHANGELOG

v1.66.0

see CHANGELOG

v1.65.3

see CHANGELOG

v1.65.2

see CHANGELOG

v1.65.1

see CHANGELOG

v1.65.0

see CHANGELOG

v1.64.0

see CHANGELOG

v1.63.0

see CHANGELOG

v1.62.0

see CHANGELOG

v1.61.6

see CHANGELOG

v1.61.5

see CHANGELOG

v1.61.4

see CHANGELOG

v1.61.3

see CHANGELOG

... (truncated)

Changelog

Sourced from @​dotenvx/dotenvx's changelog.

1.69.1 (2026-05-25)

Changed

  • Internally rename ops to vlt (#823)

1.69.0 (2026-05-25)

Changed

  • Remove fully-deprecated opsOff option in favor of noOps (#822)

1.68.1 (2026-05-24)

Changed

  • Pass -f to ops (#821)

1.68.0 (2026-05-24)

Changed

  • Support ignore option on parse (#820)

1.67.0 (2026-05-21)

Added

  • Add prompt for local storage vs armored storage (#819)

1.66.0 (2026-05-13)

Added

  • Add dotenvx doctor (#815)

1.65.3 (2026-05-13)

Changed

  • Improve spinner message blinking with simpler --no-spinner flag passed to ops (#814)

1.65.2 (2026-05-13)

Changed

  • Improve spinner message coordination between dotenvx and dotenvx-ops (#813)

1.65.1 (2026-05-13)

... (truncated)

Commits

Updates @pulumi/gcp from 9.18.0 to 9.25.0

Release notes

Sourced from @​pulumi/gcp's releases.

v9.25.0

What's Changed

Full Changelog: pulumi/pulumi-gcp@v9.24.0...v9.25.0

v9.24.0

What's Changed

Full Changelog: pulumi/pulumi-gcp@v9.23.0...v9.24.0

v9.23.0

What's Changed

Full Changelog: pulumi/pulumi-gcp@v9.22.0...v9.23.0

v9.22.0

What's Changed

... (truncated)

Commits

Updates @pulumi/kubernetes from 4.28.0 to 4.31.1

Release notes

Sourced from @​pulumi/kubernetes's releases.

v4.31.1

Changed

v4.31.0

Added

  • #2744 Advertise a helm mapping for terraform conversion so pulumi import --from terraform and pulumi convert --from terraform recognize helm_release and emit kubernetes:helm.sh/v3:Release.
  • #4332 Implement the List provider RPC and advertise listInputs (namespace, name, labelSelector, fieldSelector) on every non-nested resource. namespace is omitted from listInputs on cluster-scoped kinds. See https://github.com/pulumi/pulumi-kubernetes/blob/HEAD/docs/list-rpc-semantics.md for design notes.

Fixed

  • #4261 Fix CRD parameterization: implement Parameterize(Value) so subsequent runs can reconstruct the CRD schema from saved state, and flatten array-of-objects in OpenAPI specs so nested fields like spec.listeners generate typed args.

Changed

  • Upgrade Kubernetes schema and libraries to v1.36.1.

v4.30.0

4.30.0 (April 24, 2026)

Fixed

  • #4295Fix kustomize.v2.Directory resource output type in the schema to properly support array outputs. Previously, the resources field was incorrectly typed as a string in the schema. This fix updates the type to an array of Any, aligning the schema with the provider's Go implementation (pulumi.ArrayOutput). This resolves a regression that caused the Kustomize v2 resource to fail in the Python SDK.
  • #2997 Stop stripping null values when unmarshaling, fixing Helm chart default deletion and valueYamlFiles null handling. Deprecate allowNullValues (no longer needed).

Changed

  • Upgrade Kubernetes schema and libraries to v1.35.4.
  • Upgrade Kubernetes schema and libraries to v1.36.0.

v4.29.0

Fixed

pulumi/pulumi-kubernetes#2926 Use client-side create for new resources instead of server-side apply.

Users may observe stricter errors on some Create operations. Please read carefully.

When a resource already exists in the cluster, the API server now returns an AlreadyExists error instead of silently updating the existing object. This prevents data loss from create-then-delete scenarios (e.g. renaming a Pulumi resource or replacing an explicitly-named resource). A new provider config option upsertExistingObjects (default false) restores the previous upsert behavior for users who intentionally adopt existing cluster resources. To manage fields on existing objects without owning their lifecycle, use Patch resources (e.g. NamespacePatch).

Added

pulumi/pulumi-kubernetes#2280 Add enablePatchForce provider config option to force SSA patch conflicts on a per-stack basis.

Changed

Upgrade Kubernetes schema and libraries to v1.35.3.

Changelog

Sourced from @​pulumi/kubernetes's changelog.

4.31.1 (May 19, 2026)

Changed

  • #4364 Update github.com/go-git/go-git/v5 to v5.19.1 (SECURITY).
  • Update first-party Pulumi dependencies to v3.242.0.

4.31.0 (May 14, 2026)

Added

  • #2744 Advertise a helm mapping for terraform conversion so pulumi import --from terraform and pulumi convert --from terraform recognize helm_release and emit kubernetes:helm.sh/v3:Release.
  • #4332 Implement the List provider RPC and advertise listInputs (namespace, name, labelSelector, fieldSelector) on every non-nested resource. namespace is omitted from listInputs on cluster-scoped kinds. See https://github.com/pulumi/pulumi-kubernetes/blob/master/docs/list-rpc-semantics.md for design notes.

Fixed

  • #4261 Fix CRD parameterization: implement Parameterize(Value) so subsequent runs can reconstruct the CRD schema from saved state, and flatten array-of-objects in OpenAPI specs so nested fields like spec.listeners generate typed args.

Changed

  • Upgrade Kubernetes schema and libraries to v1.36.1.

4.30.0 (April 24, 2026)

Fixed

  • #4295Fix kustomize.v2.Directory resource output type in the schema to properly support array outputs. Previously, the resources field was incorrectly typed as a string in the schema. This fix updates the type to an array of Any, aligning the schema with the provider's Go implementation (pulumi.ArrayOutput). This resolves a regression that caused the Kustomize v2 resource to fail in the Python SDK.
  • #2997 Stop stripping null values when unmarshaling, fixing Helm chart default deletion and valueYamlFiles null handling. Deprecate allowNullValues (no longer needed).

Changed

  • Upgrade Kubernetes schema and libraries to v1.35.4.
  • Upgrade Kubernetes schema and libraries to v1.36.0.

4.29.0 (April 15, 2026)

Fixed

  • #2926 Use client-side create for new resources instead of server-side apply.

    Users may observe stricter errors on some Create operations. Please read carefully.

    When a resource already exists in the cluster, the API server now returns an AlreadyExists error instead of silently updating the existing object. This prevents data loss from create-then-delete scenarios (e.g. renaming a Pulumi resource or replacing an explicitly-named resource). A new provider config option upsertExistingObjects (default false) restores the previous upsert behavior for users who intentionally adopt existing cluster resources. To manage fields on existing objects without owning their lifecycle, use Patch resources (e.g. NamespacePatch).

Added

... (truncated)

Commits
Install script changes

This version modifies install script that runs during installation. Review the package contents before updating.


Updates @pulumi/pulumi from 3.230.0 to 3.243.0

Release notes

Sourced from @​pulumi/pulumi's releases.

v3.243.0

3.243.0 (2026-05-22)

Features

  • [cli] Make the pulumi project new -y command write a minimal project file with no template #22847

  • [cli] Allow coding agents to create claimable temporary accounts when not authenticated

  • [cli] Suggest pulumi neo in pulumi preview and pulumi up diagnostics output #23326

  • [sdk] Add List to the Go plugin.Provider interface, wired to the streaming ResourceProvider.List RPC #23287

  • [sdkgen] Reserve the package names 'pulumi' and 'input' for internal use #23321

  • [cli/cloud] Prefer text/markdown over JSON in pulumi api when an endpoint produces both #22963

  • [cli/do] Add resource support to pulumi do #23215

  • [cli/neo] Pressing Esc in pulumi neo now clears the input box when it has text; with an empty box, Esc still cancels the agent's current turn #23299

  • [cli/new] Alias pulumi new to pulumi project new #23265

Bug Fixes

  • [cli] Require --yes to confirm pulumi deployment cancel, pulumi stack schedule remove, pulumi org webhook remove, and pulumi stack webhook remove when running non-interactively #23264

  • [pcl] Don't silently ignore ... in function arguments #23309

  • [sdkgen/nodejs] Cache package references per-deployment in generated SDKs to fix concurrent inline programs #23068

  • [backend/service] Error out when setting up journaler fails #22671

Miscellaneous

... (truncated)

Changelog

Sourced from @​pulumi/pulumi's changelog.

3.243.0 (2026-05-22)

Features

  • [cli] Make the pulumi project new -y command write a minimal project file with no template #22847

  • [cli] Allow coding agents to create claimable temporary accounts when not authenticated

  • [cli] Suggest pulumi neo in pulumi preview and pulumi up diagnostics output #23326

  • [sdk] Add List to the Go plugin.Provider interface, wired to the streaming ResourceProvider.List RPC #23287

  • [sdkgen] Reserve the package names 'pulumi' and 'input' for internal use #23321

  • [cli/cloud] Prefer text/markdown over JSON in pulumi api when an endpoint produces both #22963

  • [cli/do] Add resource support to pulumi do #23215

  • [cli/neo] Pressing Esc in pulumi neo now clears the input box when it has text; with an empty box, Esc still cancels the agent's current turn #23299

  • [cli/new] Alias pulumi new to pulumi project new #23265

Bug Fixes

  • [cli] Require --yes to confirm pulumi deployment cancel, pulumi stack schedule remove, pulumi org webhook remove, and pulumi stack webhook remove when running non-interactively #23264

  • [pcl] Don't silently ignore ... in function arguments #23309

  • [sdkgen/nodejs] Cache package references per-deployment in generated SDKs to fix concurrent inline programs #23068

  • [backend/service] Error out when setting up journaler fails #22671

Miscellaneous

  • [cli/package] Update the pulumi package add --agent documentation hint to use <type-token> as the placeholder for the /docs/... URL

... (truncated)

Commits

Updates @pulumi/random from 4.19.2 to 4.21.0

Release notes

Sourced from @​pulumi/random's releases.

v4.21.0

What's Changed

Full Changelog: pulumi/pulumi-random@v4.20.0...v4.21.0

v4.20.0

What's Changed

New Contributors

... (truncated)

Commits

Updates @pulumi/github from 6.13.1 to 6.14.0

Release notes

Sourced from @​pulumi/github's releases.

v6.14.0

What's Changed

Full Changelog: pulumi/pulumi-github@v6.13.1...v6.14.0

Commits

Updates auth0 from 5.6.0 to 5.10.0

Release notes

Sourced from auth0's releases.

v5.10.0

Added

  • feat: add passkey authentication methods, online access support, and improved error handling #1342 (fern-api[bot])

v5.9.1

Security

v5.9.0

Added

  • feat: add events SSE streaming, bulk refresh token revocation, and query string builder #1331 (fern-api[bot])

v5.8.0

⚠️ BREAKING CHANGES

  • Removed invitation_landing_client_id and allowed_roles fields from ClientMyOrganizationPatchConfiguration, ClientMyOrganizationPostConfiguration, and ClientMyOrganizationResponseConfiguration #1328 (fern-api[bot])

Added

  • Session Transfer Delegation: new delegation property on ClientSessionTransferConfiguration with ClientSessionTransferDelegationConfiguration interface supporting allow_delegated_access and enforce_device_binding options #1328 (fern-api[bot])
  • Self-Service SSO Ticket Features: new enabled_features property on CreateSelfServiceProfileSsoTicketRequestContent with SelfServiceProfileSsoTicketEnabledFeatures interface supporting sso, domain_verification, and provisioning toggles #1328 (fern-api[bot])
  • Self-Service SSO Ticket Domain Aliases: new pending_domains field on SelfServiceProfileSsoTicketDomainAliasesConfig #1328 (fern-api[bot])

Changed

  • Updated JSDoc descriptions for default_for field across Client Grant response types and CreateClientGrantRequestContent #1328 (fern-api[bot])

v5.7.0

Added

  • feat: add third-party client security, synchronized groups, and new event stream types #1326 (fern-api[bot])
Changelog

Sourced from auth0's changelog.

v5.10.0 (2026-05-13)

Full Changelog

Added

  • feat: add passkey authentication methods, ephemeral session support, and improved error handling #1342 (<...

    Description has been truncated

@dependabot dependabot Bot added the static Used to label PRs for which static tests suffice label May 29, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/cluster/pulumi/production-dependencies-2d4235ea37 branch from 286458d to 6f9927c Compare June 1, 2026 10:42
@krzysztofczyz-da krzysztofczyz-da mentioned this pull request Jun 1, 2026
Merged
7 tasks
@dependabot
[ci] Bump the production-dependencies group across 1 directory with 1…
cad01c2 
…1 updates

Bumps the production-dependencies group with 11 updates in the /cluster/pulumi directory:

| Package | From | To |
| --- | --- | --- |
| [@google-cloud/sql](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-sql) | `0.24.0` | `0.24.1` |
| [@dotenvx/dotenvx](https://github.com/dotenvx/dotenvx) | `1.61.0` | `1.69.1` |
| [@pulumi/gcp](https://github.com/pulumi/pulumi-gcp) | `9.18.0` | `9.25.0` |
| [@pulumi/kubernetes](https://github.com/pulumi/pulumi-kubernetes) | `4.28.0` | `4.31.1` |
| [@pulumi/pulumi](https://github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs) | `3.230.0` | `3.243.0` |
| [@pulumi/random](https://github.com/pulumi/pulumi-random) | `4.19.2` | `4.21.0` |
| [@pulumi/github](https://github.com/pulumi/pulumi-github) | `6.13.1` | `6.14.0` |
| [auth0](https://github.com/auth0/node-auth0) | `5.6.0` | `5.10.0` |
| [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.4.3` |
| [@pulumi/auth0](https://github.com/pulumi/pulumi-auth0) | `3.39.0` | `3.44.0` |
| [@pulumi/policy](https://github.com/pulumi/pulumi-policy) | `1.20.0` | `1.21.0` |



Updates `@google-cloud/sql` from 0.24.0 to 0.24.1
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-sql/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/v0.24.1/packages/google-cloud-sql)

Updates `@dotenvx/dotenvx` from 1.61.0 to 1.69.1
- [Release notes](https://github.com/dotenvx/dotenvx/releases)
- [Changelog](https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md)
- [Commits](dotenvx/dotenvx@v1.61.0...v1.69.1)

Updates `@pulumi/gcp` from 9.18.0 to 9.25.0
- [Release notes](https://github.com/pulumi/pulumi-gcp/releases)
- [Changelog](https://github.com/pulumi/pulumi-gcp/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-gcp@v9.18.0...v9.25.0)

Updates `@pulumi/kubernetes` from 4.28.0 to 4.31.1
- [Release notes](https://github.com/pulumi/pulumi-kubernetes/releases)
- [Changelog](https://github.com/pulumi/pulumi-kubernetes/blob/master/CHANGELOG.md)
- [Commits](pulumi/pulumi-kubernetes@v4.28.0...v4.31.1)

Updates `@pulumi/pulumi` from 3.230.0 to 3.243.0
- [Release notes](https://github.com/pulumi/pulumi/releases)
- [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pulumi/pulumi/commits/v3.243.0/sdk/nodejs)

Updates `@pulumi/random` from 4.19.2 to 4.21.0
- [Release notes](https://github.com/pulumi/pulumi-random/releases)
- [Changelog](https://github.com/pulumi/pulumi-random/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-random@v4.19.2...v4.21.0)

Updates `@pulumi/github` from 6.13.1 to 6.14.0
- [Release notes](https://github.com/pulumi/pulumi-github/releases)
- [Changelog](https://github.com/pulumi/pulumi-github/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-github@v6.13.1...v6.14.0)

Updates `auth0` from 5.6.0 to 5.10.0
- [Release notes](https://github.com/auth0/node-auth0/releases)
- [Changelog](https://github.com/auth0/node-auth0/blob/master/CHANGELOG.md)
- [Commits](auth0/node-auth0@v5.6.0...v5.10.0)

Updates `zod` from 4.3.6 to 4.4.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.6...v4.4.3)

Updates `@pulumi/auth0` from 3.39.0 to 3.44.0
- [Release notes](https://github.com/pulumi/pulumi-auth0/releases)
- [Changelog](https://github.com/pulumi/pulumi-auth0/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-auth0@v3.39.0...v3.44.0)

Updates `@pulumi/policy` from 1.20.0 to 1.21.0
- [Changelog](https://github.com/pulumi/pulumi-policy/blob/main/CHANGELOG.md)
- [Commits](pulumi/pulumi-policy@v1.20.0...v1.21.0)

---
updated-dependencies:
- dependency-name: "@dotenvx/dotenvx"
  dependency-version: 1.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@google-cloud/sql"
  dependency-version: 0.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@pulumi/auth0"
  dependency-version: 3.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/gcp"
  dependency-version: 9.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/github"
  dependency-version: 6.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/kubernetes"
  dependency-version: 4.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/policy"
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/pulumi"
  dependency-version: 3.243.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/random"
  dependency-version: 4.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: auth0
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/cluster/pulumi/production-dependencies-2d4235ea37 branch from 6f9927c to cad01c2 Compare June 3, 2026 03:52
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Jun 3, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 3, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/cluster/pulumi/production-dependencies-2d4235ea37 branch June 3, 2026 11:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@martinflorian-da martinflorian-da

@mblaze-da mblaze-da

@krzysztofczyz-da krzysztofczyz-da

Labels

static Used to label PRs for which static tests suffice

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@martinflorian-da @mblaze-da @krzysztofczyz-da