Skip to content

Update nix&pulumi#5761

Merged
krzysztofczyz-da merged 11 commits into
mainfrom
kczyz/nix-update-2
Jun 3, 2026
Merged

Update nix&pulumi#5761
krzysztofczyz-da merged 11 commits into
mainfrom
kczyz/nix-update-2

Conversation

@krzysztofczyz-da

@krzysztofczyz-da krzysztofczyz-da commented Jun 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

All changes from #5749 + nix upgrade required for https://github.com/issues/assigned?issue=DACH-NY%7Ccn-test-failures%7C8625 .

Pull Request Checklist

Cluster Testing

  • If a cluster test is required, comment /cluster_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.
  • If a hard-migration test is required (from the latest release), comment /hdm_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.
  • If a logical synchronizer upgrade test is required (from canton-3.5), comment /lsu_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.

PR Guidelines

  • Include any change that might be observable by our partners or affect their deployment in the release notes.
  • Specify fixed issues with Fixes #n, and mention issues worked on using #n
  • Include a screenshot for frontend-related PRs - see README or use your favorite screenshot tool

Merge Guidelines

  • Make the git commit message look sensible when squash-merging on GitHub (most likely: just copy your PR description).

dependabot Bot and others added 3 commits June 1, 2026 10:42
@dependabot
[ci] Bump the production-dependencies group across 1 directory with 1…
6f9927c 
…1 updates

Bumps the production-dependencies group with 11 updates in the /cluster/pulumi directory:

| Package | From | To |
| --- | --- | --- |
| [@google-cloud/sql](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-sql) | `0.24.0` | `0.24.1` |
| [@dotenvx/dotenvx](https://github.com/dotenvx/dotenvx) | `1.61.0` | `1.68.1` |
| [@pulumi/gcp](https://github.com/pulumi/pulumi-gcp) | `9.18.0` | `9.25.0` |
| [@pulumi/kubernetes](https://github.com/pulumi/pulumi-kubernetes) | `4.28.0` | `4.31.1` |
| [@pulumi/pulumi](https://github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs) | `3.230.0` | `3.243.0` |
| [@pulumi/random](https://github.com/pulumi/pulumi-random) | `4.19.2` | `4.21.0` |
| [@pulumi/github](https://github.com/pulumi/pulumi-github) | `6.13.1` | `6.14.0` |
| [auth0](https://github.com/auth0/node-auth0) | `5.6.0` | `5.10.0` |
| [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.4.3` |
| [@pulumi/auth0](https://github.com/pulumi/pulumi-auth0) | `3.39.0` | `3.44.0` |
| [@pulumi/policy](https://github.com/pulumi/pulumi-policy) | `1.20.0` | `1.21.0` |



Updates `@google-cloud/sql` from 0.24.0 to 0.24.1
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-sql/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/v0.24.1/packages/google-cloud-sql)

Updates `@dotenvx/dotenvx` from 1.61.0 to 1.68.1
- [Release notes](https://github.com/dotenvx/dotenvx/releases)
- [Changelog](https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md)
- [Commits](dotenvx/dotenvx@v1.61.0...v1.68.1)

Updates `@pulumi/gcp` from 9.18.0 to 9.25.0
- [Release notes](https://github.com/pulumi/pulumi-gcp/releases)
- [Changelog](https://github.com/pulumi/pulumi-gcp/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-gcp@v9.18.0...v9.25.0)

Updates `@pulumi/kubernetes` from 4.28.0 to 4.31.1
- [Release notes](https://github.com/pulumi/pulumi-kubernetes/releases)
- [Changelog](https://github.com/pulumi/pulumi-kubernetes/blob/master/CHANGELOG.md)
- [Commits](pulumi/pulumi-kubernetes@v4.28.0...v4.31.1)

Updates `@pulumi/pulumi` from 3.230.0 to 3.243.0
- [Release notes](https://github.com/pulumi/pulumi/releases)
- [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pulumi/pulumi/commits/v3.243.0/sdk/nodejs)

Updates `@pulumi/random` from 4.19.2 to 4.21.0
- [Release notes](https://github.com/pulumi/pulumi-random/releases)
- [Changelog](https://github.com/pulumi/pulumi-random/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-random@v4.19.2...v4.21.0)

Updates `@pulumi/github` from 6.13.1 to 6.14.0
- [Release notes](https://github.com/pulumi/pulumi-github/releases)
- [Changelog](https://github.com/pulumi/pulumi-github/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-github@v6.13.1...v6.14.0)

Updates `auth0` from 5.6.0 to 5.10.0
- [Release notes](https://github.com/auth0/node-auth0/releases)
- [Changelog](https://github.com/auth0/node-auth0/blob/master/CHANGELOG.md)
- [Commits](auth0/node-auth0@v5.6.0...v5.10.0)

Updates `zod` from 4.3.6 to 4.4.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.6...v4.4.3)

Updates `@pulumi/auth0` from 3.39.0 to 3.44.0
- [Release notes](https://github.com/pulumi/pulumi-auth0/releases)
- [Changelog](https://github.com/pulumi/pulumi-auth0/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-auth0@v3.39.0...v3.44.0)

Updates `@pulumi/policy` from 1.20.0 to 1.21.0
- [Changelog](https://github.com/pulumi/pulumi-policy/blob/main/CHANGELOG.md)
- [Commits](pulumi/pulumi-policy@v1.20.0...v1.21.0)

---
updated-dependencies:
- dependency-name: "@dotenvx/dotenvx"
  dependency-version: 1.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@google-cloud/sql"
  dependency-version: 0.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@pulumi/auth0"
  dependency-version: 3.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/gcp"
  dependency-version: 9.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/github"
  dependency-version: 6.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/kubernetes"
  dependency-version: 4.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/policy"
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/pulumi"
  dependency-version: 3.243.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/random"
  dependency-version: 4.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: auth0
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@krzysztofczyz-da
[ci] add packages
cc00f6a 
Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>
@krzysztofczyz-da
[ci] update expected files
f27b3ac 
Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>
@canton-network-da

canton-network-da commented Jun 1, 2026

Copy link
Copy Markdown
Contributor

[backport] Reminder

Please consider backporting to the following branches:

  • release-line-0.6.6
  • release-line-0.6.5
  • release-line-0.6.4
  • release-line-0.6.3

▶️ Please check the boxes for branches that you wish to backport to and backport PRs will
automatically be created when you merge this PR.

And your PR is currently against base branch: main.

Note: Any PR comment containing [backport] will be considered for auto-backporting upon merge,
you can always add those manually for PRs that did not get these reminders. You can also edit
this comment manually and add more branches that this should be backported to.

@krzysztofczyz-da

krzysztofczyz-da commented Jun 1, 2026

Copy link
Copy Markdown
Contributor Author

/cluster_test

@github-actions

github-actions Bot commented Jun 1, 2026

Copy link
Copy Markdown

Deploy cluster test triggered for Commit f27b3ac61b16f259bcb244dab9304ef428126a90 in , please contact a Contributor to approve it in CircleCI: https://app.circleci.com/pipelines/github/DACH-NY/canton-network-internal/67933

@krzysztofczyz-da
[ci] update nix
cd1faee 
Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>
@krzysztofczyz-da
[ci] fix nix
b178f2e 
Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>
@krzysztofczyz-da
[ci] fix: add helm-unittest platform symlinks for v1.1.0 compat
a2231a1 
Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>
@krzysztofczyz-da
[ci] update the jwt problem line
01ddd39 
Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>
@krzysztofczyz-da
[ci] Change auth message
ad154ac 
Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>
@krzysztofczyz-da
Merge branch 'main' into kczyz/nix-update-2
0a0dd35
@krzysztofczyz-da
[ci] test commit
b6bafbd 
Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>
@krzysztofczyz-da
[ci] test commit
434326e 
Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>
martinflorian-da
martinflorian-da approved these changes Jun 3, 2026
View reviewed changes

@martinflorian-da martinflorian-da left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice, thanks for pushing that through!

Please make some noise on Slack about this as historically pulumi upgrades have caused issues for CI cluster tests and deployments older release branches. Might also just consider backporting; not sure how painful that will be.

@krzysztofczyz-da krzysztofczyz-da merged commit 3d744e3 into main Jun 3, 2026
125 of 128 checks passed
@krzysztofczyz-da krzysztofczyz-da deleted the kczyz/nix-update-2 branch June 3, 2026 11:23
krzysztofczyz-da added a commit that referenced this pull request Jun 3, 2026
@krzysztofczyz-da
[ci] Revert "Update nix&pulumi (#5761)"
324b351 
This reverts commit 3d744e3.
krzysztofczyz-da added a commit that referenced this pull request Jun 3, 2026
@krzysztofczyz-da
Revert "Update nix&pulumi (#5761)" (#5808)
128d61d 
* [ci] Revert "Update nix&pulumi (#5761)"

This reverts commit 3d744e3.

* [ci] fix issues

Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>

---------

Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@martinflorian-da martinflorian-da martinflorian-da approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@krzysztofczyz-da @canton-network-da @martinflorian-da