Skip to content

Update example program dependencies - #2369

Open
pulumi-renovate[bot] wants to merge 1 commit into
masterfrom
renovate/examples
Open

Update example program dependencies#2369
pulumi-renovate[bot] wants to merge 1 commit into
masterfrom
renovate/examples

Conversation

@pulumi-renovate

@pulumi-renovate pulumi-renovate Bot commented Aug 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@pulumi/awsx (source) 3.5.0 → 3.9.0 age confidence dependencies minor
@pulumi/awsx (source) ^3.0.0 → 3.9.0 age confidence dependencies pin
@pulumi/kubernetes (source) 4.19.0 → 4.34.0 age confidence dependencies minor
@pulumi/pulumi (source) 3.144.1 → 3.260.0 age confidence dependencies minor
@pulumi/random (source) 4.16.8 → 4.21.1 age confidence dependencies minor
Pulumi.Aws (source) 7.* → 7.4* age confidence nuget minor
pulumi-aws >=7.25.0,<7.26.0 → >=7.43.0,<7.44.0 age confidence minor
pulumi-awsx >=3.5.0,<3.6.0 → >=3.9.0,<3.10.0 age confidence minor
pulumi-eks >=4.2.0,<4.3.0 → >=4.3.0,<4.4.0 age confidence minor

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Release Notes

pulumi/pulumi-awsx (@​pulumi/awsx)

v3.9.0

Compare Source

What's Changed
New Contributors

Full Changelog: pulumi/pulumi-awsx@v3.8.0...v3.9.0

v3.8.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-awsx@v3.7.0...v3.8.0

v3.7.0

Compare Source

What's Changed

New Contributors

Full Changelog: pulumi/pulumi-awsx@v3.6.0...v3.7.0

v3.6.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-awsx@v3.5.0...v3.6.0

pulumi/pulumi-kubernetes (@​pulumi/kubernetes)

v4.34.0

Compare Source

Added
  • Support adding CustomResourceDefinitions as an extension of the base kubernetes provider via pulumi package add <provider> --extension. Extension-served resources alias their kubernetes:-namespaced token, so state written by a crd2pulumi-generated SDK is adopted rather than replaced.
Changed
  • Upgrade Kubernetes schema and libraries to v1.36.3.
  • Upgrade Kubernetes schema and libraries to v1.36.4.
  • Upgrade Kubernetes schema and libraries to v1.37.0. See the Kubernetes 1.37 release notes for upstream API changes.
Fixed

  • Restore scheduling.k8s.io/v1alpha1 Workload, which the Kubernetes 1.36 upgrade dropped from the SDKs, and retain scheduling.k8s.io/v1alpha2 PodGroup and Workload, which Kubernetes 1.37 removes from its OpenAPI specification. Both remain available to clusters that still serve them, and scheduling.k8s.io/v1beta1 now aliases the older versions so that existing resources migrate in place rather than being replaced.

  • #​4524 Fix pulumi.com/waitFor rejecting JSONPath filters that use !=, >= or <=. The expression was split on every = that was not part of ==, so jsonpath={.status.conditions[?(@&#8203;.type!="Failed")].status}=True failed to parse. The path and value are now separated structurally, which also allows braces inside string literals. Comparing one path against another (jsonpath={.status.readyReplicas}={.spec.replicas}) is still unsupported, but now reports an error instead of silently never matching.

v4.33.0

Compare Source

Added
  • #​3595 Add takeOwnership to kubernetes.helm.sh/v3:Release. When set, Helm skips the resource-conflict check and adopts existing resources into the release (equivalent to helm upgrade/helm install --take-ownership).
  • #​3284 Add includeHooks to kubernetes.helm.sh/v4:Chart. When set together with the provider's renderYamlToDirectory, Helm hook resources (annotated helm.sh/hook) are included in the rendered output instead of being dropped, so that another tool (e.g. Argo CD) can apply them. Test hooks (helm.sh/hook: test) are excluded, and the flag has no effect outside of render mode. This only brings render mode up to par with helm template; it does not implement full Helm hook lifecycle support (ordering, weights, delete policies, execution), so #​3284 remains open.
Changed
  • Upgrade Kubernetes schema and libraries to v1.36.2.
  • #​4454 Document that skipAwait defaults to false on yaml/v2.ConfigFile, yaml/v2.ConfigGroup, and kustomize/v2.Directory.

v4.32.0

Compare Source

Fixed
  • #​3176 ensure Helm-installed CRDs can be resolved during preview
  • #​4396 Fix panic when creating a kubernetes.io/service-account-token Secret with a non-existent ServiceAccount.
  • #​4394 Don't fail YAML render when a custom resource's namespace scope can't be determined offline. The resource is rendered without a namespace and a warning is logged, rather than erroring.
Changed
  • Align the documented minimum supported Kubernetes version and local SDK install instructions with current provider behavior.

v4.31.1

Compare Source

Changed
  • #​4364 Update github.com/go-git/go-git/v5 to v5.19.1 (SECURITY).
  • Update first-party Pulumi dependencies to v3.242.0.

v4.31.0

Compare Source

Added
  • #​2744 Advertise a helm mapping for terraform conversion so pulumi import --from terraform and pulumi convert --from terraform recognize helm_release and emit kubernetes:helm.sh/v3:Release.
  • #​4332 Implement the List provider RPC and advertise listInputs (namespace, name, labelSelector, fieldSelector) on every non-nested resource. namespace is omitted from listInputs on cluster-scoped kinds. See docs/list-rpc-semantics.md for design notes.
Fixed
  • #​4261 Fix CRD parameterization: implement Parameterize(Value) so subsequent runs can reconstruct the CRD schema from saved state, and flatten array-of-objects in OpenAPI specs so nested fields like spec.listeners generate typed args.
Changed
  • Upgrade Kubernetes schema and libraries to v1.36.1.

v4.30.0

Compare Source

Fixed
  • #​4295Fix kustomize.v2.Directory resource output type in the schema to properly support array outputs.
    Previously, the resources field was incorrectly typed as a string in the schema. This fix updates the type to an array of Any, aligning the schema with the provider's Go implementation (pulumi.ArrayOutput). This resolves a regression that caused the Kustomize v2 resource to fail in the Python SDK.
  • #​2997 Stop stripping null values when unmarshaling, fixing Helm chart default deletion and valueYamlFiles null handling. Deprecate allowNullValues (no longer needed).
Changed
  • Upgrade Kubernetes schema and libraries to v1.35.4.
  • Upgrade Kubernetes schema and libraries to v1.36.0.

v4.29.0

Compare Source

Fixed

  • #​2926 Use client-side create for new resources instead of server-side apply.

    Users may observe stricter errors on some Create operations. Please read carefully.

    When a resource already exists in the cluster, the API server now returns an AlreadyExists error instead of silently updating the existing object.
    This prevents data loss from create-then-delete scenarios (e.g. renaming a Pulumi resource or replacing an explicitly-named resource).
    A new provider config option upsertExistingObjects (default false) restores the previous upsert behavior for users who intentionally adopt existing cluster resources.
    To manage fields on existing objects without owning their lifecycle, use Patch resources (e.g. NamespacePatch).

Added
  • #​2280 Add enablePatchForce provider config option to force SSA patch conflicts on a per-stack basis.
Changed
  • Upgrade Kubernetes schema and libraries to v1.35.3.

v4.28.0

Compare Source

Changed
  • Upgrade Kubernetes schema and libraries to v1.35.2.

v4.27.0

Compare Source

Fixed
  • #​4181 Fix PVC timeout when updating to a storage class with WaitForFirstConsumer bind mode.
Added
  • #​3661 Support for OCI login inside the provider process. Providing a username/password to Chart v4 and Release v3 will now login to private OCI
    registries as expected.
    (#​2911 and #​1914)

v4.26.0

Compare Source

Fixed

  • #​4122 Implements a new provider config option, alwaysRender, which sets Diff_Someto true when used in combination with renderYAMLtoDirectory.
    This allows for user-defined opt-in behavior for YAML manifests to be idempotently generated on every pulumi up, and for Update() to show these changes to a user.

  • Fixed a race condition in StatefulSet await logic where Pulumi could
    incorrectly report a rollout as complete before the controller had processed
    the update. This occurred when Pulumi checked status fields before the
    controller updated observedGeneration, causing stale "ready" values to be
    trusted.

  • Fixed a regression of
    #​2943 which could
    cause Deployments to erroneously report diffs.

Changed

  • Upgraded helm.sh/helm to v3.18.6. (#​3969)

  • #​4156 Upgrade Kubernetes schema and libraries to v1.35.1

v4.25.0

Compare Source

v4.24.1

Compare Source

Fixed
  • Fixed a regression of #​2943 which could cause Deployments to erroneously report diffs.
Changed
  • Upgraded helm.sh/helm to v3.18.6. (#​3969)

v4.24.0

Compare Source

Added
  • Added a plainHttp option to the v4.Chart resource. (#​3250)
Changed

  • The pulumi.com/waitFor annotation now uses an
    RFC9535-compliant JSONPath
    parser. This makes it possible to wait for more complex scenarios.

    For example:

    • To wait for a Pod's status.phase to be "Running" or "Succeeded":

      pulumi.com/waitFor: "jsonpath={.status[?@&#8203; == 'Running' || @&#8203; == 'Succeeded' ]}"

    • To wait for for an object to have a "Failed" or "Complete" condition with
      a "True" value:

      pulumi.com/waitFor: "jsonpath={.conditions[?(@&#8203;.type=='Failed'||@&#8203;.type=='Complete')].status}=True

    (Tools like jsonpath.com are very helpful for
    ensuring your JSONPath expression works as expected.)

    Importantly, please note that kubectl wait --for=jsonpath=... supports only
    a subset of RFC9535. This means some complex waitFor annotations will not
    be reproducible with kubectl.

    Existing expressions should continue to work normally with one notable
    exception: a selector like .items[] now requires an explicit wildcard, i.e.
    .items[*].

    As a reminder, the pulumi.com/waitFor annotation is experimental and
    subject to change. Similarly, RFC9535 is still only proposed and may also
    change in the future.

  • enableConfigMapMutable and enableSecretMutable are now stable.
    (#​3886)

Fixed

  • Helm resources all now use the correct registry/config.json file for
    credentials. For backward-compatibility registry.json is preferred if
    it exists. (#​3606)

  • Fixed an issue where deletions could take longer than necessary. (#​3317)

  • Significantly reduced memory usage. (#​3713)

  • Fixed incorrect deprecation warnings for VolumeAttributesClass. (#​3772)

  • SecretPatch inputs are now automatically marked as secret.

v4.23.0

Compare Source

Changed
  • Updated Kubernetes schemas and libraries to v1.33.0. (#​3619)

v4.22.2

Compare Source

Fixed
  • Fix panic when valueYamlFiles field in helm.v3.Release resources are nil (#​3601)

v4.22.1

Compare Source

Fixed
  • Fix race condition in Deleted condition (#​3550)

v4.22.0

Compare Source

Changed
  • Update Pulumi dependency to v3.153.1 (#​3534)
  • Update ESC dependency to v0.13.0 (#​3551)
Fixed
  • Fix race condition in Deleted condition. (#​3550)

v4.21.1

Compare Source

Added
  • Windows executable releases are now signed. (#​3455)

v4.21.0

Compare Source

Changed
  • Upgrade pulumi-java to version v1.0.0 (#​3436)

v4.20.0

Compare Source

Added
  • Added support for autonaming configuration specified by the engine.
    (#​3363)
pulumi/pulumi (@​pulumi/pulumi)

v3.260.0

Compare Source

3.260.0 (2026-08-28)
Features
  • [cli/deployment] Make pulumi deployment settings get render every source kind and show environment variable values, changing the --output=json shape of environmentVariables from a list of names to a list of objects #​24284
  • [sdk/go] Support Go 1.27 #​24401
  • [cli/state] Add pulumi state promote to turn stateful snippets into Pulumi program code #​24453
Bug Fixes
  • [engine] Replace resources whose deletedWith target is being replaced, instead of leaving them orphaned in state #​23818
  • [sdk/python] Serialize typed object stack outputs with their wire-format (camelCase) property names, matching other language SDKs #​24246
  • [cli/neo] Cancelling a task now interrupts a running local tool call instead of waiting for it to finish #​24268
  • [programgen/python] Access schema properties whose names contain hyphens as attributes under their Python names instead of subscripting #​24300
  • [programgen/go] Generate valid struct field names for properties whose names contain hyphens #​24300
  • [sdkgen/nodejs] Quote property names that are not legal identifiers (e.g. kebab-case) in generated declarations and use bracket access for them #​24300
  • [cli/neo] Cancelling a local tool call no longer leaves the TUI stuck on "Thinking..." with input blocked #​24318
  • [sdk/go] Use resolved environment names when evaluating ESC imports #​24375
  • [codegen/pcl] Allow output-typed values for the id attribute of a read resource #​24386
  • [sdkgen/nodejs] Register resolvers for output-only properties in generated Resource.get so they resolve as unknown during preview when the id is unknown #​24386
  • [engine] Avoid replacing imported resources when an input changes from plain to a secret or output-wrapped value with the same inner value #​24387
  • [backend/diy] Keep DIY backend stacks readable when checkpoint compression transitions fail #​24383
  • [cli/stack] Give a clearer error message when selecting a stack by name outside a directory with a Pulumi.yaml project file #​24394
  • [sdk/python] Propagate runtime context across thread boundaries #​24403
  • [programgen/python] Name plain function input object types without the Args suffix, matching the name the generated SDK exports #​24440
  • [cli/new] Reject zip template entries that resolve outside the extraction directory #​24447
  • [cli/package] Keep a package's pluginDownloadURL in SDKs regenerated by pulumi install #​24432
  • [sdk/python] Preserve all providers passed to remote components in Python programs #​24443
  • [sdkgen] Apply schema defaults to generated Python and Node.js function inputs #​24452
  • [programgen/python] Mark required component inputs as required in generated Python TypedDicts #​24459
  • [programgen/python] Add type annotations for config variables default values coming from invokes #​24464
  • [programgen/python] Generate valid Python when a component with inputs instantiates another component #​24466
  • [cli/neo] Stop the running local tool immediately when a Neo task is cancelled and report it as cancelled #​24470
  • [programgen/python] Support final argument expansion for min and max in Python programs #​24471
Improvements
  • [cli] Treat adjacent character swaps as a single typo when suggesting commands #​23899
  • [sdk/python] Correctly resolve discriminated unions by their tag #​24352
  • [sdk/python] Allow transforms to be mocked #​24406
  • [sdk/nodejs] Allow transforms to be mocked #​24415
  • [sdk/go] Allow transforms to be mocked #​24416
  • [sdkgen] Allow hyphens in the member segment of tokens, so resource, object type and function names can be kebab-case #​24440
  • [cli] Print secret provider information with other stack information #​24430
  • [auto/python] Allow refresh, preview_refresh, and preview_destroy to request rich diffs #​24445
  • [engine] Cache provider mapping results on disk so repeated plans do not boot a provider to re-fetch an unchanged mapping #​24462
  • [sdk/python] Improve stack traces for providers #​24465
Miscellaneous

v3.259.0

Compare Source

Features
  • [cli/new] Show a single confirmation of project, stack, and config defaults in interactive pulumi new instead of prompting for each value #​24223
  • [cli] Introduce PULUMI_DEFAULT_ORGANIZATION to be able to set the default org #​24384
Bug Fixes
  • [cli/stack] Announce Created stack when creating a stack against the Pulumi Cloud backend #​24280
  • [cli] Retry pulumi neo cancellation requests that the service rejects and keep Esc responsive instead of showing "Cancelling..." forever #​24267
  • [cli/import] Generate a component resource definition when importing local components #​24294
  • [auto/nodejs] Remove Node.js Automation API output buffer limit #​24333
  • [sdk/go] Always emit the value and environment keys when serializing esc.Value and esc.Range, matching the fields the ESC OpenAPI contract marks required #​24346
  • [engine] Fix the engine returning extension package refs for non-parameterised packages against the same base #​24347
  • [cli/neo] Fix approval replies and mode changes being silently dropped when the outbound event queue is full #​24370
  • [codegen/go] Fix nondeterministic Go program codegen for objects that mix null and typed properties #​24366
  • [cli/do] Keep snippets when delete fails, so delete can be retried #​24271
  • [cli/package] Report every schema validation error when pulumi package add fails to bind a package schema #​24367
  • [programgen/python] Fix casing of local component outputs #​24379
  • [cli/policy] Make policy group ls respect the default org #​24385
Improvements
  • [cli] Explain which state backend pulumi login failed against, where that backend was configured, and how to change it #​24322
  • [backend/diy] Report the state backend URL as configured when it cannot be opened, adding the resolved form when normalization changed it, and name a local path a state directory rather than a bucket #​24335
  • [sdkgen/python] Type constant properties as Literal[value] instead of their primitive type #​24358
  • [cli/plugin] Add --parallel flag to pulumi plugin install #​24369
  • [cli] Fix progress bar rendering for parallel plugin installs #​24372

v3.258.0

Compare Source

Features
  • [cli] Add opt-in encryption of stored credentials with a key protected by the operating system, selected with PULUMI_CREDENTIAL_STORE #​24212
  • [cli/new] Ask for a cloud provider and language in interactive pulumi new instead of listing every template #​24226
  • [sdk/go] Add policyx.NewStackValidationPolicy and wire up the analyzer's AnalyzeStack RPC so Go policy packs can validate the full stack #​24232
Bug Fixes
  • [sdkgen/go] Generate valid Go package clauses for schema modules whose names contain hyphens #​24288
  • [sdkgen/nodejs] Export schema modules whose names contain hyphens under a valid sanitized identifier, including their type namespaces #​24288
  • [cli/import] pulumi preview --import-file no longer emits unknown values, and pulumi import rejects files that contain them #​24261
  • [auto/python

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • Monday through Friday (* * * * 1-5)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@pulumi-renovate pulumi-renovate Bot added dependencies Pull requests that update a dependency file impact/no-changelog-required This issue doesn't require a CHANGELOG update labels Aug 26, 2026
@pulumi-renovate

pulumi-renovate Bot commented Aug 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined
Command failed: make renovate
mise ERROR error parsing config file: /tmp/renovate/repos/github/pulumi/pulumi-eks/.config/mise.toml
mise ERROR Config files in /tmp/renovate/repos/github/pulumi/pulumi-eks/.config/mise.toml are not trusted.
Trust them with `mise trust`. See https://mise.jdx.dev/cli/trust.html for more information.
mise ERROR Version: 2026.8.14 linux-x64 (2026-08-26)
mise ERROR Run with --verbose or MISE_VERBOSE=1 for more information
make[1]: *** [Makefile:76: mise_env] Error 1
make: *** [Makefile:344: renovate] Error 2

@github-actions

github-actions Bot commented Aug 26, 2026

Copy link
Copy Markdown
Contributor

Does the PR have any schema changes?

Generated by schema-tools v0.8.1.

Looking good! No breaking changes found.
No new resources/functions/types.

Maintainer note: consult the runbook for dealing with any breaking changes.

@pulumi-renovate
pulumi-renovate Bot force-pushed the renovate/examples branch 3 times, most recently from d54d561 to 493ce1b Compare August 28, 2026 11:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file impact/no-changelog-required This issue doesn't require a CHANGELOG update

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants