Update first-party Pulumi dependencies - #2128
Open
pulumi-renovate[bot] wants to merge 1 commit into
Open
Conversation
Contributor
Author
|
Contributor
Does the PR have any schema changes?Looking good! No breaking changes found. Maintainer note: consult the runbook for dealing with any breaking changes. |
pulumi-renovate
Bot
force-pushed
the
renovate/pulumi
branch
8 times, most recently
from
February 25, 2026 14:51
8bb0f9c to
a303d59
Compare
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #2128 +/- ##
==============================
==============================
☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
pulumi-renovate
Bot
force-pushed
the
renovate/pulumi
branch
17 times, most recently
from
February 25, 2026 23:09
8fa8d21 to
6fbdd98
Compare
pulumi-renovate
Bot
force-pushed
the
renovate/pulumi
branch
29 times, most recently
from
February 27, 2026 00:59
7a6a739 to
2a0888b
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.5.0→3.8.0^3.0.0→3.8.0^0.2.0→0.2.04.19.0→4.33.03.173.0→3.255.03.144.1→3.255.04.16.8→4.21.17.*→7.4*v0.13.0→v0.26.0v0.21.0→v0.26.0v0.17.0→v0.26.0v0.6.0→v0.7.0v7.25.0→v7.40.0v7.1.0→v7.40.0v7.25.0→v7.40.0v3.101.0→v3.109.0v4.2.0→v4.3.0v4.0.0→v4.3.0v4.9.1→v4.33.0v4.19.0→v4.33.0v3.162.0→v3.255.0v3.220.0→v3.255.0>=7.25.0,<7.26.0→>=7.40.0,<7.41.0>=3.5.0,<3.6.0→>=3.8.0,<3.9.0>=4.2.0,<4.3.0→>=4.3.0,<4.4.0v1.3.1→v1.3.2Release Notes
pulumi/pulumi-awsx (@pulumi/awsx)
v3.8.0Compare Source
What's Changed
Full Changelog: pulumi/pulumi-awsx@v3.7.0...v3.8.0
v3.7.0Compare Source
What's Changed
New Contributors
Full Changelog: pulumi/pulumi-awsx@v3.6.0...v3.7.0
v3.6.0Compare Source
What's Changed
Full Changelog: pulumi/pulumi-awsx@v3.5.0...v3.6.0
pulumi/pulumi-kubernetes (@pulumi/kubernetes)
v4.33.0Compare Source
Added
takeOwnershiptokubernetes.helm.sh/v3:Release. When set, Helm skips the resource-conflict check and adopts existing resources into the release (equivalent tohelm upgrade/helm install --take-ownership).includeHookstokubernetes.helm.sh/v4:Chart. When set together with the provider'srenderYamlToDirectory, Helm hook resources (annotatedhelm.sh/hook) are included in the rendered output instead of being dropped, so that another tool (e.g. Argo CD) can apply them. Test hooks (helm.sh/hook: test) are excluded, and the flag has no effect outside of render mode. This only brings render mode up to par withhelm template; it does not implement full Helm hook lifecycle support (ordering, weights, delete policies, execution), so #3284 remains open.Changed
skipAwaitdefaults tofalseonyaml/v2.ConfigFile,yaml/v2.ConfigGroup, andkustomize/v2.Directory.v4.32.0Compare Source
Fixed
kubernetes.io/service-account-tokenSecret with a non-existent ServiceAccount.Changed
v4.31.1Compare Source
Changed
github.com/go-git/go-git/v5to v5.19.1 (SECURITY).v4.31.0Compare Source
Added
helmmapping forterraformconversion sopulumi import --from terraformandpulumi convert --from terraformrecognizehelm_releaseand emitkubernetes:helm.sh/v3:Release.Listprovider RPC and advertiselistInputs(namespace,name,labelSelector,fieldSelector) on every non-nested resource.namespaceis omitted fromlistInputson cluster-scoped kinds. Seedocs/list-rpc-semantics.mdfor design notes.Fixed
Parameterize(Value)so subsequent runs can reconstruct the CRD schema from saved state, and flatten array-of-objects in OpenAPI specs so nested fields likespec.listenersgenerate typed args.Changed
v4.30.0Compare Source
Fixed
Previously, the resources field was incorrectly typed as a
stringin the schema. This fix updates the type to an array ofAny, aligning the schema with the provider's Go implementation (pulumi.ArrayOutput). This resolves a regression that caused the Kustomize v2 resource to fail in the Python SDK.valueYamlFilesnull handling. DeprecateallowNullValues(no longer needed).Changed
v4.29.0Compare Source
Fixed
#2926 Use client-side create for new resources instead of server-side apply.
Users may observe stricter errors on some Create operations. Please read carefully.
When a resource already exists in the cluster, the API server now returns an AlreadyExists error instead of silently updating the existing object.
This prevents data loss from create-then-delete scenarios (e.g. renaming a Pulumi resource or replacing an explicitly-named resource).
A new provider config option
upsertExistingObjects(defaultfalse) restores the previous upsert behavior for users who intentionally adopt existing cluster resources.To manage fields on existing objects without owning their lifecycle, use Patch resources (e.g.
NamespacePatch).Added
enablePatchForceprovider config option to force SSA patch conflicts on a per-stack basis.Changed
v4.28.0Compare Source
Changed
v4.27.0Compare Source
Fixed
Added
Chart v4andRelease v3will now login to private OCIregistries as expected.
(#2911 and #1914)
v4.26.0Compare Source
Fixed
#4122 Implements a new provider config option,
alwaysRender, which setsDiff_Someto true when used in combination withrenderYAMLtoDirectory.This allows for user-defined opt-in behavior for YAML manifests to be idempotently generated on every
pulumi up, and for Update() to show these changes to a user.Fixed a race condition in StatefulSet await logic where Pulumi could
incorrectly report a rollout as complete before the controller had processed
the update. This occurred when Pulumi checked status fields before the
controller updated
observedGeneration, causing stale "ready" values to betrusted.
Fixed a regression of
#2943 which could
cause Deployments to erroneously report diffs.
Changed
Upgraded
helm.sh/helmto v3.18.6. (#3969)#4156 Upgrade Kubernetes schema and libraries to v1.35.1
v4.25.0Compare Source
v4.24.1Compare Source
Fixed
Changed
helm.sh/helmto v3.18.6. (#3969)v4.24.0Compare Source
Added
plainHttpoption to thev4.Chartresource. (#3250)Changed
The
pulumi.com/waitForannotation now uses anRFC9535-compliant JSONPath
parser. This makes it possible to wait for more complex scenarios.
For example:
To wait for a Pod's
status.phaseto be "Running" or "Succeeded":pulumi.com/waitFor: "jsonpath={.status[?@​ == 'Running' || @​ == 'Succeeded' ]}"To wait for for an object to have a "Failed" or "Complete" condition with
a "True" value:
pulumi.com/waitFor: "jsonpath={.conditions[?(@​.type=='Failed'||@​.type=='Complete')].status}=True(Tools like jsonpath.com are very helpful for
ensuring your JSONPath expression works as expected.)
Importantly, please note that
kubectl wait --for=jsonpath=...supports onlya subset of RFC9535. This means some complex
waitForannotations will notbe reproducible with
kubectl.Existing expressions should continue to work normally with one notable
exception: a selector like
.items[]now requires an explicit wildcard, i.e..items[*].As a reminder, the
pulumi.com/waitForannotation is experimental andsubject to change. Similarly, RFC9535 is still only proposed and may also
change in the future.
enableConfigMapMutableandenableSecretMutableare now stable.(#3886)
Fixed
Helm resources all now use the correct
registry/config.jsonfile forcredentials. For backward-compatibility
registry.jsonis preferred ifit exists. (#3606)
Fixed an issue where deletions could take longer than necessary. (#3317)
Significantly reduced memory usage. (#3713)
Fixed incorrect deprecation warnings for VolumeAttributesClass. (#3772)
SecretPatch inputs are now automatically marked as secret.
v4.23.0Compare Source
Changed
v4.22.2Compare Source
Fixed
valueYamlFilesfield inhelm.v3.Releaseresources are nil (#3601)v4.22.1Compare Source
Fixed
v4.22.0Compare Source
Changed
Fixed
v4.21.1Compare Source
Added
v4.21.0Compare Source
Changed
pulumi-javato versionv1.0.0(#3436)v4.20.0Compare Source
Added
(#3363)
pulumi/pulumi (@pulumi/pulumi)
v3.255.0Compare Source
Features
--extensionflag to package commands for extension-parameterized packages, reinstalled fromPulumi.yamlonpulumi installprovidersoption of the parent named on the request, matching the resolution applied to resource registrations #24016--resourcesto refer to existing resources in state indoinput expressions #24037Bug Fixes
providersoption of acomponentblock to the resources and invokes it declares #24016pulumi installprocesses sharing aPULUMI_HOMEintermittently failing with a missing provider executable error #24080Improvements
--summaryflag topulumi stack history eventsthat reduces a past update's events to the same summary shape as a livepulumi up --output json, extended with error diagnostics and failed-resource markers #23960pulumi neo --debug-updateorpulumi neo --debug-previewto investigate the failed operation #24075UV_PROJECT_ENVIRONMENTto override the virtualenv path if uv is used #24077v3.254.0Compare Source
Features
pulumi logs sharecommand for sharing logs with Pulumi #22546pulumi stack migrateto migrate a stack from another backend to the currently logged-in backend, including re-encrypting config secrets and stack state under the target secrets provider #22902--override-envflag toup,preview,destroy, andrefreshto substitute imported environments for a single run without editing the stack config #23562pulumi neo acpto run Neo as an Agent Client Protocol agent over stdio for ACP-capable editors, with read-only and plan mode exposed as session config options #23886pulumi neostream and message-send failures, and addpulumi neo resumewith chat history #23835pulumi neo#23932upsertto do, allowing resources to be statefully created or updated in a stack #23813pulumi.runfor natively awaited Python program entrypoints that can return stack outputs #23945--runtime-optionstopulumi policy new#23992Bug Fixes
pulumi neoconnected during quiet periods when the event stream only receives keep-alive heartbeats #23935Improvements
ls,rm,delete,mv,update,modify,createandsetupaliases to list/remove/move/edit/new commands and makingstate removeandpackage removethe canonical names withdeletekept as an alias #23903pulumiis run without a command, matching the behavior of other group commands #23848onErrorresource hooks in generated Go, NodeJS, and Python programs and in the PCL runtime, retrying the failed operation when the hook command exits successfully #23839-v<n> --logflowno longer produce separate log files for plugins #23938pulumi new --help, which required a slow template listing before help could display #23973Miscellaneous
v3.253.0Compare Source
Features
Bug Fixes
Improvements
--versionflag to thepulumicommand that prints the version, same aspulumi version#23898envcommands with the CLI naming guidelines, makinglist,removeandmovethe canonical names withls,rm,deleteandmvkept as aliases #23901v3.252.0Compare Source
Features
importto the generated automation APIs for NodeJS, Python and Go #23876Bug Fixes
pulumi envis given an unknown subcommand or no subcommand at all #23814pulumi aboutno longer require the passphrase for passphrase-encrypted stacks #23820pulumi logs <command>showing the log for the currently running command #23887Improvements
Configuration
📅 Schedule: (UTC)
* * * * 1-5)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate.