Skip to content

Update first-party Pulumi dependencies - #2128

Open
pulumi-renovate[bot] wants to merge 1 commit into
masterfrom
renovate/pulumi
Open

Update first-party Pulumi dependencies#2128
pulumi-renovate[bot] wants to merge 1 commit into
masterfrom
renovate/pulumi

Conversation

@pulumi-renovate

@pulumi-renovate pulumi-renovate Bot commented Feb 25, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@pulumi/awsx (source) 3.5.03.8.0 age confidence dependencies minor
@pulumi/awsx (source) ^3.0.03.8.0 age confidence dependencies pin
@​pulumi/eslint-plugin ^0.2.00.2.0 age confidence devDependencies pin
@pulumi/kubernetes (source) 4.19.04.33.0 age confidence dependencies minor
@pulumi/pulumi (source) 3.173.03.255.0 age confidence dependencies minor
@pulumi/pulumi (source) 3.144.13.255.0 age confidence dependencies minor
@pulumi/random (source) 4.16.84.21.1 age confidence dependencies minor
Pulumi.Aws (source) 7.*7.4* age confidence nuget minor
github.com/pulumi/esc v0.13.0v0.26.0 age confidence indirect minor
github.com/pulumi/esc v0.21.0v0.26.0 age confidence indirect minor
github.com/pulumi/esc v0.17.0v0.26.0 age confidence indirect minor
github.com/pulumi/providertest v0.6.0v0.7.0 age confidence require minor
github.com/pulumi/pulumi-aws/sdk/v7 v7.25.0v7.40.0 age confidence require minor
github.com/pulumi/pulumi-aws/sdk/v7 v7.1.0v7.40.0 age confidence require minor
github.com/pulumi/pulumi-aws/sdk/v7 v7.25.0v7.40.0 age confidence indirect minor
github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3 v3.101.0v3.109.0 age confidence require minor
github.com/pulumi/pulumi-eks/sdk/v4 v4.2.0v4.3.0 age confidence require minor
github.com/pulumi/pulumi-eks/sdk/v4 v4.0.0v4.3.0 age confidence require minor
github.com/pulumi/pulumi-kubernetes/sdk/v4 v4.9.1v4.33.0 age confidence indirect minor
github.com/pulumi/pulumi-kubernetes/sdk/v4 v4.19.0v4.33.0 age confidence require minor
github.com/pulumi/pulumi/pkg/v3 v3.162.0v3.255.0 age confidence require minor
github.com/pulumi/pulumi/pkg/v3 v3.220.0v3.255.0 age confidence require minor
pulumi-aws >=7.25.0,<7.26.0>=7.40.0,<7.41.0 age confidence minor
pulumi-awsx >=3.5.0,<3.6.0>=3.8.0,<3.9.0 age confidence minor
pulumi-eks >=4.2.0,<4.3.0>=4.3.0,<4.4.0 age confidence minor
pulumi/verify-provider-release v1.3.1v1.3.2 age confidence action patch

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).


Release Notes

pulumi/pulumi-awsx (@​pulumi/awsx)

v3.8.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-awsx@v3.7.0...v3.8.0

v3.7.0

Compare Source

What's Changed
New Contributors

Full Changelog: pulumi/pulumi-awsx@v3.6.0...v3.7.0

v3.6.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-awsx@v3.5.0...v3.6.0

pulumi/pulumi-kubernetes (@​pulumi/kubernetes)

v4.33.0

Compare Source

Added
  • #​3595 Add takeOwnership to kubernetes.helm.sh/v3:Release. When set, Helm skips the resource-conflict check and adopts existing resources into the release (equivalent to helm upgrade/helm install --take-ownership).
  • #​3284 Add includeHooks to kubernetes.helm.sh/v4:Chart. When set together with the provider's renderYamlToDirectory, Helm hook resources (annotated helm.sh/hook) are included in the rendered output instead of being dropped, so that another tool (e.g. Argo CD) can apply them. Test hooks (helm.sh/hook: test) are excluded, and the flag has no effect outside of render mode. This only brings render mode up to par with helm template; it does not implement full Helm hook lifecycle support (ordering, weights, delete policies, execution), so #​3284 remains open.
Changed
  • Upgrade Kubernetes schema and libraries to v1.36.2.
  • #​4454 Document that skipAwait defaults to false on yaml/v2.ConfigFile, yaml/v2.ConfigGroup, and kustomize/v2.Directory.

v4.32.0

Compare Source

Fixed
  • #​3176 ensure Helm-installed CRDs can be resolved during preview
  • #​4396 Fix panic when creating a kubernetes.io/service-account-token Secret with a non-existent ServiceAccount.
  • #​4394 Don't fail YAML render when a custom resource's namespace scope can't be determined offline. The resource is rendered without a namespace and a warning is logged, rather than erroring.
Changed
  • Align the documented minimum supported Kubernetes version and local SDK install instructions with current provider behavior.

v4.31.1

Compare Source

Changed
  • #​4364 Update github.com/go-git/go-git/v5 to v5.19.1 (SECURITY).
  • Update first-party Pulumi dependencies to v3.242.0.

v4.31.0

Compare Source

Added
  • #​2744 Advertise a helm mapping for terraform conversion so pulumi import --from terraform and pulumi convert --from terraform recognize helm_release and emit kubernetes:helm.sh/v3:Release.
  • #​4332 Implement the List provider RPC and advertise listInputs (namespace, name, labelSelector, fieldSelector) on every non-nested resource. namespace is omitted from listInputs on cluster-scoped kinds. See docs/list-rpc-semantics.md for design notes.
Fixed
  • #​4261 Fix CRD parameterization: implement Parameterize(Value) so subsequent runs can reconstruct the CRD schema from saved state, and flatten array-of-objects in OpenAPI specs so nested fields like spec.listeners generate typed args.
Changed
  • Upgrade Kubernetes schema and libraries to v1.36.1.

v4.30.0

Compare Source

Fixed
  • #​4295Fix kustomize.v2.Directory resource output type in the schema to properly support array outputs.
    Previously, the resources field was incorrectly typed as a string in the schema. This fix updates the type to an array of Any, aligning the schema with the provider's Go implementation (pulumi.ArrayOutput). This resolves a regression that caused the Kustomize v2 resource to fail in the Python SDK.
  • #​2997 Stop stripping null values when unmarshaling, fixing Helm chart default deletion and valueYamlFiles null handling. Deprecate allowNullValues (no longer needed).
Changed
  • Upgrade Kubernetes schema and libraries to v1.35.4.
  • Upgrade Kubernetes schema and libraries to v1.36.0.

v4.29.0

Compare Source

Fixed
  • #​2926 Use client-side create for new resources instead of server-side apply.

    Users may observe stricter errors on some Create operations. Please read carefully.

    When a resource already exists in the cluster, the API server now returns an AlreadyExists error instead of silently updating the existing object.
    This prevents data loss from create-then-delete scenarios (e.g. renaming a Pulumi resource or replacing an explicitly-named resource).
    A new provider config option upsertExistingObjects (default false) restores the previous upsert behavior for users who intentionally adopt existing cluster resources.
    To manage fields on existing objects without owning their lifecycle, use Patch resources (e.g. NamespacePatch).

Added
  • #​2280 Add enablePatchForce provider config option to force SSA patch conflicts on a per-stack basis.
Changed
  • Upgrade Kubernetes schema and libraries to v1.35.3.

v4.28.0

Compare Source

Changed
  • Upgrade Kubernetes schema and libraries to v1.35.2.

v4.27.0

Compare Source

Fixed
  • #​4181 Fix PVC timeout when updating to a storage class with WaitForFirstConsumer bind mode.
Added
  • #​3661 Support for OCI login inside the provider process. Providing a username/password to Chart v4 and Release v3 will now login to private OCI
    registries as expected.
    (#​2911 and #​1914)

v4.26.0

Compare Source

Fixed
  • #​4122 Implements a new provider config option, alwaysRender, which sets Diff_Someto true when used in combination with renderYAMLtoDirectory.
    This allows for user-defined opt-in behavior for YAML manifests to be idempotently generated on every pulumi up, and for Update() to show these changes to a user.

  • Fixed a race condition in StatefulSet await logic where Pulumi could
    incorrectly report a rollout as complete before the controller had processed
    the update. This occurred when Pulumi checked status fields before the
    controller updated observedGeneration, causing stale "ready" values to be
    trusted.

  • Fixed a regression of
    #​2943 which could
    cause Deployments to erroneously report diffs.

Changed
  • Upgraded helm.sh/helm to v3.18.6. (#​3969)

  • #​4156 Upgrade Kubernetes schema and libraries to v1.35.1

v4.25.0

Compare Source

v4.24.1

Compare Source

Fixed
  • Fixed a regression of #​2943 which could cause Deployments to erroneously report diffs.
Changed
  • Upgraded helm.sh/helm to v3.18.6. (#​3969)

v4.24.0

Compare Source

Added
  • Added a plainHttp option to the v4.Chart resource. (#​3250)
Changed
  • The pulumi.com/waitFor annotation now uses an
    RFC9535-compliant JSONPath
    parser. This makes it possible to wait for more complex scenarios.

    For example:

    • To wait for a Pod's status.phase to be "Running" or "Succeeded":

      pulumi.com/waitFor: "jsonpath={.status[?@&#8203; == 'Running' || @&#8203; == 'Succeeded' ]}"

    • To wait for for an object to have a "Failed" or "Complete" condition with
      a "True" value:

      pulumi.com/waitFor: "jsonpath={.conditions[?(@&#8203;.type=='Failed'||@&#8203;.type=='Complete')].status}=True

    (Tools like jsonpath.com are very helpful for
    ensuring your JSONPath expression works as expected.)

    Importantly, please note that kubectl wait --for=jsonpath=... supports only
    a subset of RFC9535. This means some complex waitFor annotations will not
    be reproducible with kubectl.

    Existing expressions should continue to work normally with one notable
    exception: a selector like .items[] now requires an explicit wildcard, i.e.
    .items[*].

    As a reminder, the pulumi.com/waitFor annotation is experimental and
    subject to change. Similarly, RFC9535 is still only proposed and may also
    change in the future.

  • enableConfigMapMutable and enableSecretMutable are now stable.
    (#​3886)

Fixed
  • Helm resources all now use the correct registry/config.json file for
    credentials. For backward-compatibility registry.json is preferred if
    it exists. (#​3606)

  • Fixed an issue where deletions could take longer than necessary. (#​3317)

  • Significantly reduced memory usage. (#​3713)

  • Fixed incorrect deprecation warnings for VolumeAttributesClass. (#​3772)

  • SecretPatch inputs are now automatically marked as secret.

v4.23.0

Compare Source

Changed
  • Updated Kubernetes schemas and libraries to v1.33.0. (#​3619)

v4.22.2

Compare Source

Fixed
  • Fix panic when valueYamlFiles field in helm.v3.Release resources are nil (#​3601)

v4.22.1

Compare Source

Fixed
  • Fix race condition in Deleted condition (#​3550)

v4.22.0

Compare Source

Changed
  • Update Pulumi dependency to v3.153.1 (#​3534)
  • Update ESC dependency to v0.13.0 (#​3551)
Fixed
  • Fix race condition in Deleted condition. (#​3550)

v4.21.1

Compare Source

Added
  • Windows executable releases are now signed. (#​3455)

v4.21.0

Compare Source

Changed
  • Upgrade pulumi-java to version v1.0.0 (#​3436)

v4.20.0

Compare Source

Added
  • Added support for autonaming configuration specified by the engine.
    (#​3363)
pulumi/pulumi (@​pulumi/pulumi)

v3.255.0

Compare Source

Features
  • [cli] Add an --extension flag to package commands for extension-parameterized packages, reinstalled from Pulumi.yaml on pulumi install
  • [cli] Project files to disk and surface their paths as environment variables for all output formats when opening an ESC environment #​23993
  • [engine] Resolve an invoke's provider from the providers option of the parent named on the request, matching the resolution applied to resource registrations #​24016
  • [cli/do] Add --resources to refer to existing resources in state in do input expressions #​24037
Bug Fixes
  • [programgen/nodejs] Parent an invoke written inside a component to that component, so it resolves the component's providers #​24017
  • [pcl] Apply the providers option of a component block to the resources and invokes it declares #​24016
  • [cli/import] Fix import file generation when parent resources share names #​24069
  • [cli] Fix parallel pulumi install processes sharing a PULUMI_HOME intermittently failing with a missing provider executable error #​24080
  • [sdk/python] Allow Construct and Call methods to run concurrently in provider servers #​24081
Improvements
  • [engine] Support strings containing non-UTF8 bytes flowing between providers, the engine, state, and languages that opt in (Go and PCL initially) #​23856
  • [cli] Add a --summary flag to pulumi stack history events that reduces a past update's events to the same summary shape as a live pulumi up --output json, extended with error diagnostics and failed-resource markers #​23960
  • [protobuf] Allow state converters to supply resource inputs and outputs in ConvertState responses #​23987
  • [engine] Allow policy packs to point to executable binaries, not just script folders #​24052
  • [cli/display] The Neo diagnostics link now suggests pulumi neo --debug-update or pulumi neo --debug-preview to investigate the failed operation #​24075
  • [sdk/python] Allow UV_PROJECT_ENVIRONMENT to override the virtualenv path if uv is used #​24077
  • [cli] Allow otel traces to be sent over https #​24078

v3.254.0

Compare Source

Features
  • [cli] Add pulumi logs share command for sharing logs with Pulumi #​22546
  • [cli] Add pulumi stack migrate to migrate a stack from another backend to the currently logged-in backend, including re-encrypting config secrets and stack state under the target secrets provider #​22902
  • [cli/config] Add an --override-env flag to up, preview, destroy, and refresh to substitute imported environments for a single run without editing the stack config #​23562
  • [cli] Add pulumi neo acp to run Neo as an Agent Client Protocol agent over stdio for ACP-capable editors, with read-only and plan mode exposed as session config options #​23886
  • [cli/neo] Retry transient pulumi neo stream and message-send failures, and add pulumi neo resume with chat history #​23835
  • [cli/neo] Make Ctrl+C clear typed text and preserve Ctrl+A/Ctrl+E line navigation in pulumi neo #​23932
  • [cli/do] Add upsert to do, allowing resources to be statefully created or updated in a stack #​23813
  • [sdk/python] Add pulumi.run for natively awaited Python program entrypoints that can return stack outputs #​23945
  • [cli/do] Allow expressions for number inputs #​23954
  • [cli/do] Allow expressions for boolean inputs #​23967
  • [cli/policy] Add --runtime-options to pulumi policy new #​23992
  • [cli/do] Add support for stateful create #​23996
  • [cli/do] Add support for stateful delete #​24000
Bug Fixes
  • [sdkgen/go] Fix Go codegen for plain properties nested inside non-plain objects #​22524
  • [cli/neo] Keep pulumi neo connected during quiet periods when the event stream only receives keep-alive heartbeats #​23935
  • [engine] Validate snippets before persisting them #​23920
  • [backend] Fix dangling ReplaceWith references in the journal replayer #​23927
  • [cli/do] Fix the converter plugin not being called if just attributes needed converting #​23948
  • [programgen/go] Generate compilable Go for programs that use discriminated union members as array/list elements #​23980
Improvements
  • [cli] Align commands with the CLI naming guidelines, adding ls, rm, delete, mv, update, modify, create and setup aliases to list/remove/move/edit/new commands and making state remove and package remove the canonical names with delete kept as an alias #​23903
  • [cli] Suggest closely-matching commands from the whole command tree when an unknown command is entered #​23848
  • [cli] Print help but exit with a non-zero code when pulumi is run without a command, matching the behavior of other group commands #​23848
  • [programgen] Support onError resource hooks in generated Go, NodeJS, and Python programs and in the PCL runtime, retrying the failed operation when the hook command exits successfully #​23839
  • [protobuf] Add parent and properties fields to ResourceImport so state converters can express resource hierarchy and property filters #​23929
  • [protobuf] Allow state converters to declare explicit providers as resources in ConvertState responses and attach imported resources to them via the new provider field #​23975
  • [cli] Redact secrets in property values in logs #​23931
  • [cli] Make -v<n> --logflow no longer produce separate log files for plugins #​23938
  • [protobuf] Pass a schema loader target to state converters in ConvertStateRequest #​23944
  • [cli/import] Allow explicit providers to be declared in the resources section of an import file and referenced by name #​23972
  • [cli] Remove the template count from pulumi new --help, which required a slow template listing before help could display #​23973
  • [cli/import] Support inputs and outputs on resources in import files, importing supplied state directly and skipping the provider read when outputs are given #​23984
Miscellaneous
  • [sdk] Move RetrieveGitFolder to the gitutil package #​23955
  • [sdk] Move template helpers from workspace to pkg/cmd/pulumi/templates #​23963

v3.253.0

Compare Source

Features
  • [auto/go] Support --import-pending-creates for refresh command in Go Automation API for preview refresh and refresh operations #​23833
Bug Fixes
  • [sdk] Precompose filenames to NFC on macOS when matching ignore patterns during archive creation, mirroring git's core.precomposeunicode so composed patterns match decomposed filenames #​23566
  • [cli] Respect the -v log level again so that without -v only warnings and errors are written to stderr #​23910
  • [codegen] Correctly generate provider resources declared inside PCL components for Node.js, Python and Go #​23904
Improvements
  • [cli] Add a --version flag to the pulumi command that prints the version, same as pulumi version #​23898
  • [cli] Align env commands with the CLI naming guidelines, making list, remove and move the canonical names with ls, rm, delete and mv kept as aliases #​23901

v3.252.0

Compare Source

Features
  • [auto] Add import to the generated automation APIs for NodeJS, Python and Go #​23876
Bug Fixes
  • [cli] Exit with a non-zero code when a command group such as pulumi env is given an unknown subcommand or no subcommand at all #​23814
  • [cli] Fix a panic when displaying a stack-level policy violation #​23692
  • [cli] Make reading non-secret stack outputs and running pulumi about no longer require the passphrase for passphrase-encrypted stacks #​23820
  • [cli] Avoid pulumi logs <command> showing the log for the currently running command #​23887
Improvements
  • [cli] Improve the error message when using Pulumi ESC with a DIY backend to suggest logging into Pulumi Cloud #​23811
  • [cli] Show command name for cli commands when running any command that lists logs [#​23889](https://redirect.github.c

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • Monday through Friday (* * * * 1-5)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@pulumi-renovate pulumi-renovate Bot added dependencies Pull requests that update a dependency file impact/no-changelog-required This issue doesn't require a CHANGELOG update labels Feb 25, 2026
@pulumi-renovate

pulumi-renovate Bot commented Feb 25, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined
Command failed: make renovate
mise ERROR error parsing config file: /tmp/renovate/repos/github/pulumi/pulumi-eks/.config/mise.toml
mise ERROR Config files in /tmp/renovate/repos/github/pulumi/pulumi-eks/.config/mise.toml are not trusted.
Trust them with `mise trust`. See https://mise.en.dev/cli/trust.html for more information.
mise ERROR Version: 2026.7.15 linux-x64 (2026-07-27)
mise ERROR Run with --verbose or MISE_VERBOSE=1 for more information
make[1]: *** [Makefile:76: mise_env] Error 1
make: *** [Makefile:344: renovate] Error 2

@github-actions

github-actions Bot commented Feb 25, 2026

Copy link
Copy Markdown
Contributor

Does the PR have any schema changes?

Looking good! No breaking changes found.
No new resources/functions.

Maintainer note: consult the runbook for dealing with any breaking changes.

@pulumi-renovate
pulumi-renovate Bot force-pushed the renovate/pulumi branch 8 times, most recently from 8bb0f9c to a303d59 Compare February 25, 2026 14:51
@codecov

codecov Bot commented Feb 25, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 0.00%. Comparing base (fc8e92b) to head (3232adb).

Additional details and impacted files
@@      Coverage Diff       @@
##   master   #2128   +/-   ##
==============================
==============================

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@pulumi-renovate
pulumi-renovate Bot force-pushed the renovate/pulumi branch 17 times, most recently from 8fa8d21 to 6fbdd98 Compare February 25, 2026 23:09
@pulumi-renovate
pulumi-renovate Bot force-pushed the renovate/pulumi branch 29 times, most recently from 7a6a739 to 2a0888b Compare February 27, 2026 00:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file impact/no-changelog-required This issue doesn't require a CHANGELOG update

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants