Skip to content

Update first-party Pulumi dependencies - #2128

Open
pulumi-renovate[bot] wants to merge 2 commits into
masterfrom
renovate/pulumi
Open

Update first-party Pulumi dependencies#2128
pulumi-renovate[bot] wants to merge 2 commits into
masterfrom
renovate/pulumi

Conversation

@pulumi-renovate

@pulumi-renovate pulumi-renovate Bot commented Feb 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@pulumi/kubernetes (source) 4.19.0 → 4.34.2 age confidence dependencies minor
github.com/pulumi/inflector v0.1.1 → v0.2.1 age confidence indirect minor
github.com/pulumi/providertest v0.6.0 → v0.7.0 age confidence require minor
github.com/pulumi/pulumi-aws/sdk/v7 v7.25.0 → v7.52.1 age confidence require minor
github.com/pulumi/pulumi-aws/sdk/v7 v7.1.0 → v7.52.1 age confidence require minor
github.com/pulumi/pulumi-aws/sdk/v7 v7.25.0 → v7.52.1 age confidence indirect minor
github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3 v3.112.0 → v3.117.0 age confidence require minor
github.com/pulumi/pulumi-eks/sdk/v4 v4.2.0 → v4.5.0 age confidence require minor
github.com/pulumi/pulumi-eks/sdk/v4 v4.0.0 → v4.5.0 age confidence require minor
github.com/pulumi/pulumi-kubernetes/sdk/v4 v4.9.1 → v4.34.2 age confidence indirect minor
github.com/pulumi/pulumi-kubernetes/sdk/v4 v4.19.0 → v4.34.2 age confidence require minor
pulumi/auth-actions v2.1.0 → v2.1.1 age confidence action patch
pulumi/esc-action (changelog) ce885ce → eec71a9 action digest

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

pulumi/pulumi-kubernetes (@​pulumi/kubernetes)

v4.34.2

Compare Source

Fixed
  • #​4603 Fix a lookup condition where one parameterization package name clobbered the other
  • #​4611 Allow hyphens in CRD generation, as supported by the Pulumi engine.

v4.34.1

Compare Source

Fixed
  • #​4588 Fix a crash on CRD schema generation with nullable: true fields.

v4.34.0

Compare Source

Added
  • Support adding CustomResourceDefinitions as an extension of the base kubernetes provider via pulumi package add <provider> --extension. Extension-served resources alias their kubernetes:-namespaced token, so state written by a crd2pulumi-generated SDK is adopted rather than replaced.
Changed
  • Upgrade Kubernetes schema and libraries to v1.36.3.
  • Upgrade Kubernetes schema and libraries to v1.36.4.
  • Upgrade Kubernetes schema and libraries to v1.37.0. See the Kubernetes 1.37 release notes for upstream API changes.
Fixed

  • Restore scheduling.k8s.io/v1alpha1 Workload, which the Kubernetes 1.36 upgrade dropped from the SDKs, and retain scheduling.k8s.io/v1alpha2 PodGroup and Workload, which Kubernetes 1.37 removes from its OpenAPI specification. Both remain available to clusters that still serve them, and scheduling.k8s.io/v1beta1 now aliases the older versions so that existing resources migrate in place rather than being replaced.

  • #​4524 Fix pulumi.com/waitFor rejecting JSONPath filters that use !=, >= or <=. The expression was split on every = that was not part of ==, so jsonpath={.status.conditions[?(@.type!="Failed")].status}=True failed to parse. The path and value are now separated structurally, which also allows braces inside string literals. Comparing one path against another (jsonpath={.status.readyReplicas}={.spec.replicas}) is still unsupported, but now reports an error instead of silently never matching.

v4.33.0

Compare Source

Added
  • #​3595 Add takeOwnership to kubernetes.helm.sh/v3:Release. When set, Helm skips the resource-conflict check and adopts existing resources into the release (equivalent to helm upgrade/helm install --take-ownership).
  • #​3284 Add includeHooks to kubernetes.helm.sh/v4:Chart. When set together with the provider's renderYamlToDirectory, Helm hook resources (annotated helm.sh/hook) are included in the rendered output instead of being dropped, so that another tool (e.g. Argo CD) can apply them. Test hooks (helm.sh/hook: test) are excluded, and the flag has no effect outside of render mode. This only brings render mode up to par with helm template; it does not implement full Helm hook lifecycle support (ordering, weights, delete policies, execution), so #​3284 remains open.
Changed
  • Upgrade Kubernetes schema and libraries to v1.36.2.
  • #​4454 Document that skipAwait defaults to false on yaml/v2.ConfigFile, yaml/v2.ConfigGroup, and kustomize/v2.Directory.

v4.32.0

Compare Source

Fixed
  • #​3176 ensure Helm-installed CRDs can be resolved during preview
  • #​4396 Fix panic when creating a kubernetes.io/service-account-token Secret with a non-existent ServiceAccount.
  • #​4394 Don't fail YAML render when a custom resource's namespace scope can't be determined offline. The resource is rendered without a namespace and a warning is logged, rather than erroring.
Changed
  • Align the documented minimum supported Kubernetes version and local SDK install instructions with current provider behavior.

v4.31.1

Compare Source

Changed
  • #​4364 Update github.com/go-git/go-git/v5 to v5.19.1 (SECURITY).
  • Update first-party Pulumi dependencies to v3.242.0.

v4.31.0

Compare Source

Added
  • #​2744 Advertise a helm mapping for terraform conversion so pulumi import --from terraform and pulumi convert --from terraform recognize helm_release and emit kubernetes:helm.sh/v3:Release.
  • #​4332 Implement the List provider RPC and advertise listInputs (namespace, name, labelSelector, fieldSelector) on every non-nested resource. namespace is omitted from listInputs on cluster-scoped kinds. See docs/list-rpc-semantics.md for design notes.
Fixed
  • #​4261 Fix CRD parameterization: implement Parameterize(Value) so subsequent runs can reconstruct the CRD schema from saved state, and flatten array-of-objects in OpenAPI specs so nested fields like spec.listeners generate typed args.
Changed
  • Upgrade Kubernetes schema and libraries to v1.36.1.

v4.30.0

Compare Source

Fixed
  • #​4295Fix kustomize.v2.Directory resource output type in the schema to properly support array outputs.
    Previously, the resources field was incorrectly typed as a string in the schema. This fix updates the type to an array of Any, aligning the schema with the provider's Go implementation (pulumi.ArrayOutput). This resolves a regression that caused the Kustomize v2 resource to fail in the Python SDK.
  • #​2997 Stop stripping null values when unmarshaling, fixing Helm chart default deletion and valueYamlFiles null handling. Deprecate allowNullValues (no longer needed).
Changed
  • Upgrade Kubernetes schema and libraries to v1.35.4.
  • Upgrade Kubernetes schema and libraries to v1.36.0.

v4.29.0

Compare Source

Fixed

  • #​2926 Use client-side create for new resources instead of server-side apply.

    Users may observe stricter errors on some Create operations. Please read carefully.

    When a resource already exists in the cluster, the API server now returns an AlreadyExists error instead of silently updating the existing object.
    This prevents data loss from create-then-delete scenarios (e.g. renaming a Pulumi resource or replacing an explicitly-named resource).
    A new provider config option upsertExistingObjects (default false) restores the previous upsert behavior for users who intentionally adopt existing cluster resources.
    To manage fields on existing objects without owning their lifecycle, use Patch resources (e.g. NamespacePatch).

Added
  • #​2280 Add enablePatchForce provider config option to force SSA patch conflicts on a per-stack basis.
Changed
  • Upgrade Kubernetes schema and libraries to v1.35.3.

v4.28.0

Compare Source

Changed
  • Upgrade Kubernetes schema and libraries to v1.35.2.

v4.27.0

Compare Source

Fixed
  • #​4181 Fix PVC timeout when updating to a storage class with WaitForFirstConsumer bind mode.
Added
  • #​3661 Support for OCI login inside the provider process. Providing a username/password to Chart v4 and Release v3 will now login to private OCI
    registries as expected.
    (#​2911 and #​1914)

v4.26.0

Compare Source

Fixed

  • #​4122 Implements a new provider config option, alwaysRender, which sets Diff_Someto true when used in combination with renderYAMLtoDirectory.
    This allows for user-defined opt-in behavior for YAML manifests to be idempotently generated on every pulumi up, and for Update() to show these changes to a user.

  • Fixed a race condition in StatefulSet await logic where Pulumi could
    incorrectly report a rollout as complete before the controller had processed
    the update. This occurred when Pulumi checked status fields before the
    controller updated observedGeneration, causing stale "ready" values to be
    trusted.

  • Fixed a regression of
    #​2943 which could
    cause Deployments to erroneously report diffs.

Changed

  • Upgraded helm.sh/helm to v3.18.6. (#​3969)

  • #​4156 Upgrade Kubernetes schema and libraries to v1.35.1

v4.25.0

Compare Source

v4.24.1

Compare Source

Fixed
  • Fixed a regression of #​2943 which could cause Deployments to erroneously report diffs.
Changed
  • Upgraded helm.sh/helm to v3.18.6. (#​3969)

v4.24.0

Compare Source

Added
  • Added a plainHttp option to the v4.Chart resource. (#​3250)
Changed

  • The pulumi.com/waitFor annotation now uses an
    RFC9535-compliant JSONPath
    parser. This makes it possible to wait for more complex scenarios.

    For example:

    • To wait for a Pod's status.phase to be "Running" or "Succeeded":

      pulumi.com/waitFor: "jsonpath={.status[?@ == 'Running' || @ == 'Succeeded' ]}"

    • To wait for for an object to have a "Failed" or "Complete" condition with
      a "True" value:

      pulumi.com/waitFor: "jsonpath={.conditions[?(@.type=='Failed'||@.type=='Complete')].status}=True

    (Tools like jsonpath.com are very helpful for
    ensuring your JSONPath expression works as expected.)

    Importantly, please note that kubectl wait --for=jsonpath=... supports only
    a subset of RFC9535. This means some complex waitFor annotations will not
    be reproducible with kubectl.

    Existing expressions should continue to work normally with one notable
    exception: a selector like .items[] now requires an explicit wildcard, i.e.
    .items[*].

    As a reminder, the pulumi.com/waitFor annotation is experimental and
    subject to change. Similarly, RFC9535 is still only proposed and may also
    change in the future.

  • enableConfigMapMutable and enableSecretMutable are now stable.
    (#​3886)

Fixed

  • Helm resources all now use the correct registry/config.json file for
    credentials. For backward-compatibility registry.json is preferred if
    it exists. (#​3606)

  • Fixed an issue where deletions could take longer than necessary. (#​3317)

  • Significantly reduced memory usage. (#​3713)

  • Fixed incorrect deprecation warnings for VolumeAttributesClass. (#​3772)

  • SecretPatch inputs are now automatically marked as secret.

v4.23.0

Compare Source

Changed
  • Updated Kubernetes schemas and libraries to v1.33.0. (#​3619)

v4.22.2

Compare Source

Fixed
  • Fix panic when valueYamlFiles field in helm.v3.Release resources are nil (#​3601)

v4.22.1

Compare Source

Fixed
  • Fix race condition in Deleted condition (#​3550)

v4.22.0

Compare Source

Changed
  • Update Pulumi dependency to v3.153.1 (#​3534)
  • Update ESC dependency to v0.13.0 (#​3551)
Fixed
  • Fix race condition in Deleted condition. (#​3550)

v4.21.1

Compare Source

Added
  • Windows executable releases are now signed. (#​3455)

v4.21.0

Compare Source

Changed
  • Upgrade pulumi-java to version v1.0.0 (#​3436)

v4.20.0

Compare Source

Added
  • Added support for autonaming configuration specified by the engine.
    (#​3363)
pulumi/inflector (github.com/pulumi/inflector)

v0.2.1

Compare Source

What's Changed

Full Changelog: pulumi/inflector@v0.2.0...v0.2.1

v0.2.0

Compare Source

Fixes singularization of Caches to Cache

pulumi/providertest (github.com/pulumi/providertest)

v0.7.0

Compare Source

What's Changed

  • Bump golang.org/x/crypto from 0.36.0 to 0.45.0 in the go_modules group across 1 directory by @​dependabot[bot] in #​159
  • Fix python_gcp test by adding setuptools dependency by @​pose in #​167
  • Rename project to python_gcp and update description by @​pose in #​166
  • fix(pulumitest): start fresh providers per engine operation by @​rshade in #​170
  • feat(pulumitest): log pulumi version and plugins on stack creation by @​rshade in #​171

Full Changelog: pulumi/providertest@v0.6.0...v0.7.0

pulumi/pulumi-aws (github.com/pulumi/pulumi-aws/sdk/v7)

v7.52.1

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.52.0...v7.52.1

v7.52.0

Compare Source

What's Changed
New Contributors

Full Changelog: pulumi/pulumi-aws@v7.51.1...v7.52.0

v7.51.1

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.51.0...v7.51.1

v7.51.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.50.0...v7.51.0

v7.50.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.49.0...v7.50.0

v7.49.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.48.0...v7.49.0

v7.48.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.47.0...v7.48.0

v7.47.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.46.0...v7.47.0

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.46.0...v7.47.0

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.46.0...v7.47.0

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.46.0...v7.47.0

v7.46.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.45.0...v7.46.0

v7.45.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.44.0...v7.45.0

v7.44.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.43.0...v7.44.0

v7.43.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.42.0...v7.43.0

v7.42.0

Compare Source

What's Changed
New Contributors

Full Changelog: pulumi/pulumi-aws@v7.41.0...v7.42.0

v7.41.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.40.0...v7.41.0

v7.40.0

Compare Source

What's Changed
New Contributors

Full Changelog: pulumi/pulumi-aws@v7.39.0...v7.40.0

v7.39.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.38.0...v7.39.0

v7.38.0

Compare Source

What's Changed
New Contributors

Full Changelog: pulumi/pulumi-aws@v7.37.0...v7.38.0

v7.37.0

Compare Source

What's Changed
New Contributors

Full Changelog: pulumi/pulumi-aws@v7.36.0...v7.37.0

v7.36.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.35.0...v7.36.0

v7.35.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.34.0...v7.35.0

v7.34.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.33.0...v7.34.0

v7.33.0

Compare Source

What's Changed

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • Monday through Friday (* * * * 1-5)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@pulumi-renovate pulumi-renovate Bot added dependencies Pull requests that update a dependency file impact/no-changelog-required This issue doesn't require a CHANGELOG update labels Feb 25, 2026
@pulumi-renovate

pulumi-renovate Bot commented Feb 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined
Command failed: make renovate
/bin/bash: line 1: pulumi: command not found
make[1]: *** [Makefile:161: .make/generate_java] Error 127
make: *** [Makefile:344: renovate] Error 2

@github-actions

github-actions Bot commented Feb 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Does the PR have any schema changes?

Generated by schema-tools v0.8.1.

Found 4 breaking changes:

Types

  • 🟡 "eks:index:CoreData":
    • properties:
      • 🟡 "eksNodeAccess" type changed from "/kubernetes/v4.19.0/schema.json#/resources/kubernetes:core%2Fv1:ConfigMap" to "/kubernetes/v4.34.2/schema.json#/resources/kubernetes:core%2Fv1:ConfigMap"
      • 🟡 "provider" type changed from "/kubernetes/v4.19.0/schema.json#/provider" to "/kubernetes/v4.34.2/schema.json#/provider"
      • 🟡 "storageClasses" type changed from "/kubernetes/v4.19.0/schema.json#/resources/kubernetes:storage.k8s.io%2Fv1:StorageClass" to "/kubernetes/v4.34.2/schema.json#/resources/kubernetes:storage.k8s.io%2Fv1:StorageClass"
  • 🟡 "eks:index:StorageClass":
    • properties:
      • 🟡 "metadata" type changed from "/kubernetes/v4.19.0/schema.json#/types/kubernetes:meta%2Fv1:ObjectMeta" to "/kubernetes/v4.34.2/schema.json#/types/kubernetes:meta%2Fv1:ObjectMeta"
        No new resources/functions/types.

Maintainer note: consult the runbook for dealing with any breaking changes.

@pulumi-renovate
pulumi-renovate Bot force-pushed the renovate/pulumi branch 8 times, most recently from 8bb0f9c to a303d59 Compare February 25, 2026 14:51
@codecov

codecov Bot commented Feb 25, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 0.00%. Comparing base (fc8e92b) to head (3232adb).

Additional details and impacted files 
@@      Coverage Diff       @@
##   master   #2128   +/-   ##
==============================
==============================

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@pulumi-renovate
pulumi-renovate Bot force-pushed the renovate/pulumi branch 17 times, most recently from 8fa8d21 to 6fbdd98 Compare February 25, 2026 23:09
@pulumi-renovate
pulumi-renovate Bot force-pushed the renovate/pulumi branch 27 times, most recently from 7a6a739 to 2a0888b Compare February 27, 2026 00:59
@pulumi-renovate

pulumi-renovate Bot commented Nov 2, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file impact/no-changelog-required This issue doesn't require a CHANGELOG update

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@pulumi-bot