Skip to content

[ci] Bump the production-dependencies group across 1 directory with 13 updates#6158

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/cluster/pulumi/production-dependencies-a0ab35889b
Open

[ci] Bump the production-dependencies group across 1 directory with 13 updates#6158
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/cluster/pulumi/production-dependencies-a0ab35889b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 13 updates in the /cluster/pulumi directory:

Package From To
@google-cloud/sql 0.24.0 0.24.1
@dotenvx/dotenvx 1.71.0 1.75.1
@google-cloud/storage 7.19.0 7.21.0
@pulumi/gcp 9.18.0 9.27.0
@pulumi/pulumi 3.230.0 3.247.0
@pulumi/random 4.19.2 4.21.0
@pulumi/github 6.13.1 6.14.0
auth0 5.6.0 5.12.0
js-yaml 4.1.1 4.2.0
zod 4.3.6 4.4.3
@pulumi/auth0 3.39.0 3.46.0
semver 7.8.1 7.8.5
@pulumi/policy 1.20.0 1.21.0

Updates @google-cloud/sql from 0.24.0 to 0.24.1

Changelog

Sourced from @​google-cloud/sql's changelog.

0.24.1 (2026-05-01)

Bug Fixes

  • Change the copyright year for files in the packages folder (#8109) (c1a03fe)
  • Do not publish the protos to npm (#8079) (816216b)
  • Revert "fix: Do not publish the protos to npm" (#8096) (ac0fbb6)
Commits

Updates @dotenvx/dotenvx from 1.71.0 to 1.75.1

Release notes

Sourced from @​dotenvx/dotenvx's releases.

v1.75.1

see CHANGELOG

v1.75.0

see CHANGELOG

v1.74.3

see CHANGELOG

v1.74.2

see CHANGELOG

v1.74.1

see CHANGELOG

v1.74.0

see CHANGELOG

v1.73.1

see CHANGELOG

v1.73.0

see CHANGELOG

v1.72.0

see CHANGELOG

v1.71.3

see CHANGELOG

v1.71.2

see CHANGELOG

v1.71.1

see CHANGELOG

Changelog

Sourced from @​dotenvx/dotenvx's changelog.

1.75.1 (2026-06-20)

Changed

  • Publish as named binaries (#851)

Removed

  • Remove references to dotenvx-vlt (now dotenvx-armor) (#849)

1.75.0 (2026-06-19)

Changed

  • Swap in @dotenvx/primitives (#848)
  • ext commands become first-class(#847)

1.74.4 (2026-06-19)

Removed

  • Remove separately published @dotenvx/next-env from this repo (#846)

1.74.3 (2026-06-19)

Changed

  • Bundle dotenvx with @dotenvx/next-env for user convenience (#845)

1.74.2 (2026-06-18)

Changed

  • Fix provenance for @dotenvx/next-env (#844)

1.74.1 (2026-06-18)

Added

  • Add README for @dotenvx/next-env (#843)

1.74.0 (2026-06-18)

Added

1.73.1 (2026-06-16)

Changed

... (truncated)

Commits

Updates @google-cloud/storage from 7.19.0 to 7.21.0

Release notes

Sourced from @​google-cloud/storage's releases.

storage: v7.21.0

7.21.0 (2026-06-03)

Features

  • storage: Enable CRC32C validation by default in transfer manager (#8350) (86086a6)

Bug Fixes

Changelog

Sourced from @​google-cloud/storage's changelog.

7.21.0 (2026-06-03)

Features

  • storage: Enable CRC32C validation by default in transfer manager (#8350) (86086a6)

Bug Fixes

7.20.0 (2026-05-11)

Features

  • storage: Implement Object Contexts with advanced filtering and validation (#7548) (d60757e)
  • storage: Implement robust path validation and structured skip reporting (#7546) (113d05c)
  • storage: Set CRC32C as the default checksum option (#7547) (1a693aa)

Bug Fixes

Commits
  • 106bb0e chore(main): release storage 7.21.0 (#8435)
  • b7433b3 chore: clean up linkinator configurations and test scripts across monorepo (#...
  • 3ec901e fix(deps): remove vulnerable dependency uuid (#8120)
  • 86086a6 feat(storage): enable CRC32C validation by default in transfer manager (#8350)
  • 92b328b chore: release main (#8242)
  • 9fd76ef fix: bump all node submodules (#8178)
  • 1a44778 fix: resolve flakiness in Service retry system tests (#7945)
  • d60757e feat(storage): implement Object Contexts with advanced filtering and validati...
  • 1a693aa feat(storage): Set CRC32C as the default checksum option (#7547)
  • 113d05c feat(storage): Implement robust path validation and structured skip reporting...
  • Additional commits viewable in compare view

Updates @pulumi/gcp from 9.18.0 to 9.27.0

Release notes

Sourced from @​pulumi/gcp's releases.

v9.27.0

What's Changed

Full Changelog: pulumi/pulumi-gcp@v9.26.0...v9.27.0

v9.26.0

What's Changed

Full Changelog: pulumi/pulumi-gcp@v9.25.0...v9.26.0

v9.25.0

What's Changed

Full Changelog: pulumi/pulumi-gcp@v9.24.0...v9.25.0

v9.24.0

What's Changed

... (truncated)

Commits

Updates @pulumi/pulumi from 3.230.0 to 3.247.0

Release notes

Sourced from @​pulumi/pulumi's releases.

v3.247.0

3.247.0 (2026-06-18)

Features

  • [cli/config] Add --raw flag to pulumi config set to avoid stripping newlines when input is piped through stdin #23593
  • [cli/do] Add --provider flag to pull provider config to use from existing provider state #23560
  • [cli/engine] Resource providers now receive the active login's API address and access token through PULUMI_API and PULUMI_ACCESS_TOKEN #23589
  • [cli/neo] Add a --disable-integrations flag to pulumi neo that runs the task with no integration credentials #23531
  • [engine] Send the address of a mapper service to resource providers as part of the provider handshake
  • [programgen/go] Support functions with multiArgumentInputs #23554
  • [programgen/python] Support functions with multiArgumentInputs #23574
  • [sdk/nodejs] Registered resources can now be retrieved from the mock monitor for test assertions #20539
  • [sdk/python] Add Output.recover to catch and recover from exceptions in outputs #23591
  • [sdkgen] Adds support for language agnostic cross references in schemas. Use the form {{% ref <target> %}} to reference other schema components in markdown descriptions. Such as `{{% ref #21369
  • [sdkgen] Add extension parameterization to the package schema model #23536
  • [sdkgen/go] Support functions with multiArgumentInputs #23554
  • [sdkgen/python] Support functions with multiArgumentInputs #23574
  • [cli/auth] When credentials.json carries an OAuth refresh token, the CLI now auto-refreshes the access token on 401 and retries the request once, instead of returning a "login required" error #23430

Improvements

  • [cli] Respect PULUMI_SKIP_CONFIRMATIONS whenever we ask for confirmation #23607
  • [cli] Use list and remove as the canonical names for list/remove commands, with ls and rm as aliases #23608
  • [docs] Generate redirects for command aliases #23610
  • [engine] Serve raw schema bytes from the engine's schema loader service instead of binding and re-marshaling the full schema on every request #23551
  • [sdk/go] The plugin.Host interface is now stateless with respect to workspaces; host methods that boot or resolve plugins take a plugin.Context carrying the workspace state, and closing a plugin.Context no longer closes a host that was passed in to its constructor #23508
  • [sdk/nodejs] Allow running the postinstall script for local SDKs under npm 12 #23568
  • [sdk/python] Add register_package helper to cache package references per deployment #22459

Bug Fixes

  • [cli] Ensure pulumi logout clears the current tokenless backend in coding agent environments #23540
  • [cli] Read Git metadata correctly in repositories that enable the worktreeConfig extension, such as those hosted on Azure DevOps #23535
  • [cli/display] Show interrupted steps as interrupted instead of as finished #23510
  • [cli/plugin] Allow plugin tarballs containing symlinks #23587
  • [sdk/nodejs] Fix pulumi package add failing with pnpm when the generated SDK has a scoped package name (@-prefix), caused by pnpm's pkg set rejecting @ in dot-notation property paths #23365
  • [codegen/pcl] Fix version comparison in NeedsVersionResourceOption to use semver.Version.Equals and reject "v"-prefixed versions pulumi/pulumi#23441

Miscellaneous

  • [cli/plugin] Document the pulumi plugin run command by including it in the generated CLI docs #23559
  • [sdkgen] Modules can no longer be nested under the index module, this was never well supported and is now a strict bind error #23436

v3.246.0

3.246.0 (2026-06-11)

Bug Fixes

  • [backend/diy] Fix backwards incompatible gocloud.dev changes #23525

... (truncated)

Changelog

Sourced from @​pulumi/pulumi's changelog.

3.247.0 (2026-06-18)

Bug Fixes

  • [cli] Ensure pulumi logout clears the current tokenless backend in coding agent environments #23540
  • [cli] Read Git metadata correctly in repositories that enable the worktreeConfig extension, such as those hosted on Azure DevOps #23535

Improvements

  • [cli] Respect PULUMI_SKIP_CONFIRMATIONS whenever we ask for confirmation #23607
  • [cli] Use list and remove as the canonical names for list/remove commands, with ls and rm as aliases #23608

Features

  • [cli/config] Add --raw flag to pulumi config set to avoid stripping newlines when input is piped through stdin #23593

Bug Fixes

  • [cli/display] Show interrupted steps as interrupted instead of as finished #23510

Features

  • [cli/do] Add --provider flag to pull provider config to use from existing provider state #23560
  • [cli/engine] Resource providers now receive the active login's API address and access token through PULUMI_API and PULUMI_ACCESS_TOKEN #23589
  • [cli/neo] Add a --disable-integrations flag to pulumi neo that runs the task with no integration credentials #23531

Bug Fixes

  • [cli/plugin] Allow plugin tarballs containing symlinks #23587

Miscellaneous

  • [cli/plugin] Document the pulumi plugin run command by including it in the generated CLI docs #23559

Improvements

  • [docs] Generate redirects for command aliases #23610

Features

  • [engine] Send the address of a mapper service to resource providers as part of the provider handshake

Improvements

  • [engine] Serve raw schema bytes from the engine's schema loader service instead of binding and re-marshaling the full schema on every request #23551

Features

  • [programgen/go] Support functions with multiArgumentInputs #23554
  • [programgen/python] Support functions with multiArgumentInputs #23574

... (truncated)

Commits
  • cecff85 Replace this-keyword-resource-attr program-gen test with a conformance test (...
  • bd608df Fold the aws-s3-logging program test into l2-proxy-index (#23582)
  • 66a1328 prepare for 3.247.0 release (#23592)
  • 463bdab implement log exporting for plugins (#22613)
  • 83a224c upgrade Go to latest patch version in go.mod (#23585)
  • 939bc6e Add extension parameterization to the plugin and resource protocols (#23563)
  • 4450fce Update dependency tmp to v0.2.7 [SECURITY] (#23572)
  • c3fe458 Upgrade go-git v5 to v6 to support the worktreeConfig extension (#23535)
  • 0e56707 Replace simplified-invokes codegen tests with a conformance test (#23570)
  • fb75b0d Fold the optional-complex-config program test into l1-config-types-object (#2...
  • Additional commits viewable in compare view

Updates @pulumi/random from 4.19.2 to 4.21.0

Release notes

Sourced from @​pulumi/random's releases.

v4.21.0

What's Changed

Full Changelog: pulumi/pulumi-random@v4.20.0...v4.21.0

v4.20.0

What's Changed

New Contributors

... (truncated)

Commits

Updates @pulumi/github from 6.13.1 to 6.14.0

Release notes

Sourced from @​pulumi/github's releases.

v6.14.0

What's Changed

Full Changelog: pulumi/pulumi-github@v6.13.1...v6.14.0

Commits

Updates auth0 from 5.6.0 to 5.12.0

Release notes

Sourced from auth0's releases.

v5.12.0

Added

  • feat: add tenant security headers, minute-based session lifetimes, and OIDC session expiry #1351 (developerkunal)

Fixed

v5.11.0

Added

  • feat: add rate limit policies, group/org role management, and user effective roles/permissions #1348 (fern-api[bot])

v5.10.0

Added

  • feat: add passkey authentication methods, online access support, and improved error handling #1342 (fern-api[bot])

v5.9.1

Security

v5.9.0

Added

  • feat: add events SSE streaming, bulk refresh token revocation, and query string builder #1331 (fern-api[bot])

v5.8.0

⚠️ BREAKING CHANGES

  • Removed invitation_landing_client_id and allowed_roles fields from ClientMyOrganizationPatchConfiguration, ClientMyOrganizationPostConfiguration, and ClientMyOrganizationResponseConfiguration #1328 (fern-api[bot])

Added

  • Session Transfer Delegation: new delegation property on ClientSessionTransferConfiguration with ClientSessionTransferDelegationConfiguration interface supporting allow_delegated_access and enforce_device_binding options #1328 (fern-api[bot])
  • Self-Service SSO Ticket Features: new enabled_features property on CreateSelfServiceProfileSsoTicketRequestContent with SelfServiceProfileSsoTicketEnabledFeatures interface supporting sso, domain_verification, and provisioning toggles #1328 (fern-api[bot])
  • Self-Service SSO Ticket Domain Aliases: new pending_domains field on SelfServiceProfileSsoTicketDomainAliasesConfig #1328 (fern-api[bot])

Changed

  • Updated JSDoc descriptions for default_for field across Client Grant response types and CreateClientGrantRequestContent #1328 (fern-api[bot])

v5.7.0

Added

  • feat: add third-party client security, synchronized groups, and new event stream types #1326 (fern-api[bot])
Changelog

Sourced from auth0's changelog.

v5.12.0 (2026-06-11)

Full Changelog

Added

  • feat: add tenant security headers, minute-based session lifetimes, and OIDC session expiry #1351 (developerkunal)

Fixed

  • fix: implement retry logic for socket hang up errors in HTTP requests #1341 (

@dependabot dependabot Bot added the static Used to label PRs for which static tests suffice label Jun 29, 2026
@github-actions

Copy link
Copy Markdown

Deploy upgrade pipeline triggered for Commit 754c341a6fa2bb5d8eab7c1e14e1328556d71638 in , please contact a Contributor to approve it in CircleCI: https://app.circleci.com/pipelines/github/DACH-NY/canton-network-internal/71984

dependabot Bot and others added 3 commits June 29, 2026 19:32
…3 updates

Bumps the production-dependencies group with 13 updates in the /cluster/pulumi directory:

| Package | From | To |
| --- | --- | --- |
| [@google-cloud/sql](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-sql) | `0.24.0` | `0.24.1` |
| [@dotenvx/dotenvx](https://github.com/dotenvx/dotenvx) | `1.71.0` | `1.75.1` |
| [@google-cloud/storage](https://github.com/googleapis/google-cloud-node/tree/HEAD/handwritten/storage) | `7.19.0` | `7.21.0` |
| [@pulumi/gcp](https://github.com/pulumi/pulumi-gcp) | `9.18.0` | `9.27.0` |
| [@pulumi/pulumi](https://github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs) | `3.230.0` | `3.247.0` |
| [@pulumi/random](https://github.com/pulumi/pulumi-random) | `4.19.2` | `4.21.0` |
| [@pulumi/github](https://github.com/pulumi/pulumi-github) | `6.13.1` | `6.14.0` |
| [auth0](https://github.com/auth0/node-auth0) | `5.6.0` | `5.12.0` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.2.0` |
| [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.4.3` |
| [@pulumi/auth0](https://github.com/pulumi/pulumi-auth0) | `3.39.0` | `3.46.0` |
| [semver](https://github.com/npm/node-semver) | `7.8.1` | `7.8.5` |
| [@pulumi/policy](https://github.com/pulumi/pulumi-policy) | `1.20.0` | `1.21.0` |



Updates `@google-cloud/sql` from 0.24.0 to 0.24.1
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-sql/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/v0.24.1/packages/google-cloud-sql)

Updates `@dotenvx/dotenvx` from 1.71.0 to 1.75.1
- [Release notes](https://github.com/dotenvx/dotenvx/releases)
- [Changelog](https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md)
- [Commits](dotenvx/dotenvx@v1.71.0...v1.75.1)

Updates `@google-cloud/storage` from 7.19.0 to 7.21.0
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/handwritten/storage/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/storage-v7.21.0/handwritten/storage)

Updates `@pulumi/gcp` from 9.18.0 to 9.27.0
- [Release notes](https://github.com/pulumi/pulumi-gcp/releases)
- [Changelog](https://github.com/pulumi/pulumi-gcp/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-gcp@v9.18.0...v9.27.0)

Updates `@pulumi/pulumi` from 3.230.0 to 3.247.0
- [Release notes](https://github.com/pulumi/pulumi/releases)
- [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pulumi/pulumi/commits/v3.247.0/sdk/nodejs)

Updates `@pulumi/random` from 4.19.2 to 4.21.0
- [Release notes](https://github.com/pulumi/pulumi-random/releases)
- [Changelog](https://github.com/pulumi/pulumi-random/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-random@v4.19.2...v4.21.0)

Updates `@pulumi/github` from 6.13.1 to 6.14.0
- [Release notes](https://github.com/pulumi/pulumi-github/releases)
- [Changelog](https://github.com/pulumi/pulumi-github/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-github@v6.13.1...v6.14.0)

Updates `auth0` from 5.6.0 to 5.12.0
- [Release notes](https://github.com/auth0/node-auth0/releases)
- [Changelog](https://github.com/auth0/node-auth0/blob/master/CHANGELOG.md)
- [Commits](auth0/node-auth0@v5.6.0...v5.12.0)

Updates `js-yaml` from 4.1.1 to 4.2.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.1...4.2.0)

Updates `zod` from 4.3.6 to 4.4.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.6...v4.4.3)

Updates `@pulumi/auth0` from 3.39.0 to 3.46.0
- [Release notes](https://github.com/pulumi/pulumi-auth0/releases)
- [Changelog](https://github.com/pulumi/pulumi-auth0/blob/master/CHANGELOG_OLD.md)
- [Commits](pulumi/pulumi-auth0@v3.39.0...v3.46.0)

Updates `semver` from 7.8.1 to 7.8.5
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.8.1...v7.8.5)

Updates `@pulumi/policy` from 1.20.0 to 1.21.0
- [Changelog](https://github.com/pulumi/pulumi-policy/blob/main/CHANGELOG.md)
- [Commits](pulumi/pulumi-policy@v1.20.0...v1.21.0)

---
updated-dependencies:
- dependency-name: "@google-cloud/sql"
  dependency-version: 0.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@dotenvx/dotenvx"
  dependency-version: 1.75.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@google-cloud/storage"
  dependency-version: 7.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/gcp"
  dependency-version: 9.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/pulumi"
  dependency-version: 3.247.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/random"
  dependency-version: 4.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/github"
  dependency-version: 6.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: auth0
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pulumi/auth0"
  dependency-version: 3.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: semver
  dependency-version: 7.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@pulumi/policy"
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>
Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>
@krzysztofczyz-da krzysztofczyz-da force-pushed the dependabot/npm_and_yarn/cluster/pulumi/production-dependencies-a0ab35889b branch from 11906bf to b919515 Compare June 29, 2026 17:32
@krzysztofczyz-da

Copy link
Copy Markdown
Contributor

/upgrade_test

@github-actions

Copy link
Copy Markdown

Deploy upgrade pipeline triggered for Commit b919515ad5a26ab605d7b3e5d8e9c85e5d410546 in , please contact a Contributor to approve it in CircleCI: https://app.circleci.com/pipelines/github/DACH-NY/canton-network-internal/71993

@krzysztofczyz-da

Copy link
Copy Markdown
Contributor

/upgrade_test

@github-actions

Copy link
Copy Markdown

Deploy upgrade pipeline triggered for Commit b919515ad5a26ab605d7b3e5d8e9c85e5d410546 in , please contact a Contributor to approve it in CircleCI: https://app.circleci.com/pipelines/github/DACH-NY/canton-network-internal/72086

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

static Used to label PRs for which static tests suffice

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants