Skip to content

deps(deps): bump the gomod-minor-and-patch group across 1 directory with 4 updates#324

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-minor-and-patch-0b7dc58161
Closed

deps(deps): bump the gomod-minor-and-patch group across 1 directory with 4 updates#324
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-minor-and-patch-0b7dc58161

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the gomod-minor-and-patch group with 3 updates in the / directory: github.com/pulumi/pulumi/pkg/v3, k8s.io/apimachinery and k8s.io/client-go.

Updates github.com/pulumi/pulumi/pkg/v3 from 3.245.0 to 3.246.0

Release notes

Sourced from github.com/pulumi/pulumi/pkg/v3's releases.

v3.246.0

3.246.0 (2026-06-11)

Bug Fixes

  • [backend/diy] Fix backwards incompatible gocloud.dev changes #23525

Features

  • [cli] Add pulumi logs ls to list automatic log files #23449
  • [cli] Add pulumi logs rm to remove automatic log files
  • [cli] Include the list of affected resources (urn, type, name, op, parent) in --output json for preview, up, destroy, and refresh
  • [cli] Support Pulumi projects without a runtime across CLI operations and Automation API project settings #23489

Improvements

  • [cli] Support Ctrl+Z to suspend a running pulumi neo session and restore the transcript on resume with fg pulumi/pulumi#23394
  • [cli] Remove the experimental pulumi ai web command #23517
  • [cli/cloud] Improve the interactive pulumi login prompt wording and coloring #23417
  • [cli/convert] Resolve provider plugins through the Pulumi Registry when converting from a third-party source #23490

Features

  • [cli/do] Add a --stateless flag to pulumi do. create, patch, and delete now require --stateless for the existing direct-provider behavior; the default will switch to a stateful (engine-driven) implementation in a future release
  • [cli/env] Support ephemeral agent auth instructions for ESC API unauthorized errors in detected agent sessions #23402

Bug Fixes

  • [cli/neo] The pulumi neo TUI now adapts its colors to the terminal background instead of hardcoding a dark scheme #23333
  • [cli/neo] Increase the pulumi neo task-creation timeout so backend cold starts no longer fail #23444
  • [cli/neo] Ensure pulumi neo resolves the same Pulumi access token as pulumi preview when running in-process preview and up operations #23452

Improvements

  • [cli/neo] Treat affirmative replies such as "ok", "approve" and "go ahead" to pulumi neo approval prompts as approvals #23450

Bug Fixes

  • [pcl] Recursively fill schema-declared output fields on resources, so PCL programs that traverse into an optional inner field of a nested output object no longer fail at runtime with an "unsupported attribute" error #23458
  • [pcl] Resolve config variables whose default value is derived from an invoke to the invoke's result instead of an unknown value #23494
  • [programgen/go] double-wrapping of plain values passed to input types when generating Go programs #23418
  • [programgen/go] Fix Go program generation to no longer produce **T when an output traversal lands on an optional struct field, and to emit the correct pulumi.<T>ArrayOutput cast for traversals to slice-typed fields #23458

Features

  • [sdk] Add a read field to customTimeouts so users can configure a timeout for resource read operations #23459

Bug Fixes

  • [sdk] Reject tar entries with path traversal components when extracting archives #23485

... (truncated)

Changelog

Sourced from github.com/pulumi/pulumi/pkg/v3's changelog.

3.246.0 (2026-06-11)

Bug Fixes

  • [backend/diy] Fix backwards incompatible gocloud.dev changes #23525

Features

  • [cli] Add pulumi logs ls to list automatic log files #23449
  • [cli] Add pulumi logs rm to remove automatic log files
  • [cli] Include the list of affected resources (urn, type, name, op, parent) in --output json for preview, up, destroy, and refresh
  • [cli] Support Pulumi projects without a runtime across CLI operations and Automation API project settings #23489

Improvements

  • [cli] Support Ctrl+Z to suspend a running pulumi neo session and restore the transcript on resume with fg pulumi/pulumi#23394
  • [cli] Remove the experimental pulumi ai web command #23517
  • [cli/cloud] Improve the interactive pulumi login prompt wording and coloring #23417
  • [cli/convert] Resolve provider plugins through the Pulumi Registry when converting from a third-party source #23490

Features

  • [cli/do] Add a --stateless flag to pulumi do. create, patch, and delete now require --stateless for the existing direct-provider behavior; the default will switch to a stateful (engine-driven) implementation in a future release
  • [cli/env] Support ephemeral agent auth instructions for ESC API unauthorized errors in detected agent sessions #23402

Bug Fixes

  • [cli/neo] The pulumi neo TUI now adapts its colors to the terminal background instead of hardcoding a dark scheme #23333
  • [cli/neo] Increase the pulumi neo task-creation timeout so backend cold starts no longer fail #23444
  • [cli/neo] Ensure pulumi neo resolves the same Pulumi access token as pulumi preview when running in-process preview and up operations #23452

Improvements

  • [cli/neo] Treat affirmative replies such as "ok", "approve" and "go ahead" to pulumi neo approval prompts as approvals #23450

Bug Fixes

  • [pcl] Recursively fill schema-declared output fields on resources, so PCL programs that traverse into an optional inner field of a nested output object no longer fail at runtime with an "unsupported attribute" error #23458
  • [pcl] Resolve config variables whose default value is derived from an invoke to the invoke's result instead of an unknown value #23494
  • [programgen/go] double-wrapping of plain values passed to input types when generating Go programs #23418
  • [programgen/go] Fix Go program generation to no longer produce **T when an output traversal lands on an optional struct field, and to emit the correct pulumi.<T>ArrayOutput cast for traversals to slice-typed fields #23458

Features

  • [sdk] Add a read field to customTimeouts so users can configure a timeout for resource read operations #23459

Bug Fixes

  • [sdk] Reject tar entries with path traversal components when extracting archives #23485
  • [sdk/go] Applying a transformation to a resource no longer drops the resource's parent in the RegisterResource call #14826

... (truncated)

Commits

Updates github.com/pulumi/pulumi/sdk/v3 from 3.245.0 to 3.246.0

Release notes

Sourced from github.com/pulumi/pulumi/sdk/v3's releases.

v3.246.0

3.246.0 (2026-06-11)

Bug Fixes

  • [backend/diy] Fix backwards incompatible gocloud.dev changes #23525

Features

  • [cli] Add pulumi logs ls to list automatic log files #23449
  • [cli] Add pulumi logs rm to remove automatic log files
  • [cli] Include the list of affected resources (urn, type, name, op, parent) in --output json for preview, up, destroy, and refresh
  • [cli] Support Pulumi projects without a runtime across CLI operations and Automation API project settings #23489

Improvements

  • [cli] Support Ctrl+Z to suspend a running pulumi neo session and restore the transcript on resume with fg pulumi/pulumi#23394
  • [cli] Remove the experimental pulumi ai web command #23517
  • [cli/cloud] Improve the interactive pulumi login prompt wording and coloring #23417
  • [cli/convert] Resolve provider plugins through the Pulumi Registry when converting from a third-party source #23490

Features

  • [cli/do] Add a --stateless flag to pulumi do. create, patch, and delete now require --stateless for the existing direct-provider behavior; the default will switch to a stateful (engine-driven) implementation in a future release
  • [cli/env] Support ephemeral agent auth instructions for ESC API unauthorized errors in detected agent sessions #23402

Bug Fixes

  • [cli/neo] The pulumi neo TUI now adapts its colors to the terminal background instead of hardcoding a dark scheme #23333
  • [cli/neo] Increase the pulumi neo task-creation timeout so backend cold starts no longer fail #23444
  • [cli/neo] Ensure pulumi neo resolves the same Pulumi access token as pulumi preview when running in-process preview and up operations #23452

Improvements

  • [cli/neo] Treat affirmative replies such as "ok", "approve" and "go ahead" to pulumi neo approval prompts as approvals #23450

Bug Fixes

  • [pcl] Recursively fill schema-declared output fields on resources, so PCL programs that traverse into an optional inner field of a nested output object no longer fail at runtime with an "unsupported attribute" error #23458
  • [pcl] Resolve config variables whose default value is derived from an invoke to the invoke's result instead of an unknown value #23494
  • [programgen/go] double-wrapping of plain values passed to input types when generating Go programs #23418
  • [programgen/go] Fix Go program generation to no longer produce **T when an output traversal lands on an optional struct field, and to emit the correct pulumi.<T>ArrayOutput cast for traversals to slice-typed fields #23458

Features

  • [sdk] Add a read field to customTimeouts so users can configure a timeout for resource read operations #23459

Bug Fixes

  • [sdk] Reject tar entries with path traversal components when extracting archives #23485

... (truncated)

Changelog

Sourced from github.com/pulumi/pulumi/sdk/v3's changelog.

3.246.0 (2026-06-11)

Bug Fixes

  • [backend/diy] Fix backwards incompatible gocloud.dev changes #23525

Features

  • [cli] Add pulumi logs ls to list automatic log files #23449
  • [cli] Add pulumi logs rm to remove automatic log files
  • [cli] Include the list of affected resources (urn, type, name, op, parent) in --output json for preview, up, destroy, and refresh
  • [cli] Support Pulumi projects without a runtime across CLI operations and Automation API project settings #23489

Improvements

  • [cli] Support Ctrl+Z to suspend a running pulumi neo session and restore the transcript on resume with fg pulumi/pulumi#23394
  • [cli] Remove the experimental pulumi ai web command #23517
  • [cli/cloud] Improve the interactive pulumi login prompt wording and coloring #23417
  • [cli/convert] Resolve provider plugins through the Pulumi Registry when converting from a third-party source #23490

Features

  • [cli/do] Add a --stateless flag to pulumi do. create, patch, and delete now require --stateless for the existing direct-provider behavior; the default will switch to a stateful (engine-driven) implementation in a future release
  • [cli/env] Support ephemeral agent auth instructions for ESC API unauthorized errors in detected agent sessions #23402

Bug Fixes

  • [cli/neo] The pulumi neo TUI now adapts its colors to the terminal background instead of hardcoding a dark scheme #23333
  • [cli/neo] Increase the pulumi neo task-creation timeout so backend cold starts no longer fail #23444
  • [cli/neo] Ensure pulumi neo resolves the same Pulumi access token as pulumi preview when running in-process preview and up operations #23452

Improvements

  • [cli/neo] Treat affirmative replies such as "ok", "approve" and "go ahead" to pulumi neo approval prompts as approvals #23450

Bug Fixes

  • [pcl] Recursively fill schema-declared output fields on resources, so PCL programs that traverse into an optional inner field of a nested output object no longer fail at runtime with an "unsupported attribute" error #23458
  • [pcl] Resolve config variables whose default value is derived from an invoke to the invoke's result instead of an unknown value #23494
  • [programgen/go] double-wrapping of plain values passed to input types when generating Go programs #23418
  • [programgen/go] Fix Go program generation to no longer produce **T when an output traversal lands on an optional struct field, and to emit the correct pulumi.<T>ArrayOutput cast for traversals to slice-typed fields #23458

Features

  • [sdk] Add a read field to customTimeouts so users can configure a timeout for resource read operations #23459

Bug Fixes

  • [sdk] Reject tar entries with path traversal components when extracting archives #23485
  • [sdk/go] Applying a transformation to a resource no longer drops the resource's parent in the RegisterResource call #14826

... (truncated)

Commits

Updates k8s.io/apimachinery from 0.36.1 to 0.36.2

Commits

Updates k8s.io/client-go from 0.36.1 to 0.36.2

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps(deps): bump the gomod-minor-and-patch group across 1 directory w…
d61dd0e 
…ith 4 updates

Bumps the gomod-minor-and-patch group with 3 updates in the / directory: [github.com/pulumi/pulumi/pkg/v3](https://github.com/pulumi/pulumi), [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) and [k8s.io/client-go](https://github.com/kubernetes/client-go).


Updates `github.com/pulumi/pulumi/pkg/v3` from 3.245.0 to 3.246.0
- [Release notes](https://github.com/pulumi/pulumi/releases)
- [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md)
- [Commits](pulumi/pulumi@v3.245.0...v3.246.0)

Updates `github.com/pulumi/pulumi/sdk/v3` from 3.245.0 to 3.246.0
- [Release notes](https://github.com/pulumi/pulumi/releases)
- [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md)
- [Commits](pulumi/pulumi@v3.245.0...v3.246.0)

Updates `k8s.io/apimachinery` from 0.36.1 to 0.36.2
- [Commits](kubernetes/apimachinery@v0.36.1...v0.36.2)

Updates `k8s.io/client-go` from 0.36.1 to 0.36.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.1...v0.36.2)

---
updated-dependencies:
- dependency-name: github.com/pulumi/pulumi/pkg/v3
  dependency-version: 3.246.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/pulumi/pulumi/sdk/v3
  dependency-version: 3.246.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-minor-and-patch
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 13, 2026
@dependabot
dependabot Bot requested a review from Cre-eD as a code owner June 13, 2026 13:11
@dependabot dependabot Bot added the go Pull requests that update go code label Jun 13, 2026
@github-actions

github-actions Bot commented Jun 13, 2026

Copy link
Copy Markdown

Semgrep Scan Results

Repository: api | Commit: 0374ac4

Check Status Details
✅ Semgrep Pass 0 total findings (no error/warning)

Scanned at 2026-06-13 13:11 UTC

@github-actions

github-actions Bot commented Jun 13, 2026

Copy link
Copy Markdown

Security Scan Results

Repository: api | Commit: 0374ac4

Check Status Details
✅ Secret Scan Pass No secrets detected
✅ Dependencies (Trivy) Pass 0 total (no critical/high)
✅ Dependencies (Grype) Pass 0 total (no critical/high)
📦 SBOM Generated 522 components (CycloneDX)

Scanned at 2026-06-13 13:12 UTC

@Cre-eD Cre-eD closed this Jun 14, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 14, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/go_modules/gomod-minor-and-patch-0b7dc58161 branch June 14, 2026 14:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Cre-eD Cre-eD Awaiting requested review from Cre-eD Cre-eD is a code owner
@smecsia smecsia Awaiting requested review from smecsia smecsia is a code owner
@universe-ops universe-ops Awaiting requested review from universe-ops universe-ops is a code owner
@Laboratory Laboratory Awaiting requested review from Laboratory Laboratory is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Cre-eD