Skip to content

deps(deps): bump the gomod-minor-and-patch group with 6 updates#327

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/gomod-minor-and-patch-d758fac153
Closed

deps(deps): bump the gomod-minor-and-patch group with 6 updates#327
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/gomod-minor-and-patch-d758fac153

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the gomod-minor-and-patch group with 6 updates:

Package From To
github.com/MShekow/directory-checksum 1.4.18 1.4.19
github.com/onsi/gomega 1.41.0 1.42.0
github.com/pulumi/pulumi/pkg/v3 3.245.0 3.246.0
github.com/pulumi/pulumi/sdk/v3 3.245.0 3.246.0
k8s.io/apimachinery 0.36.1 0.36.2
k8s.io/client-go 0.36.1 0.36.2

Updates github.com/MShekow/directory-checksum from 1.4.18 to 1.4.19

Release notes

Sourced from github.com/MShekow/directory-checksum's releases.

v1.4.19

Changelog

  • 7b87b8941aa864643bd6d78b78a44f777680c023 chore(deps): update go toolchain directive to v1.26.4 (#123)
Commits

Updates github.com/onsi/gomega from 1.41.0 to 1.42.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.42.0

1.42.0

Add a set of Claude skill as a marketplace plugin

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.42.0

Add a set of Claude skill as a marketplace plugin

Commits

Updates github.com/pulumi/pulumi/pkg/v3 from 3.245.0 to 3.246.0

Release notes

Sourced from github.com/pulumi/pulumi/pkg/v3's releases.

v3.246.0

3.246.0 (2026-06-11)

Bug Fixes

  • [backend/diy] Fix backwards incompatible gocloud.dev changes #23525

Features

  • [cli] Add pulumi logs ls to list automatic log files #23449
  • [cli] Add pulumi logs rm to remove automatic log files
  • [cli] Include the list of affected resources (urn, type, name, op, parent) in --output json for preview, up, destroy, and refresh
  • [cli] Support Pulumi projects without a runtime across CLI operations and Automation API project settings #23489

Improvements

  • [cli] Support Ctrl+Z to suspend a running pulumi neo session and restore the transcript on resume with fg pulumi/pulumi#23394
  • [cli] Remove the experimental pulumi ai web command #23517
  • [cli/cloud] Improve the interactive pulumi login prompt wording and coloring #23417
  • [cli/convert] Resolve provider plugins through the Pulumi Registry when converting from a third-party source #23490

Features

  • [cli/do] Add a --stateless flag to pulumi do. create, patch, and delete now require --stateless for the existing direct-provider behavior; the default will switch to a stateful (engine-driven) implementation in a future release
  • [cli/env] Support ephemeral agent auth instructions for ESC API unauthorized errors in detected agent sessions #23402

Bug Fixes

  • [cli/neo] The pulumi neo TUI now adapts its colors to the terminal background instead of hardcoding a dark scheme #23333
  • [cli/neo] Increase the pulumi neo task-creation timeout so backend cold starts no longer fail #23444
  • [cli/neo] Ensure pulumi neo resolves the same Pulumi access token as pulumi preview when running in-process preview and up operations #23452

Improvements

  • [cli/neo] Treat affirmative replies such as "ok", "approve" and "go ahead" to pulumi neo approval prompts as approvals #23450

Bug Fixes

  • [pcl] Recursively fill schema-declared output fields on resources, so PCL programs that traverse into an optional inner field of a nested output object no longer fail at runtime with an "unsupported attribute" error #23458
  • [pcl] Resolve config variables whose default value is derived from an invoke to the invoke's result instead of an unknown value #23494
  • [programgen/go] double-wrapping of plain values passed to input types when generating Go programs #23418
  • [programgen/go] Fix Go program generation to no longer produce **T when an output traversal lands on an optional struct field, and to emit the correct pulumi.<T>ArrayOutput cast for traversals to slice-typed fields #23458

Features

  • [sdk] Add a read field to customTimeouts so users can configure a timeout for resource read operations #23459

Bug Fixes

  • [sdk] Reject tar entries with path traversal components when extracting archives #23485

... (truncated)

Changelog

Sourced from github.com/pulumi/pulumi/pkg/v3's changelog.

3.246.0 (2026-06-11)

Bug Fixes

  • [backend/diy] Fix backwards incompatible gocloud.dev changes #23525

Features

  • [cli] Add pulumi logs ls to list automatic log files #23449
  • [cli] Add pulumi logs rm to remove automatic log files
  • [cli] Include the list of affected resources (urn, type, name, op, parent) in --output json for preview, up, destroy, and refresh
  • [cli] Support Pulumi projects without a runtime across CLI operations and Automation API project settings #23489

Improvements

  • [cli] Support Ctrl+Z to suspend a running pulumi neo session and restore the transcript on resume with fg pulumi/pulumi#23394
  • [cli] Remove the experimental pulumi ai web command #23517
  • [cli/cloud] Improve the interactive pulumi login prompt wording and coloring #23417
  • [cli/convert] Resolve provider plugins through the Pulumi Registry when converting from a third-party source #23490

Features

  • [cli/do] Add a --stateless flag to pulumi do. create, patch, and delete now require --stateless for the existing direct-provider behavior; the default will switch to a stateful (engine-driven) implementation in a future release
  • [cli/env] Support ephemeral agent auth instructions for ESC API unauthorized errors in detected agent sessions #23402

Bug Fixes

  • [cli/neo] The pulumi neo TUI now adapts its colors to the terminal background instead of hardcoding a dark scheme #23333
  • [cli/neo] Increase the pulumi neo task-creation timeout so backend cold starts no longer fail #23444
  • [cli/neo] Ensure pulumi neo resolves the same Pulumi access token as pulumi preview when running in-process preview and up operations #23452

Improvements

  • [cli/neo] Treat affirmative replies such as "ok", "approve" and "go ahead" to pulumi neo approval prompts as approvals #23450

Bug Fixes

  • [pcl] Recursively fill schema-declared output fields on resources, so PCL programs that traverse into an optional inner field of a nested output object no longer fail at runtime with an "unsupported attribute" error #23458
  • [pcl] Resolve config variables whose default value is derived from an invoke to the invoke's result instead of an unknown value #23494
  • [programgen/go] double-wrapping of plain values passed to input types when generating Go programs #23418
  • [programgen/go] Fix Go program generation to no longer produce **T when an output traversal lands on an optional struct field, and to emit the correct pulumi.<T>ArrayOutput cast for traversals to slice-typed fields #23458

Features

  • [sdk] Add a read field to customTimeouts so users can configure a timeout for resource read operations #23459

Bug Fixes

  • [sdk] Reject tar entries with path traversal components when extracting archives #23485
  • [sdk/go] Applying a transformation to a resource no longer drops the resource's parent in the RegisterResource call #14826

... (truncated)

Commits

Updates github.com/pulumi/pulumi/sdk/v3 from 3.245.0 to 3.246.0

Release notes

Sourced from github.com/pulumi/pulumi/sdk/v3's releases.

v3.246.0

3.246.0 (2026-06-11)

Bug Fixes

  • [backend/diy] Fix backwards incompatible gocloud.dev changes #23525

Features

  • [cli] Add pulumi logs ls to list automatic log files #23449
  • [cli] Add pulumi logs rm to remove automatic log files
  • [cli] Include the list of affected resources (urn, type, name, op, parent) in --output json for preview, up, destroy, and refresh
  • [cli] Support Pulumi projects without a runtime across CLI operations and Automation API project settings #23489

Improvements

  • [cli] Support Ctrl+Z to suspend a running pulumi neo session and restore the transcript on resume with fg pulumi/pulumi#23394
  • [cli] Remove the experimental pulumi ai web command #23517
  • [cli/cloud] Improve the interactive pulumi login prompt wording and coloring #23417
  • [cli/convert] Resolve provider plugins through the Pulumi Registry when converting from a third-party source #23490

Features

  • [cli/do] Add a --stateless flag to pulumi do. create, patch, and delete now require --stateless for the existing direct-provider behavior; the default will switch to a stateful (engine-driven) implementation in a future release
  • [cli/env] Support ephemeral agent auth instructions for ESC API unauthorized errors in detected agent sessions #23402

Bug Fixes

  • [cli/neo] The pulumi neo TUI now adapts its colors to the terminal background instead of hardcoding a dark scheme #23333
  • [cli/neo] Increase the pulumi neo task-creation timeout so backend cold starts no longer fail #23444
  • [cli/neo] Ensure pulumi neo resolves the same Pulumi access token as pulumi preview when running in-process preview and up operations #23452

Improvements

  • [cli/neo] Treat affirmative replies such as "ok", "approve" and "go ahead" to pulumi neo approval prompts as approvals #23450

Bug Fixes

  • [pcl] Recursively fill schema-declared output fields on resources, so PCL programs that traverse into an optional inner field of a nested output object no longer fail at runtime with an "unsupported attribute" error #23458
  • [pcl] Resolve config variables whose default value is derived from an invoke to the invoke's result instead of an unknown value #23494
  • [programgen/go] double-wrapping of plain values passed to input types when generating Go programs #23418
  • [programgen/go] Fix Go program generation to no longer produce **T when an output traversal lands on an optional struct field, and to emit the correct pulumi.<T>ArrayOutput cast for traversals to slice-typed fields #23458

Features

  • [sdk] Add a read field to customTimeouts so users can configure a timeout for resource read operations #23459

Bug Fixes

  • [sdk] Reject tar entries with path traversal components when extracting archives #23485

... (truncated)

Changelog

Sourced from github.com/pulumi/pulumi/sdk/v3's changelog.

3.246.0 (2026-06-11)

Bug Fixes

  • [backend/diy] Fix backwards incompatible gocloud.dev changes #23525

Features

  • [cli] Add pulumi logs ls to list automatic log files #23449
  • [cli] Add pulumi logs rm to remove automatic log files
  • [cli] Include the list of affected resources (urn, type, name, op, parent) in --output json for preview, up, destroy, and refresh
  • [cli] Support Pulumi projects without a runtime across CLI operations and Automation API project settings #23489

Improvements

  • [cli] Support Ctrl+Z to suspend a running pulumi neo session and restore the transcript on resume with fg pulumi/pulumi#23394
  • [cli] Remove the experimental pulumi ai web command #23517
  • [cli/cloud] Improve the interactive pulumi login prompt wording and coloring #23417
  • [cli/convert] Resolve provider plugins through the Pulumi Registry when converting from a third-party source #23490

Features

  • [cli/do] Add a --stateless flag to pulumi do. create, patch, and delete now require --stateless for the existing direct-provider behavior; the default will switch to a stateful (engine-driven) implementation in a future release
  • [cli/env] Support ephemeral agent auth instructions for ESC API unauthorized errors in detected agent sessions #23402

Bug Fixes

  • [cli/neo] The pulumi neo TUI now adapts its colors to the terminal background instead of hardcoding a dark scheme #23333
  • [cli/neo] Increase the pulumi neo task-creation timeout so backend cold starts no longer fail #23444
  • [cli/neo] Ensure pulumi neo resolves the same Pulumi access token as pulumi preview when running in-process preview and up operations #23452

Improvements

  • [cli/neo] Treat affirmative replies such as "ok", "approve" and "go ahead" to pulumi neo approval prompts as approvals #23450

Bug Fixes

  • [pcl] Recursively fill schema-declared output fields on resources, so PCL programs that traverse into an optional inner field of a nested output object no longer fail at runtime with an "unsupported attribute" error #23458
  • [pcl] Resolve config variables whose default value is derived from an invoke to the invoke's result instead of an unknown value #23494
  • [programgen/go] double-wrapping of plain values passed to input types when generating Go programs #23418
  • [programgen/go] Fix Go program generation to no longer produce **T when an output traversal lands on an optional struct field, and to emit the correct pulumi.<T>ArrayOutput cast for traversals to slice-typed fields #23458

Features

  • [sdk] Add a read field to customTimeouts so users can configure a timeout for resource read operations #23459

Bug Fixes

  • [sdk] Reject tar entries with path traversal components when extracting archives #23485
  • [sdk/go] Applying a transformation to a resource no longer drops the resource's parent in the RegisterResource call #14826

... (truncated)

Commits

Updates k8s.io/apimachinery from 0.36.1 to 0.36.2

Commits

Updates k8s.io/client-go from 0.36.1 to 0.36.2

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps(deps): bump the gomod-minor-and-patch group with 6 updates
73f130a 
Bumps the gomod-minor-and-patch group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/MShekow/directory-checksum](https://github.com/MShekow/directory-checksum) | `1.4.18` | `1.4.19` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.41.0` | `1.42.0` |
| [github.com/pulumi/pulumi/pkg/v3](https://github.com/pulumi/pulumi) | `3.245.0` | `3.246.0` |
| [github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi) | `3.245.0` | `3.246.0` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.36.1` | `0.36.2` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.1` | `0.36.2` |


Updates `github.com/MShekow/directory-checksum` from 1.4.18 to 1.4.19
- [Release notes](https://github.com/MShekow/directory-checksum/releases)
- [Commits](MShekow/directory-checksum@v1.4.18...v1.4.19)

Updates `github.com/onsi/gomega` from 1.41.0 to 1.42.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.41.0...v1.42.0)

Updates `github.com/pulumi/pulumi/pkg/v3` from 3.245.0 to 3.246.0
- [Release notes](https://github.com/pulumi/pulumi/releases)
- [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md)
- [Commits](pulumi/pulumi@v3.245.0...v3.246.0)

Updates `github.com/pulumi/pulumi/sdk/v3` from 3.245.0 to 3.246.0
- [Release notes](https://github.com/pulumi/pulumi/releases)
- [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md)
- [Commits](pulumi/pulumi@v3.245.0...v3.246.0)

Updates `k8s.io/apimachinery` from 0.36.1 to 0.36.2
- [Commits](kubernetes/apimachinery@v0.36.1...v0.36.2)

Updates `k8s.io/client-go` from 0.36.1 to 0.36.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.1...v0.36.2)

---
updated-dependencies:
- dependency-name: github.com/MShekow/directory-checksum
  dependency-version: 1.4.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/pulumi/pulumi/pkg/v3
  dependency-version: 3.246.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/pulumi/pulumi/sdk/v3
  dependency-version: 3.246.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-minor-and-patch
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 15, 2026
@dependabot
dependabot Bot requested a review from Cre-eD as a code owner June 15, 2026 16:57
@dependabot dependabot Bot added the go Pull requests that update go code label Jun 15, 2026
@github-actions

github-actions Bot commented Jun 15, 2026 •
edited
Loading

Copy link
Copy Markdown

Semgrep Scan Results

Repository: api | Commit: 6657dfe

Check Status Details
⚠️ Semgrep Warning 1 warning(s), 1 total

Scanned at 2026-06-20 11:33 UTC

@github-actions

github-actions Bot commented Jun 15, 2026 •
edited
Loading

Copy link
Copy Markdown

Security Scan Results

Repository: api | Commit: 6657dfe

Check Status Details
✅ Secret Scan Pass No secrets detected
✅ Dependencies (Trivy) Pass 0 total (no critical/high)
✅ Dependencies (Grype) Pass 0 total (no critical/high)
📦 SBOM Generated 522 components (CycloneDX)

Scanned at 2026-06-20 11:34 UTC

@Cre-eD Cre-eD added the ci-run label Jun 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 20, 2026

Copy link
Copy Markdown
Contributor Author

The group that created this PR has been removed from your configuration.

@dependabot dependabot Bot closed this Jun 20, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/gomod-minor-and-patch-d758fac153 branch June 20, 2026 13:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@smecsia smecsia smecsia approved these changes
@Cre-eD Cre-eD Cre-eD approved these changes
@universe-ops universe-ops Awaiting requested review from universe-ops universe-ops is a code owner
@Laboratory Laboratory Awaiting requested review from Laboratory Laboratory is a code owner

Assignees

No one assigned

Labels

ci-run dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@smecsia @Cre-eD